Privacy Policy

This section describes everything we do with photographs of your face. It is the complete account of our collection, use, sharing, storage, retention and deletion of face data.

4.1 What face data we collect

We collect photographs of your face and body that you choose to submit:

• Up to three photographs for each full report: a front-facing photograph, a side-profile photograph, and a full-body or style photograph.
• One optional photograph per day for a daily scan.

We also generate and store descriptive attributes derived from those photographs — numerical scores for facial features, six anatomical proportion measurements (canthal tilt, facial symmetry, eye shape harmony, lip shape ratio, midface ratio, facial thirds), and descriptive traits including face shape, skin undertone, eye colour, hair colour and hair texture.

We do not create a facial recognition template, faceprint, biometric identifier or face signature. We do not use face data to identify you, to verify your identity, to match you against any database, or to match you against other users. The photographs are used only to produce your own written analysis.

4.2 How we collect it

You take or select the photographs yourself in the app. Nothing is collected in the background, and the camera is never accessed except while you are actively on a photo submission screen.

Before any photograph leaves your device, the app displays a dedicated consent screen that states what will be sent, names the third-party AI providers that will receive it, and requires you to affirmatively agree. If you do not agree, no photograph is uploaded and no analysis takes place.

4.3 How we use it

Face data is used for one purpose: to generate the facial analysis you requested. Specifically:

• To produce your feature scores, anatomical metrics and detected traits.
• To generate three AI renders illustrating a possible appearance.
• To write your action plan and phased roadmap.
• To display your past reports and plot your daily scan history on your trajectory chart.

4.4 Who it is shared with

Your photographs are transmitted to two third-party AI providers, acting as our processors:

Both providers are used under commercial API agreements that contractually prohibit the use of your content to train their models, and that require confidentiality and security protections. We have satisfied ourselves that these providers offer protection for your face data equivalent to that described in this policy. They process your photographs only to return the result to us, and only for as long as is needed to do so and to meet their own limited security and abuse-monitoring obligations.

Your photographs are shared with no one else. They are not shared with advertisers, analytics providers, data brokers, or any other third party. Our product analytics and error-monitoring systems are configured to exclude photographs, photograph file paths and report contents.

4.5 Where it is stored

Photographs and derived analysis data are stored in private, per-user storage operated by Supabase Inc., encrypted in transit and at rest. Storage is not publicly accessible: files are retrieved by the app only through short-lived signed links, and database access is enforced row by row so an account can only ever reach its own records.

Some of our providers are located in the United States. Transfers are covered by the safeguards described in §8.

4.6 How long it is retained

Photographs are retained only while your account is active, so that you can view your past reports and compare your renders over time.

• When you delete your account, your photographs, renders, reports and daily scan history are deleted immediately and permanently.
• Deleted data is purged from encrypted backups within 30 days.
• We do not retain photographs after account deletion for any purpose, including analytics, model improvement or archival.
• If your subscription lapses but you keep your account, your existing data remains available to you until you delete it.

4.7 How to delete it

You can delete all of your face data at any time, without contacting us, in the app under Profile → Delete account. This is immediate and permanent, and it cannot be reversed by us or by you.

You may also email us and we will action the deletion on your behalf within 30 days.

4.8 What we never do with it

4.9 Your consent

Processing of your facial photographs relies on your explicit consent, given on the dedicated consent screen described in §4.2, and constituting explicit consent under Article 9(2)(a) GDPR and the corresponding provisions of the Swiss FADP.

You may withdraw that consent at any time by deleting your account. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.