Privacy
What is kept, and what is not
The short version: the photograph is not retained, the six readings are, and you can delete them.
Draft — this policy pending legal review
1. What we collect
A photograph you choose to submit for analysis, the six numeric readings derived from it, the date of the assessment, and the routine and product matches those readings produced. If you ask for a report to be saved, your email address.
We do not collect health records, and we do not ask for information about medications, conditions or treatments.
2. Biometric information and consent
Facial analysis is treated as biometric processing regardless of how briefly the image exists. Consent is requested in plain language before capture, is specific to producing six visible-attribute readings, and is recorded with its date and scope.
Consent can be withdrawn at any time from Data and privacy in your account. Withdrawal deletes the readings derived under it.
3. Retention
The photograph is not retained after the readings are produced. No biometric template, embedding or derivative capable of identifying you is stored.
The readings and their dates are kept while your account exists, because comparison across assessments is the only reason to keep anything at all.
4. How the information is used
To produce your report, to build the routine and product matches shown in it, and to compare a later assessment against an earlier one.
We do not sell personal information, and we do not share it for third-party advertising.
5. Your choices
You can take an assessment without an account, download a copy of your data, and delete your assessment data behind a typed confirmation. Marketing email is opt-in and separate from the report itself.
6. Contact
A privacy contact address and the state-specific rights sections, including those for US states with biometric or comprehensive privacy statutes, are to be completed with counsel before launch.