1. Information We Collect

We collect minimal information to provide the Service:

• Uploaded Images: Photos you upload for face shape analysis. These are processed temporarily and are not permanently stored.
• Contact Information: If you voluntarily contact us through our contact page, we may collect your name and email address solely to respond to your inquiry.
• Usage Data: Google Analytics measures page visits, selected tools and articles, detector funnel steps, coded errors, and site performance metrics. Microsoft Clarity captures page rendering and interactions such as clicks, scrolling, and pointer movement for heatmaps and session replay. Uploaded photo previews and generated detector result panels are explicitly masked, so their contents are not uploaded to Clarity. Custom analytics events never include your uploaded photo, filename, analysis result, or raw error text.

2. What We Do Not Collect

We do not collect or require:

• An account or password. The website has no accounts, and sign-in in the mobile app is optional (see Section 12).
• Email addresses, phone numbers, or personal identifiers to use the core Service.
• Payment or financial information.
• Biometric data for identification. We never use your face to identify you. Our analysis classifies face shape and suggests styles, and nothing else.

3. How We Use Your Information

Information collected is used exclusively to:

• Process your uploaded photo and generate face shape analysis results and styling recommendations.
• Respond to support inquiries or messages you send us.
• Improve the Service using aggregated analytics and performance reports.

We do not use your uploaded images to identify you, build user profiles, or for any purpose other than providing the analysis you requested.

4. Image Processing & Retention

• Uploaded images are processed in real time to generate your face shape analysis.
• Images are discarded immediately after processing is complete. We do not permanently store your photos on our servers.
• We do not use your uploaded images for AI model training.
• In the mobile app, try-on result images are kept until you delete them. See Section 12.

5. Third-Party AI Processing

Our Service may use third-party AI providers to process images and generate analysis results. When this occurs:

• Your uploaded image is transmitted securely to the third-party provider for processing.
• We require that third-party providers do not retain your images or use them for training purposes.
• Third-party providers are bound by their own privacy policies and data processing agreements.

6. Cookies & Tracking

The Service uses local browser storage for theme preferences. Google Analytics loads automatically and may use first-party analytics cookies to measure visits across pages and sessions.

Google signals and advertising personalization signals are disabled. Google processes analytics data under its own privacy and retention terms.

Microsoft Clarity uses behavioral metrics, heatmaps, and session replay to help us find usability problems. Clarity may use cookies and similar technologies to connect activity across pages and sessions where permitted. Without a required consent signal, Clarity operates without cookies and with limited session continuity.

Microsoft processes Clarity data under the Microsoft Privacy Statement.

Cloudflare Turnstile protects the contact form and the photo analysis tools from automated abuse. Cloudflare may process signals such as your IP address, browser user agent, TLS fingerprint, and the site origin to distinguish people from bots. Read Cloudflare's Turnstile Privacy Addendum.

7. Data Security

We implement reasonable technical and organizational measures to protect your data during transmission and processing. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is intended for adults and is not directed at anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can remove that information.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Request information about any personal data we hold about you.
• Request deletion of any personal data we may have collected.
• Opt out of any non-essential data collection.

The website keeps no personal data beyond messages you send us. The mobile app stores data on our server, and you can export or delete it yourself; see Sections 12 and 13.

10. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only in the following circumstances:

• With third-party AI providers as described in Section 5, solely for image processing.
• With Google Analytics for the usage measurements described in Section 6.
• With Microsoft Clarity for the behavioral measurements described in Section 6.
• With Cloudflare Turnstile to protect the contact form and the photo analysis tools from automated abuse.
• With Cloudflare, OpenAI, RevenueCat, and Google Firebase to run the mobile app features described in Section 12.
• With Resend, our email provider, to deliver contact form messages and app feedback to our inbox.
• If required by law, regulation, or legal process.
• To protect the rights, safety, or property of FaceShapeAI, our users, or the public.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with a revised "Last Updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. FaceShapeID mobile app

The iOS and Android app works without signing in. Here's what stays on your phone, what our server keeps, and how to delete it.

