Skip to content

Privacy Policy

Last updated: October 28, 2026

1. Overview

Ollie ("we", "our", "us") offers face tools for fun: a celebrity lookalike finder, a face compare tool, a face symmetry test and the Ollie Stylist, which suggests haircuts and outfits for your face and can try them on a photo of you (one credit per try-on). Accounts get a few free credits; more are available as paid plans or one-time credit packs. Ollie is run by the Ollie team in British Columbia, Canada, which is responsible for the data described here. This policy explains what data we collect, how we use it, who we share it with, and your rights.

2. Your Photo and Face Data

When you upload a photo, it is sent through our website to our matching server. There it is used to find your face and turn it into a numerical "fingerprint", which is compared with the fingerprints of the celebrity photos in our database. We do not store, save, log, or retain your photo, your face fingerprint, or your results. The photo is held in memory only while your search runs and is discarded when it finishes. We do not use your photos to train or improve our model.

A face fingerprint can count as biometric data under the laws of some places. Before your photo is sent, we ask you to tick a box to consent to this processing, for the sole purpose of showing you your result. If you do not consent, do not tick the box and your photo is not sent. Only upload photos of yourself, or of people who have agreed to it.

Share cards: if you make a card to share your match, it is created entirely in your browser. Nothing is uploaded to us or stored. Your own photo appears on the card next to your match unless you untick “Include my photo”. The card only leaves your device if you share it.

Face scans on your device (Ollie Stylist and the face symmetry test): these measure your face in your own browser, using Google's open-source MediaPipe software. Your camera feed and photo are not uploaded to us for this. Only the result, such as your face shape, is used to show your recommendations, and nothing is stored on our servers. The Stylist keeps one still frame from the scan in your browser so you can use it for the AI try-on; it is gone when you leave the page.

The looksmax face rating: the photo is measured in your browser the same way and is never uploaded. Only the measurements (the positions of 478 points on your face, as numbers) are sent to our server to work out your scores; they are used in memory to return your result and are not stored.

AI try-on: if you are signed in, tick the consent box and press "Try this look on me" (one credit), your photo and the items you chose are sent through our server to an AI image model on Google Cloud, which returns an edited preview of you wearing the look. We do not store your photo or the preview; they go back to your browser only. We ask Google not to store them, and Google processes them under its Google Cloud terms. If you do not tick the box, nothing is sent.

Using Ollie inside ChatGPT: we also offer Ollie as apps inside ChatGPT (celebrity lookalike, face symmetry and stylist). When you use one, ChatGPT passes the photo you gave it to our server through a temporary link so we can run the same analysis. We handle it exactly as above: it is used in memory only, is never stored, saved, logged or used to train our model, and is discarded when the result is ready. We measure your face's geometry (its "fingerprint" or the positions of facial landmarks), which can count as biometric data; by using the app you consent to this, solely to return your result. The photo also passes through OpenAI, who run ChatGPT under their own privacy policy. Our ChatGPT apps never try to identify, name or find a stranger, and are only for a photo of yourself.

