Legal

Privacy Policy

Last updated: July 16, 2026

Who we are

FaceMax ("FaceMax," "we," "us") is a cosmetic photo-rating service available on the web and as an iPhone app. This policy explains exactly what happens to your information.

Face data

What we collect. When you choose to scan, we collect the photo of your face that you take with the camera, and the measurements the app works out from it, such as how even your features are. While the camera is open your phone also checks that your face is centred so it can guide you; that stays on your phone and is never sent anywhere. We do not use Face ID, and we never build anything that could be used to recognise you or pick you out from your face.

How we use it and what we disclose. We use your face data only for the features you ask for: to frame the camera, to produce your scores and report, to suggest a routine, to keep your scan history on your phone, to make the optional "Your Potential" preview, and to save a card to your Photos when you tap Save. We do not use face data for advertising, profiling, or identifying anyone, and we never sell it.

Who we share it with. Your photo goes to Google (Gemini AI), which produces your results. We use Gemini's paid service, under which Google does not use your photo to train or improve its AI. Cloudflare hosts the server your photo passes through on the way to Google; it only hands the photo on and keeps no copy. Nobody else receives it. We do not send your photo, scores, or measurements to any advertising, analytics, or payment company, and Google gets no name, email, or account with your photo.

How long it is kept. We keep nothing on our server; your photo is only in transit, long enough to come back with your result. Google holds scans briefly to check for misuse and then deletes them under its own policy. On your phone, your photo, scores, and measurements stay in the app's own private storage until you delete them or delete the app. A card you save to Photos stays there until you delete it.

Deleting it, and taking back your consent. To delete your face data, open Settings in the app, then Privacy & Face Data, then Delete Face Data. That removes your saved photos, scores, measurements, and scan history from your phone, and deleting the app removes them too. To withdraw your consent, open Settings, then Privacy & Face Data, then Revoke AI face consent, which stops any further scans or transfers to Google until you agree again.

Our providers protect it the same way we do. Any third party we share face data with, including Google and Cloudflare, is required to provide the same or equal protection of that face data as this policy promises. None of them may use your face data for their own advertising, profiling, identity recognition, or AI training. If a provider cannot offer that same protection, we stop sending it face data.

The FaceMax iOS Privacy Policy sets all of this out section by section for the iPhone app.

Your photo: no FaceMax server copy

When you run a scan (or generate a "potential" glow-up preview in the iPhone app), FaceMax sends one photo, securely, to our server. It passes straight on to Google (Gemini AI) to produce your scores or preview, hands the result back, and keeps no copy. The photo is never saved anywhere on our side, not in a database, not in a file, not in a backup.

On the web, your browser may keep a temporary preview in the current tab so your face can appear on the paywall and paid scorecard after returning from checkout. It is never added to your FaceMax account or sent to Stripe. We temporarily keep only the web numeric report on our server for up to one hour so you can complete checkout.

After a successful scan, the iPhone app stores the submitted photo, scores, on-device facial measurements, scan date, and any generated preview in the app's own private storage until you delete them in Settings, or delete the app. Full iPhone-specific details, including Google retention, are in the iOS Privacy Policy.

Web accounts, saved scores, and routine progress

You may create an optional web-only account using an email address and password. We store your email address, a scrambled version of your password that cannot be turned back into it (never the password itself), session records that expire, onboarding profile choices, numeric scan scores, scan dates, routine task completions, streak days, and the Stripe identifiers needed to restore web subscription access. We do not save the selfie with your history. Web accounts do not currently sync with the iPhone app.

To request deletion of a web account and its saved history, email [email protected] from the account email address.

Device identifier

A random identifier is generated in the app or browser and used to enforce usage limits and recognize subscription access before or without login. It is not your name, Apple ID, email, or Apple's advertising identifier. Creating a web account lets FaceMax associate eligible web subscription access with that account so you can log in again.

Website and app usage analytics

To understand which features people use, improve FaceMax, test different page wording, and measure our advertising, FaceMax sends usage events, such as page viewed, scan completed, paywall shown, plan selected, and subscription purchased, with a random installation or browser identifier, app version, device locale, experiment assignment, and campaign labels supplied by the link you opened. The iPhone app may also include onboarding answers such as age range, goal, and whether you selected man or woman. These events go to our own server; iPhone-app events also go to PostHog, a product-analytics service that stores them under the same random installation identifier so we can see funnels and retention (see PostHog's Privacy Policy), and to Singular as described below. They never include your photo or face scores. To request deletion of your usage data, email [email protected].