• Face measurements run on your phone. Your scan photos, the face landmarks the app finds, your measurements, and your progress photos stay on your device. Our server gets only the scan summary below, including three face ratios, and a photo only when you pick one for a try-on or tap AI read.
• What our server keeps. So your results follow you to a new phone, our server stores:
  • A summary of each scan: the face shape, how confident the app is, the score for each shape, three ratios (face length to width, forehead to jaw, and jaw to cheekbones), any shape you picked yourself, and the date.
  • Every try-on result image, with its style and whether you saved or flagged it.
  • Your style chat conversations.
  • Your profile answers, such as your style goal and interests, and your daily routine check-ins.
  • Feedback and reports you send from the app.
• Hairstyle try-on. After you agree, the app uploads the photo you picked and the chosen style to our server, which sends them to OpenAI's image model to draw the style. Our server doesn't keep the photo you upload. It keeps the result image until you delete it. OpenAI processes the request under its API data policies and doesn't use API data to train its models.
• AI read (Pro). After you allow it once, tapping AI read uploads that scan's photo and the measurements it took to our server, which sends them to OpenAI's vision model to describe your skin, hairline, and features. Our server keeps neither the photo nor the result. The result stays with the scan on your phone until you delete the scan. OpenAI processes the request under its API data policies and doesn't use API data to train its models.
• Style chat. Your messages, plus the report details you choose to share (face shape, ratios, and style preferences), go to our server and OpenAI to write the reply. Chat never sends a photo. Our server keeps the conversation so you can pick it up later, and clearing the chat deletes it.
• Accounts. The app creates a random app ID when you install it. Signing in with Apple or Google is optional and brings your data back on a new phone. From Apple or Google we store only the account identifier they give our app, never your name or email. For Apple, we also keep an encrypted token so we can unlink your Apple ID when you delete your account. If Apple doesn't answer then, we keep only that token and retry daily for up to 30 days.
• Daily limits and abuse protection. Our server counts try-ons, AI reads, chat questions, feedback, new installs, and subscription checks for each app ID and IP address. These counters expire within 48 hours, even after you delete your account, so deleting it can't reset the free limits.
• App verification. Google's Firebase App Check confirms that requests come from the genuine app, using device attestation from Apple App Attest or Google Play Integrity.
• Purchases. Apple or Google handles payment. RevenueCat receives the purchase status for your app ID so the app can unlock Pro. We never see your card details. Deleting your account doesn't cancel a subscription; cancel it in your App Store or Google Play settings.
• Reminders. Routine and trial reminders are scheduled on your phone. We don't send push notifications from a server.
• Feedback and reports. When you send feedback or report a try-on or chat reply, we receive your message, the app version, your app ID, and the details shown on the form. Our server stores it with your data, and Resend, our email provider, delivers a copy to our inbox. Your photo is never attached.
• Who handles app data for us. Cloudflare runs our server and stores app data in its D1 database and R2 file storage. OpenAI draws try-ons and writes chat replies and AI reads. RevenueCat tracks subscriptions. Google's Firebase App Check verifies the app. Resend delivers feedback email. We don't sell app data or use it for advertising.
• How long we keep it. Until you delete it. Deleting a scan, a try-on, or a chat in the app removes it from our server. If you never signed in and the app hasn't reached our server for 12 months, we delete that install's data. Daily counters expire within 48 hours.
• Export or delete it. Export my data in Profile saves a copy of everything our server keeps for you. Delete account in Profile erases all of it from our server: scans, try-on images, chats, profile answers, check-ins, feedback, and your Apple or Google link. No app? Follow the steps on our delete account page. Copies of feedback already emailed to our inbox stay there until you ask us to delete them.

13. Consumer health data

Washington's My Health My Data Act, and similar laws in other states, can count images of your face, and measurements taken from them, as consumer health data. This section explains how the FaceShapeID app handles that data, wherever you live.

• What we collect. Try-on images: the photo you upload (sent to OpenAI, never stored) and each result image. AI reads: the scan photo you send (sent to OpenAI, never stored) and the read itself, which stays on your phone. Face shape results: the face shape, confidence, shape scores, and three facial ratios in each scan summary. The report details you share in style chat. Anything you type in chat or feedback is stored as you wrote it.
• Why we collect it. To draw your try-ons and keep them in your gallery, to describe your skin and hairline when you ask for an AI read, to sync your results between your phones, and to answer your style chat questions. We don't use it to identify you, sell it, use it for advertising, or train AI models on it.
• Where it comes from. Only from you, through the app: after you agree on the try-on, AI read, and style chat consent screens.
• Who we share it with. Cloudflare stores it for us. OpenAI receives the try-on photo, the AI read photo, and the chat details to create each result. Resend receives it only if you put it in feedback. No affiliates or other companies receive it.
• How long we keep it. Until you delete it or your account. Data from installs that never signed in is deleted after 12 months without contact.
• Your rights. You can get a copy (Export my data in Profile), delete it (Delete account in Profile, or our delete account page), and withdraw your consent by deleting it and not using try-on, AI read, or chat. To ask which companies received your data, or for anything the app can't do, email support@faceshapeid.com. We answer within 45 days. If we turn down your request, reply to our answer to appeal. If we turn down the appeal, you can complain to the Washington State Attorney General.

14. Contact Information

If you have any questions or concerns about this Privacy Policy, please contact us:

Email: support@faceshapeid.com