3. Data We Collect

  • Account data: If you create an account, we receive your email address and, if you use Google sign-in, the basic profile details Google shares with us (such as your name). Accounts are managed by our provider Supabase.
  • Your signup choices: When you sign up, we record that you agreed to our Terms of Service (which require you to be 18 or older) and this Privacy Policy, with the date and the version you agreed to, and whether you chose to receive emails from us.
  • Saved outfits and API keys: If you save an outfit, we store your choices (the items, colours and settings, not a photo of you) with your account. If you create an API key, we store only a scrambled version (a hash) of it, its name and its first few characters, so we can check it without being able to read it.
  • Purchases: If you buy a plan or a credit pack, payment is handled by Stripe, and Stripe's Link service acts as the merchant of record (the seller). We never see or store your card number. Stripe and Link receive your email address, name and billing address to process the payment, calculate and collect tax, prevent fraud and give you payment support, under their own privacy policies. Stripe tells us your customer ID, what you bought, and whether a plan is active or a payment was refunded or disputed, and we store that with your account to give you your credits and plan.
  • Credits: We keep your credit balance and a record of each change to it (credits added by a purchase or plan, used by a tool, refunded after a failed result, or removed after a refund or chargeback), with the time and the tool, so your balance is correct and to prevent abuse. We do not record your photo or the result.
  • Email list: Only if you tick the box to receive emails when you sign up, enter your email address in one of our mailing-list forms (no account needed), or asked to hear about paid plans, we keep your email address on our email list with the date you subscribed, the wording you agreed to, and the date you unsubscribe if you do. If you join from your account to get the mailing-list discount, we also note on your account that it has the discount.
  • Search records: To enforce free-search limits and prevent abuse, we record each search with the time, your account ID (or, for visitors without an account, an identifier derived from your IP address) and your IP address. We do not record the photo or the result. Search records are deleted automatically after 90 days.
  • Abuse protection: To stop automated or abusive use, we count signs of abuse (for example, far too many requests, or making many accounts to collect free credits) against your account or IP address. Repeated abuse can get an account suspended, and the network it used blocked for 24 hours. These records follow the same 90-day deletion as search records. If you think your account was suspended by mistake, email support@ollieml.com.
  • Website analytics: We use Cloudflare Web Analytics, which does not use cookies or track you across sites. It records the page you visited, the page that linked you there, your browser and device type, your country, and how fast the page loaded. We also use Google Analytics, which records the pages you visit, what you do in our tools (for example, that you ran a search or opened a product link, never the photo or the result), how you arrived, your approximate location (from your IP address), your browser and device, and how you use the site, so we can see which pages are useful.
  • Advertising: Some pages show ads served by Google AdSense. Google and its partners use cookies and similar technologies to serve ads, measure them and, where allowed, show ads based on your visits to this and other websites. Google's use of advertising cookies lets it and its partners serve ads based on those visits. You can turn off personalised ads in Google's Ad Settings, or opt out of many third-party vendors at aboutads.info. In the European Economic Area, the UK and Switzerland we ask for your consent before personalised ads are shown. How Google uses this data: How Google uses information from sites that use its services. Ads never use your photo or your results, which are not stored.
  • Server logs: Our hosting provider may log standard technical data (IP address, browser type, pages requested) for security and performance.
  • Cookies and local storage: We store only what is needed to keep you signed in, plus your signup choices for a moment while you sign in with Google. We also remember on your device that you ticked the photo consent box, so you don't have to tick it every time. Google Analytics also sets cookies (named _ga) that recognise a returning browser. In the European Economic Area, the UK and Switzerland these cookies are off, and Google Analytics measures visits without them. Google AdSense sets advertising cookies as described under Advertising above; in the European Economic Area, the UK and Switzerland only after you agree. If you click a product link and go to a store, that store or its affiliate network may set its own cookies to record that you came from Ollie (see Shopping links below).

4. How We Use Your Data

We use your data only to:

  • Run the matching service and show you your results
  • Manage your account and enforce search limits
  • Take payments for plans and credit packs, give you your credits and features, handle refunds and chargebacks, and keep the records tax law requires
  • Keep a record of what you agreed to when you signed up
  • Send you emails about new Ollie features and updates, only if you opted in
  • Protect the service against abuse and security threats
  • Understand, in aggregate, which pages are visited and how fast they load
  • Respond to your questions and requests

We do not sell or rent your data. Ads on the site are served by Google AdSense (see Advertising above); we never share your photos, results or email address with advertisers. We may still send you messages you need to use your account, such as an email to confirm your address, whether or not you joined the email list.

5. Emails and Unsubscribing

Joining the email list is optional and is never pre-selected. You can join by ticking the box when you sign up, or through the mailing-list form, which doesn't need an account. If you join, we may send occasional emails about new Ollie features and updates. Every email includes an unsubscribe link that takes you off the list straight away, and you can also unsubscribe at any time by emailing us at support@ollieml.com. We will act on your request within 10 business days. If we use an email delivery service to send them, it receives your email address only for that purpose.