Purchases and subscriptions

On the web, FaceMax offers an optional auto-renewing FaceMax Pro subscription handled by Stripe. Stripe receives the payment and contact information you enter on its hosted checkout page and processes your card details; FaceMax does not receive or store your full card number. We receive subscription and payment status, the amount, Stripe customer and subscription identifiers, and limited checkout information needed to provide access, support, and fraud prevention. See Stripe's Privacy Policy.

The iPhone app offers an optional subscription ("FaceMax Pro"). Those purchases are handled by Apple through the App Store; Apple processes your payment and we never see your card details. Apple's handling of your information is governed by Apple's Privacy Policy.

To manage your subscription status across devices, FaceMax uses RevenueCat, a subscription-management service. When you make or restore a purchase, RevenueCat receives your App Store purchase receipt and a random, anonymous installation identifier, used solely to confirm whether your purchase is active. See RevenueCat's Privacy Policy. The fact that you subscribed is also shared with Singular so we can measure which ad led to the purchase.

Measuring our ads (SKAdNetwork & Singular)

On the web, landing-page parameters supplied by an ad platform, such as a TikTok click identifier and UTM campaign labels, may be attached to the Stripe Checkout session so we can understand which campaign led to a purchase. We do not attach your photo or scores to those parameters.

FaceMax advertises on platforms such as TikTok, and we measure whether those ads lead to installs and subscriptions. We do this in two ways, both designed to avoid tracking you across other companies' apps or websites:

• Apple SKAdNetwork: Apple's built-in, privacy-preserving attribution framework, which reports ad conversions to us in aggregate without identifying you.
• Singular, an advertising measurement partner built into the app. Singular receives an anonymous device identifier that Apple gives us (not your advertising ID), the app usage and purchase events described above, and basic technical information such as your IP address and device model, so we can tell which ad led to an install or a subscription. See Singular's Privacy Policy.
• Apple Search Ads attribution (AdServices): if you arrived from an ad on the App Store, Apple can provide a token that tells us which campaign the install came from. This is Apple's standard, consent-free attribution — it identifies the campaign, not you — and the token is read by Singular and RevenueCat to connect ad spend to subscriptions.
• TikTok app events: when we run TikTok ads, the app may report the same anonymous usage and purchase events to TikTok so its ad delivery can be optimized. These events carry no photo, scores, or Apple advertising identifier. See TikTok's Privacy Policy.

We do not use Apple's advertising identifier (IDFA), we do not combine your data with third parties to build advertising profiles, and we do not track you across other companies' apps or websites, so FaceMax does not show the App Tracking Transparency prompt.

Product links and Amazon Associates

The optional web Product Shelf may link to products on Amazon. When an approved Amazon Associates tracking tag is active, those links are marked as paid links and FaceMax may earn a commission from qualifying purchases. Amazon may receive information associated with your click under its own privacy practices. Product recommendations are kept separate from face scoring and do not affect your scores or their presentation.

What we do not do

• We do not require an account to complete the initial web scan or Stripe checkout. An optional web account is required to restore saved history and routine progress later.
• We do not use Apple's advertising identifier (IDFA), and we do not track you across other apps or websites for advertising.
• We do not sell or rent your personal information. We share limited data only with the service providers named in this policy (Stripe, Apple, RevenueCat, Singular, PostHog, TikTok, Google, and our infrastructure provider Cloudflare) to operate and measure FaceMax.
• We do not store your photos on our servers. The iPhone app stores completed scans privately on your device as described in the iOS Privacy Policy.

Diagnostics you choose to share

If your device is set to share crash and usage diagnostics with developers, Apple may provide us anonymized crash reports through App Store Connect. These contain no photo content and no personal identifiers. Turn this off in iOS Settings under Privacy & Security, then Analytics & Improvements.

Entertainment, not medical advice

FaceMax's ratings and routine suggestions are cosmetic and for entertainment purposes only. They are not medical, dermatological, or health advice, and the app does not diagnose or assess any medical or health condition.

Children

FaceMax is rated 18+ on the App Store and is not directed at children. We do not knowingly collect personal information from anyone under 13.

Changes to this policy

If we update this policy, we will revise the "Last updated" date above and post the new version on this page. Continued use of the app after a change means you accept the updated policy.

Contact

Questions about privacy? Email [email protected] and we'll get back to you.