Privacy Policy
Last updated: October 19, 2026
This Privacy Policy explains how IdealFace ("IdealFace", "we", "us") collects, uses, stores, and protects your information when you use the IdealFace mobile application (the "App"). IdealFace is operated by [Company legal entity name], [Registered address].
IdealFace is built privacy-first: your face photos are stored on your device and are never uploaded to our servers. Only your analysis scores and account data sync to the cloud.
1. Information we collect
1.1 Stored only on your device
- Face photos captured during scans. Photos never leave your phone. They are kept in the App's private storage, are not shared with us or any third party, and are removed when you delete your account or uninstall the App.
- Image hashes (a mathematical fingerprint used to keep results consistent for the same photo) are kept on your device only.
- Daily check-ins and your plan: sleep, water, routine completion, streaks, skipped days, your own habits and reminder times are kept on your device only. They are included in your data export and removed when you delete your account.
1.2 Stored on your device and synced to your account
When you are signed in, the following are stored locally and synced to our cloud database so they are available across sessions and devices:
- Scan results: numeric scores (for example face quality, symmetry, puffiness, skin-age estimate), scan dates, and photo-quality flags — not the photos themselves.
- Onboarding answers: gender, age, height, weight, goals, struggles, and your health-sync preference.
- Account information: email address and authentication identifiers.
- Consent records: the fact and date that you granted face-data consent.
1.3 Optional health data
If you choose to connect Apple Health (iOS) or Health Connect (Android), the App may read wellness signals such as sleep and activity. Health data is accessed read-only, only after your explicit permission, and only for the purposes described in the App. You can revoke this permission at any time in your device settings. We do not sell or share health data.
1.4 Technical data
The App stores settings (theme, notification preferences, language) locally on your device. Authentication and database services are provided by Supabase; app stores (Apple App Store, Google Play) may provide us with aggregate, non-personal diagnostics.
2. Face data and biometric information
- Face scanning requires your explicit, informed consent, which the App collects before your first scan. You can withdraw consent at any time by deleting your account in Settings or by contacting us, and by simply not using the camera.
- Deleting your account deletes your synced scores and consent records on our servers and removes local data and photos from the App.
3. How we use your information
- Provide the App's features: scan scoring, history, comparisons, trends, streaks, weekly reports, and personalized routines.
- Sync your scores and settings to your account so they survive reinstalls and device changes.
- Authenticate you and secure your account.
- Send optional reminders and weekly-report notifications you can disable in Settings.
- Comply with legal obligations and enforce our terms.
We never: sell your personal data, show third-party ads, use your photos for advertising, or share your face data with data brokers.
4. Legal bases (EEA/UK users)
- Contract: processing needed to provide the App (scores, sync, account).
- Consent: face scanning, optional health-data connection, and notifications. You may withdraw consent at any time.
- Legitimate interests: security, abuse prevention, and improving reliability, balanced against your rights.
5. Storage and security
- Local data is stored inside the App's sandboxed, private storage on your device.
- Cloud data is hosted by Supabase with row-level security so that each account can only access its own rows.
- Data in transit is encrypted over TLS. No method of storage or transmission is 100% secure, but we apply industry-standard safeguards.
6. Retention
- Photos: on your device until you delete the scan, delete your account, or uninstall the App.
- Synced scores and account data: kept while your account is active. When you delete your account, associated server-side records are deleted or de-identified.
- Consent records: kept for the duration of the account to demonstrate that consent was obtained.
7. Your rights and controls
| Right | How to exercise it |
|---|---|
| Access & export | Settings → Your data → Export my data produces a file containing your account data, consent record, scores, check-ins, and settings. |
| Delete | Settings → Your data → Delete account removes server data, local data, and photos, then signs you out. |
| Withdraw consent | Delete your account in Settings → Your data → Delete account, or email us. Notifications can be turned off in Settings. |
| Health data | Revoke in Apple Health / Health Connect settings on your device. |
| Other requests | Email support@idealface.app. |
If you are in the EEA, UK, California, or another jurisdiction with privacy rights (access, correction, deletion, portability, objection, restriction), the controls above satisfy most requests; contact us for anything else. You may also complain to your local data-protection authority.
8. Children
The App is not directed to children under 16, and we do not knowingly collect their data. If you believe a child under 16 has created an account, contact us and we will delete it.
9. Third-party processors
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication and cloud database | Email, account ID, scores, onboarding answers, consent records |
| Apple App Store / Google Play | Distribution, billing, aggregate diagnostics | Purchase records (handled by the store), crash diagnostics |
| Apple Health / Health Connect | Optional wellness signals | Sleep/activity data you choose to share (read-only) |
10. International transfers
Synced data may be processed in the region where our database provider operates. Where required, transfers rely on appropriate safeguards (such as standard contractual clauses).
11. Changes to this policy
If we make material changes, we will update the date above and, where appropriate, notify you in the App. Continued use after changes take effect means you accept the updated policy.
12. Contact
[Company legal entity name] · [Registered address]
Email: support@idealface.app