Privacy Policy

Feasible Lab ("Company," "we," or "us") operates jammae (https://jammae.space) (the "Service"), an AI-powered tool that suggests one makeup combination to try from the cosmetics and tools you already own. This Privacy Policy explains what information the Service processes, how it is used, and the rights available to you as a user.

Article 1. Information We Collect

• –

  Photos you submit. Photos of your cosmetics and tools, and a face photo if you choose to add one (a face photo is optional), that you capture or upload are processed solely to generate your suggestion. They are held in memory for the duration of the request and are never written to disk or any database.

• –

  Analysis results. The text output generated by the AI (item names, tags, the suggestion, and its steps and tips) is stored under a randomly generated session ID so we can serve your result page and later evaluate model quality. If you add a face photo, the stored result also includes the AI's short text description of what it observed in that photo and, for some result types, a numeric score; the face photo itself is never stored. This record does not contain your photos or any directly identifying information.

• –

  Feedback. If you rate a result (like/dislike) and optionally select reasons or leave a comment, that feedback is stored together with the associated session ID.

• –

  Language requests. If you ask for jammae in another language, the language you select and the time of the request are stored, without a session ID, so we can decide which languages to add.

• –

  Item analysis cache. The AI's text analysis of your cosmetics and tools (not the photos, and never any face analysis) is cached for 30 minutes so the same items are not analyzed twice when you add a face photo right after.

• –

  Information stored on your device. Your browser keeps your five most recent results (the suggestion, detected item names, the AI's short memo and, where present, the score), your most recent result, your progress through the steps, which results you have rated, your language setting, which guides you have seen, and your cookie choice. This stays in your browser's local storage; we cannot access it, and you can remove it at any time by clearing this site's data in your browser.

• –

  Automatically collected data. Your IP address is used transiently to enforce a rate limit on the analysis endpoint and is not stored alongside your session or feedback data. Page visits and usage are measured with cookies and similar tools as described in Article 4.

Article 2. How We Use Information

We use the information above to: (a) generate and display your AI analysis result; (b) prevent abuse of the analysis endpoint; (c) evaluate and improve the AI prompts and models based on aggregated feedback; (d) decide which languages to support; and (e) understand how the site is used and whether our ads bring visitors. The Service does not currently serve third-party advertising.

Article 3. Legal Basis and Purpose Limitation

Processing described in Article 2 is carried out on the basis of providing the Service you request (photo analysis) and, for analytics and advertising cookies, your consent where required. We do not use your information for any purpose beyond what is described in this Policy.

Article 4. Cookies and Consent

jammae uses cookies and similar tools from Google (Analytics, Tag Manager), Meta (Meta Pixel) and Vercel (Web Analytics, Speed Insights) to understand how the site is used and whether our ads bring visitors. They collect usage data such as pages visited and device or browser type. We see this data only in aggregate, and it does not tell us who you are. You can turn analytics and advertising cookies off at any time via the "Cookie Preferences" control in the site footer.

Article 5. Third-Party Service Providers

• –

  Google Gemini API — processes submitted photos to generate the AI analysis. Subject to Google's own privacy terms.

• –

  Google Analytics / Google Tag Manager — website usage analytics; see Article 4.

• –

  Meta Platforms (Meta Pixel) — ad measurement; see Article 4. Subject to Meta's own privacy terms.

• –

  Upstash (Redis) — stores session analysis logs and feedback under a random session ID, language requests, and the 30-minute item analysis cache.

• –

  Vercel — hosting infrastructure and standard access logs, plus Web Analytics and Speed Insights; see Article 4.

Article 6. Data Retention

• –

  Photos: deleted immediately after the analysis response is generated; never persisted.

• –

  Session logs (analysis results and feedback): retained to evaluate and improve the Service. They have no automatic expiry and are kept until we delete them; the review index lists only the most recent 1,000 sessions, and older sessions drop out of that index. You can ask us to delete the record for a session ID you hold (see Article 9).

• –

  Item analysis cache: deleted automatically 30 minutes after it is created.

• –

  Language requests: the count per language is kept until we delete it; the log of individual requests keeps only the most recent 1,000 entries.

• –

  Information stored on your device (including your cookie consent choice): retained in your browser's local storage until you clear it; the result history keeps only your five most recent results.

Article 7. Data Security

Because no photo is ever written to persistent storage, the risk of exposure of that data is minimized by design. Session logs and feedback do not contain directly identifying information, and access to the underlying data store is restricted to the Company. A result link that contains your session ID (for example, the link you send to yourself to reopen a result) lets anyone who has it open that result, though never your feedback comment, so share it only with people you trust.

Article 8. Children's Privacy

The Service is intended for users aged 14 and older. We do not knowingly collect information from children under 14. If you believe a child under 14 has used the Service in a way that raises a concern, contact us using the details in Article 12.

Article 9. Your Rights and Choices

You may disable cookies through your browser settings or the "Cookie Preferences" control; deny camera permission to prevent submitting photos (this will limit access to the analysis feature); or contact us at the address in Article 12 to ask about, or ask us to delete, data associated with a session ID you retain.

Article 10. International Data Transfers

Because the Service uses Google (Gemini API, Analytics), Meta (Meta Pixel) and Upstash/Vercel infrastructure, your data may be processed on servers located outside your country of residence.

Article 11. Changes to this Policy

We may revise this Policy to reflect changes in the Service or applicable law. The "Last Updated" date above will be updated accordingly.

Article 12. Contact