Privacy Policy

§1What we collect

Your email address; a device identifier; your consent records; and your analysis report (the measurements, AI ratings, scores, summary text and glow-up plan), with whether its photos were taken with the in-app camera or picked from your photo library. If you arrive from a link, we may also record where from (for example, an ad or referral code) — see "Analytics and attribution" below for when and how.

We do not store the photos you upload or the face geometry computed from them on our servers. See "Your photos" below and the Biometric Data Policy for the details, including what briefly stays on your own device.

§2Your photos

We delete your photos from our systems as soon as your analysis finishes, fails or is rejected, and we never store your face on our servers. Our AI provider (OpenAI) reviews the photos under a no-training policy and may keep them for up to 30 days for abuse monitoring, then deletes them.

If our AI provider declines to analyse a pair of photos, or we ask for different photos because of writing on them or because of the age check (see "Children" below), we keep a one-way code of those photos for 7 days, whoever sent them, signed in or not, so the same photos sent again get the same answer instead of a new reading. A one-way code can’t be turned back into the photos. We keep it with a one-way code of your email or device identifier, so repeated attempts can be counted, and never with a photo, face geometry or rating.

The photo you upload, and any face geometry computed from it, exist only in memory on our servers for the length of your request. We never write them to our disk, our database, our logs or any server-side backup.

On your own device, the app keeps both photos, and the face geometry of the front photo, for up to 24 hours so it can finish your analysis (for example, after you sign in or buy credits), then deletes them as soon as the app runs again. They are deleted sooner when you unlock the analysis, retake the photos, sign out or delete your account. In the app they sit in a private folder that is not included in phone backups; in a web browser they stay only in the open page. See the Biometric Data Policy.

While you line up a photo, on-device face detection guides the capture: it reads the camera's live view on your phone, or in your browser, to check framing, distance, head position and light. Nothing about your face from it is stored or sent; only the photo you take is uploaded. In the app, the detector is Google's ML Kit, which sends Google anonymous diagnostics (such as the device model, the app version, an install identifier and how fast it ran), never images.

§3How we use your data

To produce your analysis and glow-up plan, including an automated check for whether a photo may show someone under 18 (see "Children" below); to send you sign-in codes and, if you opt in, weekly re-scan reminders; to process purchases and refunds; to operate, secure and improve the service; and to respond to support requests.

§4Analytics and attribution

Before you sign in, we set a device identifier (on your device: a browser storage value on the web, the equivalent in the app). We use it to run the service, for example to limit free previews and to keep your consent. If usage analytics are on, we also count which screens are opened and, on your first visit or launch, record where you arrived from (an ad, a search term, which app store listing) so we can tell which channels bring people here. This is stored against that device identifier, not your name or email, until you create an account, when it is attached to it.

In the EEA and the UK we ask before any usage analytics: until you say yes, the app doesn’t count which screens you open or record where you came from. We still record what the service needs to run, such as your purchases and analyses. Elsewhere they are on unless you turn them off. You can change your choice any time in Account → Privacy and data. A referral code from a link you followed is kept either way, so the person who invited you gets their bonus. Analytics appear in your data export and are deleted on the same schedule as other funnel analytics below.

If the app crashes, it sends us a short error report (what went wrong in the code, and the app version), with no account or device identifier and nothing you entered.

Every request to our servers is also logged, for security and to fix problems: the page or action, a response code, the app version, the type of browser or device, the page that linked to us, and a one-way coded version of your IP address (never the address itself). Some lines also carry your account id, for example when you sign in or delete a scan. Logs never contain your photos, your face geometry, your scores or your AI ratings; for an analysis they only count how many things were rated. Logs are deleted after at most 30 days.

§5Who processes it

Our AI provider (OpenAI) analyses the photos you submit, under a no-training policy, and may retain them for up to 30 days for abuse monitoring, as described above. With each request we also send OpenAI a coded identifier for your account (or, before you sign in, for your device), so it can spot abuse across requests. OpenAI can’t turn it back into your email or account id.

Purchases are made through the App Store and Google Play, and recorded for us by RevenueCat, which receives your account id and purchase details, never your photos. Apple and Google handle payment and refunds. An email provider delivers sign-in codes and reminder emails. Google’s ML Kit (the on-device face detector, above) sends Google its own anonymous diagnostics. When the app checks for an update, our app-update provider (Expo) receives an install identifier and the app version.

Our hosting, database and content-delivery providers carry and store this data on our behalf, encrypted in transit, without using it for their own purposes.

We share only the minimum each processor needs to do that job, under contract, and we don't sell your personal data. Where a processor is outside your country, that transfer is covered by a recognised legal mechanism (for example, the EU Standard Contractual Clauses) — ask support for the current list if you'd like it.

§6How long we keep it

Your analysis reports are kept until you delete a scan or your whole account, or automatically after 24 months of inactivity (we’ll email you at least 30 days before that happens). Purchase records are kept afterward for accounting, without being linked to your account. When an account is deleted, we also keep a record of which consent statements you agreed to and when, under a one-way code of your email (never the email itself, a photo or a result), for up to 5 years, as proof of consent should a legal claim ever need it.

Sign-in codes, expired sessions, and funnel-analytics events with no account attached are each deleted on their own, much shorter schedule — ask support if you want the exact windows for any of them.

We keep encrypted backups of our database for 30 days, so we can recover from a failure. Something you delete stays in those backups until they age out. If we ever restore a backup, we first delete again everything you deleted after it was made.

§7Your rights

You can see your reports any time in History, change your preferences in Account, download a copy of your data (Account → Privacy and data → Download my data), withdraw your consent to biometric or AI processing without deleting your account or losing paid credits (Account → Privacy and data → Withdraw consent), and delete your whole account (profile, scans, consents and credit history) immediately from Account → Privacy and data → Delete account.

You can also delete your account without the app, on the web at https://api.chadpsl.com/delete-account: enter your email, and we send you a link to confirm. Deleting your account does not cancel a subscription; cancel that in the App Store or Google Play first.

If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

§8Children

Chad PSL AI is for adults 18 and over; it is not directed at children, and we don't knowingly collect data from anyone under 18.

We rely on your confirmation that you are 18 or over. Our automated check rejects only photos it confidently reads as a child under 15; when a filtered or poor-quality photo may show a child, it asks for a clearer photo instead. When it confidently reads a photo as a child, we pause scans on the account and keep a one-way code derived from your email (and from your device identifier, when we have one) for up to 30 days after any pause, even if you delete your account, so the pause can't be undone by signing up again. We also keep a one-way code of those photos, and of the network they came from, so the same photos get the same answer. We keep no photo or rating with it. We do this to protect children (our legitimate interest and legal duty); if you think a pause is a mistake, contact support.

§9Changes to this policy

We'll update the date at the top of this page when this policy changes, and call out material changes in the app.

§10Contact

Questions about this policy or your data? Email [email protected].