Virtual Makeup Privacy Index 2026
A source-linked review of how beauty AI tools disclose photo, face data, retention, deletion, AI use, and vendors.
What editors can take from this report
This index measures public privacy transparency. It does not inspect backend systems, verify every deployment, or rank product quality. The useful signal is whether a reader can find clear answers before uploading a face photo.
Key findings
The pattern is not simply "private" or "not private." Public notices vary in the exact promises they make about processing location, retention windows, model improvement, and vendor routing.
Retention language is the strongest public signal.
The most useful policies state whether virtual try-on happens on device, whether uploaded media is deleted after the task, or whether server logs keep image data for a defined period.
AI use needs exact wording.
Model training, internal research, service improvement, and generative AI retention are different claims. The table keeps those distinctions visible.
SDK privacy is not the full deployment story.
A privacy-preserving SDK can be embedded inside a merchant flow that adds account data, analytics, or separate vendor processing.
Disclosure coverage
Each check below counts how many reviewed profiles clearly disclosed that topic in public materials on the review date.
Photo or face data processing is described
Retention timing or on-device processing is stated
A deletion or privacy request path is stated
AI training, model improvement, or research use is stated or ruled out
Third-party processing, sharing, or no-server processing is stated
Disclosure matrix
The matrix is a compact reading aid for outreach and citation. The full notes and source links remain in the score table.
Methodology and limits
We reviewed public privacy policies, AI terms, biometric sections, and help-center statements available on the review date. Each clear observable disclosure is worth one point.
- Photo or face data processing is described
- Retention timing or on-device processing is stated
- A deletion or privacy request path is stated
- AI training, model improvement, or research use is stated or ruled out
- Third-party processing, sharing, or no-server processing is stated
Score table
Scores reflect whether each policy topic is clearly disclosed in public materials reviewed on 2026-07-09.
| Tool and notes | Score | Data | Retention | Deletion | AI use | Third parties | Retention detail | Sources |
|---|---|---|---|---|---|---|---|---|
| AI Beauty Stylist AI Beauty Stylist | AI makeup try-on Policy says selfies are processed only for requested diagnosis or try-on and are not used for identity recognition, medical decisions, or model training without separate authorization. | 5/5 Complete | Yes | Yes | Yes | Yes | Yes | One-time original photos are deleted as soon as operationally practical and no later than 30 days. | aibeautystylist.com |
| AirBrush Pixocial | AI beauty photo editor The policy discloses cloud editing, metadata, facial-feature processing, retention periods, and third-party providers. | 5/5 Complete | Yes | Yes | Yes | Yes | Yes | Image data is described as stored in server log files for a maximum of 21 days; face-recognition data is discarded after recommendation or app close. | airbrush.com |
| Banuba Face AR SDK and Virtual Try-On Plugin Banuba | SDK and merchant plugin Developer implementation can still add its own data handling, so this score applies to Banuba's public SDK and plugin claims. | 5/5 Complete | Yes | Yes | N/A | Yes | Yes | Banuba states that face AR products process camera frames on device and do not send user images or video frames to Banuba servers. | banuba.com banuba.com |
| BeautyPlus Pixocial | AI beauty photo editor Included because BeautyPlus is a distinct consumer app brand with a public policy relevant to face and beauty editing. | 5/5 Complete | Yes | Yes | Yes | Yes | Yes | The policy follows a similar Pixocial retention model, including a maximum 21-day window for image data in server logs. | beautyplus.com |
| CyberLink PhotoDirector and Generative AI features CyberLink | AI photo editor CyberLink also describes local-only biometric handling for certain PhotoDirector desktop features. | 5/5 Complete | Yes | Yes | Yes | Yes | Yes | Generative AI submissions are described as deleted within 24 hours after use, while some outputs can be retained for longer feature-specific periods. | cyberlink.com cyberlink.com |