6. Who We Share Data With

We use these service providers, who process data on our behalf to run the service:

  • Modal: runs our matching server, which briefly handles your photo in memory while it searches.
  • Cloudflare: hosts the website, delivers pages to you, and provides cookieless website analytics.
  • Supabase: stores account data, your signup choices, the email list, and search records.
  • Google: if you choose "Continue with Google", Google authenticates you and shares your basic profile details with us. We use that information only to sign you in and manage your account. Google also provides Google Analytics (see Website analytics above), Google AdSense ads (see Advertising above) and, through Google Cloud, the AI model that makes AI try-on previews (see AI try-on above).
  • Stripe and Link: process payments, subscriptions, refunds and receipts for plans and credit packs. Stripe's Link service is the merchant of record for these purchases: it calculates and collects sales tax, VAT or GST, screens payments for fraud and answers payment questions. They handle your payment details under their own privacy policies.
  • OpenAI: if you use Ollie through one of our apps in ChatGPT, OpenAI runs ChatGPT and passes the photo you gave it to our server so we can return your result. OpenAI handles your use of ChatGPT under its own privacy policy.

Shopping links: the Stylist links to products on other stores. Some links are affiliate links, which means the store may pay us a commission if you buy. When you click one, you leave Ollie, and the store and its affiliate network see your visit under their own privacy policies. We do not send them your photo, your face data or your account details.

We may also disclose data if the law requires it.

7. Where Your Data Is Processed

Our providers operate in the United States and other countries, so your data may be processed outside the country where you live. By using Ollie you understand this transfer.

8. Legal Basis

Where privacy law such as the GDPR applies, we process your photo and face data, including for the AI try-on, based on your consent (the box you tick before it is sent), and your email address for our email list based on your consent (by ticking the box at signup or submitting the mailing-list form). We process account data, your signup choices, saved outfits and purchase records to provide the service you asked for and to keep a record of your agreement, purchase records also to meet our tax and accounting obligations, and search records, logs and website analytics based on our legitimate interest in preventing abuse, keeping the service secure and understanding how the site is used. You can withdraw consent at any time: stop uploading photos (we keep none to delete), or unsubscribe from emails.

9. How Long We Keep Data

  • Photos, face fingerprints, face scans, AI try-on previews and results: not kept. They are discarded when your search or preview finishes.
  • Saved outfits and API keys: kept until you delete them or your account.
  • Credits: your balance and its change history are kept while you have an account and deleted with it.
  • Purchase records: your plan and Stripe customer ID are kept while you have an account. Stripe and we keep transaction records (amount, date, plan, country) for as long as tax and accounting law requires, which in Canada is usually six years, even if you delete your account. Deleting your account also cancels any active subscription.
  • Account data and signup choices: kept until you ask us to delete your account.
  • Email list: kept until you unsubscribe or delete your account. After you unsubscribe we keep only the record that you did, so we don't email you again.
  • Search records: deleted automatically after 90 days, or sooner if you ask us to delete your account.
  • Website analytics: kept by Cloudflare in aggregate form for its standard retention period. Google Analytics keeps visit data for the retention period set in our Google Analytics account (2 months by default).
  • Server logs: kept by our hosting provider for its standard log period.

10. The Celebrity Database

Our matching database contains, for well-known living adult public figures:

  • Photos from Wikimedia Commons, used under their free licenses (such as public domain, CC0, Creative Commons Attribution and Attribution-ShareAlike). Each photo is shown with its photographer and license.
  • Numerical face fingerprints computed from those photos.
  • A few of these photos also appear, credited, in the example lookalike result on our pricing page. That example was made by searching with an AI-generated photo, not a photo of a real person.
  • Public information from Wikidata: name, a short description of what the person is known for, and gender as recorded there (used only to filter matches by gender), and what the person is best known for (used for the Actors, Singers and Footballers filters). We never estimate a celebrity's gender from their photos.

If you are in our database, or you represent someone who is, or you own a photo we show, and you want the data or photo removed, email us at the address below and we will remove it promptly.

11. Age Requirement

Ollie is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has used Ollie or given us data, contact us and we will delete it promptly.

12. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Correct it or request that we delete it (including your account)
  • Object to or restrict processing, or withdraw your consent, including unsubscribing from emails
  • Receive a copy of your data in a portable format
  • Complain to your local data protection authority (in Canada, the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia)

To exercise any of these rights, email us at the address below. We aim to reply within 30 days.

13. Security

We use reasonable technical and organisational measures to protect data, including encrypted connections and limited access: signup choices and the email list can only be read or changed by our server, never by other visitors. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

14. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. If a change affects how we use data you have already given us, we will ask for your consent again where the law requires it.

15. Contact

For privacy questions or requests, contact us at support@ollieml.com.