Privacy Policy — Born To Bronze

Last updated: May 7, 2026 | Effective date: May 7, 2026

Born To Bronze (“the App”, “we”, “us”) is the official mobile application of the Eda Taşpınar self-tanning product line. It lets users virtually try Eda Taşpınar self-tanning products on their own face using the device camera or a selected photo. This policy explains what data we process, how face data is handled, where it is stored and what rights users have. It applies globally and complies with Apple App Store Review Guideline 5.1.1, GDPR and Turkish KVKK (Law No. 6698).

Türkçe Özet: Born To Bronze, Eda Taşpınar markasının bronzlaştırıcı ürünlerini yüzünüzde sanal olarak denemeniz için kamera ve galeri erişimi kullanır. Yüz verileri yalnızca cihazınızda gerçek zamanlı işlenir, sunucularımıza yüklenmez, üçüncü taraflarla paylaşılmaz ve saklanmaz.

1. Data We Collect

1.1 Information You Provide

Photos you explicitly select from your photo library.
Photos you save to your library after editing (only when you tap “Save”).
Feedback or support messages you send to us.

1.2 Information Collected Automatically

Device model, operating system version, app version, language and region.
Anonymous usage metrics (screens viewed, feature taps) to improve the product.
Crash and performance data via Sentry (stack traces, device type). This does not include photos, camera frames or face data.

1.3 Information We Do NOT Collect

Location data
Microphone audio
Contacts, calendar, health or financial data
Face recognition templates, face prints or biometric identifiers

2. Face Data

Born To Bronze uses on-device face detection to correctly place the tanning effect on the user’s face (forehead, cheeks, chin area). The following section directly answers Apple App Review’s questions about face data.

Important note: The features named “Real Time Face Effect” and “Skin Effect” inside the app are visual color filters only. They do not perform face recognition, biometric identification, or any medical or dermatological skin analysis. The App does not collect, derive, or store any such data.

2.1 What face data does the app collect?

The App performs real-time face contour detection on the live camera preview or a photo you pick from your library, using the on-device Google ML Kit face detector bundled via the react-native-vision-camera-face-detector library. The detector produces temporary geometric contour points (face outline, cheeks, eyes, eyebrows, lips) that are used to build a clipping mask for the tanning filter.

The App does not collect, compute or store face embeddings, face prints, Face ID data, biometric templates or any identifier capable of recognizing a person. No face data leaves the device.

2.2 What is the face data used for?

Determining where to draw the virtual self-tan color so it only covers skin regions and avoids eyes, eyebrows, nostrils and lips.
Adjusting the intensity and spread of the effect to the size of the user’s face in the frame.

The contour data exists only for the duration of a single frame (milliseconds) and is overwritten by the next frame. Nothing about the user’s face is persisted.

2.3 Is face data shared with any third parties? Where is it stored?

No. Face data is never shared with any third party, advertising network, analytics provider or backend server. It is never written to disk, never uploaded and never backed up. All face processing happens locally on the user’s device using on-device machine learning models.

2.4 How long is face data retained?

Face contour data is retained only in volatile memory for the duration of a single video frame or photo preview (typically less than 50 milliseconds) and is discarded immediately after the filter is rendered. Retention time: zero persistent storage.

2.5 User controls and where face data handling is described

The full description of collection, use, disclosure, sharing and retention of face data is in Section 2 (Face Data) of this document, specifically subsections 2.1 through 2.5. You can revoke camera access at any time from your device’s Settings app, which immediately stops any face contour processing by the App.

Quote from policy (for App Review): “Born To Bronze performs real-time face contour detection entirely on the device, either on the live camera preview or on a photo chosen by the user. The Google ML Kit Face Detection library is used to obtain 2D (x, y) coordinates representing the face outline, eye, eyebrow, and lip regions. These coordinates exist only in volatile memory for the duration of a single frame (approximately 50 ms) and are overwritten when the next frame is processed. This data is used solely to clip the tanning filter to skin regions. Face data is never transmitted to any third party, uploaded to our servers, written to disk, or retained for backup or analytics purposes.”

3. Camera and Photo Library Access

Camera: Used only while the real-time try-on screen is open. Frames are processed on-device and never uploaded.
Photo Library (read): Used only when you tap the gallery button to choose a photo to apply the effect on. We receive only the photos you explicitly pick.
Photo Library (add): Used only when you tap “Save” to export the edited image back to your library.

4. Legal Basis for Processing

Under GDPR, processing is based on (a) your explicit consent given through iOS / Android permission dialogs and (b) legitimate interest in providing the core functionality you requested. Under KVKK, processing is based on explicit consent (açık rıza) and necessity for the performance of the service.

5. Third-Party Services

Sentry — crash reporting. Receives device model, OS, app version and anonymized stack traces. Does not receive photos or face data.
Expo / EAS — build and over-the-air update delivery. Does not receive user content.
Google ML Kit (on-device) — bundled face detection library that runs locally. No network calls.

6. Data Security

Network communications with our servers use TLS 1.2+. Account data, if any, is stored encrypted at rest. Face data never reaches our servers.

7. Children

The App is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has used the App, please contact us and we will delete any associated data.

8. Your Rights

Depending on your jurisdiction (GDPR, KVKK, CCPA) you have the right to access, rectify, delete, restrict processing, object to processing and port your personal data. You may revoke camera and photo library permissions at any time from your device settings. To exercise these rights, contact us using the details below.

9. Changes to This Policy

We may update this policy to reflect changes in the App or applicable law. The “Last updated” date at the top shows the current version. Material changes will be communicated through the App.

10. Contact

Data Controller: Eda Taşpınar
Email: [email protected]
Website: https://www.edataspinar.com