Biometric Data Policy

§1What we collect

The front and side-profile photos you upload, and the face geometry we compute from both of them: the positions of about 478 points mapping your face.

The geometry is computed transiently, on our servers, in memory, to calculate your measurements. It is never written to our disk, our database, our logs or any server-side backup.

Both photos, and the front photo’s mesh, are also kept, briefly, on your own device (never on our servers): for up to 24 hours, so your analysis can be finished without taking the photos again, then deleted. See "How long we keep each type of data" below.

§2Why we collect it

To calculate your facial proportions and produce your score, category breakdown and glow-up plan, and to run an automated check for whether the photo may show someone under 18 (see "Our automated age check" below and the Children section of the Privacy Policy). We never use your face geometry to identify you, build a biometric profile of you, or compare you against anyone else’s data.

§3Our automated age check

Every photo you submit, including the free preview, is also checked by the same automated process for whether it may show someone under 18. A confident read of that kind pauses scans on the account for up to 30 days, as described in the Privacy Policy’s Children section; this is a consequence of processing we want you to know about going in, not a separate collection of data.

§4Your consent

We ask for your explicit, written consent before processing any photo, including the free preview, and we record that consent with its version and a timestamp. You can withdraw consent at any time, from Account → Privacy and data, without deleting your account or losing paid credits you’ve already bought — doing so stops any further photo from being processed on the account until you consent again. You can also withdraw by deleting your account.

§5How long we keep each type of data

Uploaded photos: deleted from our systems as soon as your analysis finishes, fails or is rejected (OpenAI: up to 30 days, as below).

Computed face geometry (the 478 points), on our servers: exists only for the length of that one request; never stored there.

Your photos and the front photo’s face geometry, on your own device: kept for up to 24 hours to finish your analysis, then deleted as soon as the app runs again. In the app they sit in its private storage, which is not included in phone backups; in a web browser they stay only in the open page. They are deleted sooner when you unlock the analysis, retake the photos, sign out or delete your account.

Your analysis report (scores, measurements, AI ratings, text and plan; no images, no geometry): kept until you delete the scan or your account, or automatically after 24 months of inactivity. A deleted report stays in our encrypted backups until they age out, after 30 days; if we ever restore a backup, we delete it again first.

§6How it is destroyed

When a request finishes, we clear the photo and any face geometry from server memory, and we keep no copy there. OpenAI, which reviews the photos for us, may keep a copy for up to 30 days for abuse monitoring under its no-training terms, then deletes it. Deleting a scan or your account removes the stored report from our database right away (encrypted backups age out within 30 days, and a restore re-applies your deletion).

§7We never sell your biometric data

We never sell, lease, trade or disclose your biometric data for any commercial purpose. The parties who process it to run the service are our own vision service, which computes the geometry, and our AI provider, OpenAI, which rates it (see the Privacy Policy for the full list of processors, including the infrastructure providers that host and transit this data without reading it for their own purposes); each is bound by contract to use it only for that purpose.

§8Contact

Questions about this policy or your biometric data? Email [email protected].