| Fotor AI Makeup and AI Avatar features Fotor | AI photo editor Fotor discloses third-party AI providers and states specific limits for face-data use in avatar workflows. | 5/5 Complete | Yes | Yes | Yes | Yes | Yes | Face data for avatar generation is described as temporary and deleted after generation. AIGC inputs and outputs can remain until user deletion or account deletion. | fotor.com |
| MakeupPlus Meitu | Virtual makeup and selfie app The policy discloses image and facial-feature handling, retention, third-party SDKs, and internal research or improvement purposes. | 5/5 Complete | Yes | Yes | Yes | Yes | Yes | Image data is described as stored in server log files for a maximum of 21 days; face-recognition data is discarded after recommendation or app close. | pro.meitu.com |
| ModiFace Virtual Try-On L'Oreal ModiFace | Enterprise virtual try-on The policy separates virtual try-on from skin analysis and discloses AI technology improvement use elsewhere in the notice. | 5/5 Complete | Yes | Yes | Yes | Yes | Yes | The policy says virtual try-on images are processed on device, while skin-analysis images are usually deleted within 5 minutes and no longer than 24 hours. | modiface.com |
| YouCam Makeup and YouCam Apps Perfect Corp | Consumer and web makeup app The policy has detailed tables for photo uploads, biometric information, sharing, and feature-specific retention. | 5/5 Complete | Yes | Yes | Yes | Yes | Yes | Cloud virtual try-on photos are described as deleted after the service completes; some save-and-share or generative AI features have longer disclosed windows. | perfectcorp.com makeupar.com |
| GlamAR GlamAR | Enterprise virtual try-on The policy clearly discloses facial data and third-party processing, but public wording reviewed for this index did not clearly answer AI training or model-improvement use. | 4/5 Needs review | Yes | Yes | Yes | Not stated | Yes | Facial data is described as retained for a maximum of 3 years unless deleted earlier by request or legal requirement. | glamar.io |
AI Beauty Stylist
5/5Policy says selfies are processed only for requested diagnosis or try-on and are not used for identity recognition, medical decisions, or model training without separate authorization.
- Data
- Yes
- Retention
- Yes
- Deletion
- Yes
- AI use
- Yes
- Third parties
- Yes
AirBrush
5/5The policy discloses cloud editing, metadata, facial-feature processing, retention periods, and third-party providers.
- Data
- Yes
- Retention
- Yes
- Deletion
- Yes
- AI use
- Yes
- Third parties
- Yes
Banuba Face AR SDK and Virtual Try-On Plugin
5/5Developer implementation can still add its own data handling, so this score applies to Banuba's public SDK and plugin claims.
- Data
- Yes
- Retention
- Yes
- Deletion
- N/A
- AI use
- Yes
- Third parties
- Yes
BeautyPlus
5/5Included because BeautyPlus is a distinct consumer app brand with a public policy relevant to face and beauty editing.
- Data
- Yes
- Retention
- Yes
- Deletion
- Yes
- AI use
- Yes
- Third parties
- Yes
CyberLink PhotoDirector and Generative AI features
5/5CyberLink also describes local-only biometric handling for certain PhotoDirector desktop features.
- Data
- Yes
- Retention
- Yes
- Deletion
- Yes
- AI use
- Yes
- Third parties
- Yes
Fotor AI Makeup and AI Avatar features
5/5Fotor discloses third-party AI providers and states specific limits for face-data use in avatar workflows.
- Data
- Yes
- Retention
- Yes
- Deletion
- Yes
- AI use
- Yes
- Third parties
- Yes
MakeupPlus
5/5The policy discloses image and facial-feature handling, retention, third-party SDKs, and internal research or improvement purposes.
- Data
- Yes
- Retention
- Yes
- Deletion
- Yes
- AI use
- Yes
- Third parties
- Yes
ModiFace Virtual Try-On
5/5The policy separates virtual try-on from skin analysis and discloses AI technology improvement use elsewhere in the notice.
- Data
- Yes
- Retention
- Yes
- Deletion
- Yes
- AI use
- Yes
- Third parties
- Yes
YouCam Makeup and YouCam Apps
5/5The policy has detailed tables for photo uploads, biometric information, sharing, and feature-specific retention.
- Data
- Yes
- Retention
- Yes
- Deletion
- Yes
- AI use
- Yes
- Third parties
- Yes
GlamAR
4/5The policy clearly discloses facial data and third-party processing, but public wording reviewed for this index did not clearly answer AI training or model-improvement use.
- Data
- Yes
- Retention
- Yes
- Deletion
- Yes
- AI use
- Not stated
- Third parties
- Yes
Market context
These outside sources explain why virtual try-on privacy, biometric consent, and AI photo handling are active editorial topics.
How to cite this index
AI Beauty Stylist, "Virtual Makeup Privacy Index 2026," version 2026.07, reviewed 2026-07-09. For changed policies or source corrections, contact support with the updated public URL.