Your privacy

Your face never leaves your device

Face scanning runs entirely in your browser. Your camera frames, photos, and the facial measurements derived from them are never uploaded, logged, or stored on our servers — not during the scan, not after it. When you close or rescan, the photo is gone.

What we do store

• Your account details: name, email, and the birth date you provide (used only to tailor guidance to your age — we never estimate age from photos).
• Only if you tap “Save my results”: three labels — your face-shape (e.g. “heart”), undertone (e.g. “warm”), and skin-depth band. Never an image.
• If you purchase the unlock: a record of the purchase. Payments are processed by Stripe; we never see your card number.

Delete everything, any time

On your account page you can permanently delete your account. This is a hard delete — your profile, saved results, and purchase records are all removed immediately and unrecoverably.

No tracking

We don't run third-party analytics or advertising trackers, and we never sell or share your data.