Privacy · 5 min

What a private, on-device hair color app actually means

Published August 3, 2026

“Private” can become an empty promise unless it names the exact boundary. In Local Hair Color, the photo workflow runs on the iPhone or iPad. Purchases, support email, and this website are separate activities with separate network behavior.

The selected photo stays in the app’s local workflow

You choose one image through Apple’s system photo picker. That picker lets the app receive the image you selected without requesting broad access to the entire photo library. The app decodes that image on the device and does not send it to an app-operated processing server.

This matters because a hair color preview does not need a cloud account or a remote job queue. The photograph can move directly from the system picker into local processing and then into the editor.

The hair model is bundled with the app

The automatic hair selection uses a TensorFlow Lite model included in the installed app. Segmentation runs locally, producing the starting selection used by the color renderer. Changing from copper to burgundy or adjusting intensity does not upload the photo or ask a remote model to process it again.

Manual Add Hair and Remove Hair strokes also remain part of the in-memory editing session. They are not saved to a user profile, synchronized to another device, or used to train a model.

The app does not keep an editor archive

Local Hair Color does not persist source photos, masks, thumbnails, filenames, photo identifiers, dimensions, model output, or editor documents. Replacing the photo or leaving the editor ends that session. This keeps the product focused, although it also means there is no project history to reopen later.

Export creates a new, cleaner copy

When you decide to save, the app writes a new image rather than altering the source asset. It removes GPS location, original filename, camera serial, and unrelated source metadata. The app requests narrow Add Photos access only when saving requires it.

Removing metadata does not make the visible content anonymous. A face, room, tattoo, reflection, or other detail can still identify a person or place. Review the image itself before sharing it.

The app has no analytics, ads, or tracking SDK

The iPhone and iPad app does not include product analytics, advertising, tracking, telemetry, or a third-party crash-reporting SDK. The developer therefore does not receive a stream of app events about which photo you chose, which colors you tried, or what you exported.

Purchases and restores are the network exception

Weekly and yearly subscriptions and the lifetime purchase are handled through Apple’s StoreKit. Loading products, completing a purchase, verifying current access, or restoring a prior purchase may require a network connection. Apple processes the Apple Account and payment relationship under its own terms. The app receives verified entitlement status so it can decide whether the photo workflow is available.

Calling the photo editor on-device does not mean StoreKit is offline. The accurate claim is narrower: your photo is not uploaded for selecting hair, recoloring, correcting, comparing, or exporting.

This website is separate from the app

LocalHairColor.com is an informational website and does not accept photo uploads. It offers optional Google Analytics only after a visitor explicitly allows it. If allowed, analytics can measure ordinary website information such as pages visited, referral sources, and device categories; it does not receive an app photo or editing session. Global Privacy Control and Do Not Track keep analytics off.

Email is an intentional disclosure outside the app

If you contact support, your email provider transmits the address, message, and attachments you choose. Do not attach a source photo unless you intentionally want support to receive it. A useful first message can usually include the device model, operating-system version, and a written description without the photo.