Privacy Policy

When you take a scan during onboarding, the selfie you capture is sent to OpenAI, a third-party artificial-intelligence provider, for the sole purpose of generating your AI face simulation. We ask for your explicit consent before this happens. Your selfie and the generated image are stored in your private account and are not shared with anyone other than OpenAI. The app's optional weekly face scans use Apple's ARKit Face Tracking via the TrueDepth camera. This face-geometry data (a 3D face mesh and blend-shape values) is processed entirely on your device, is never uploaded, stored on our servers, or shared with any third party (including OpenAI), and the raw mesh is discarded immediately after your on-device Volume Score is calculated. You can delete your scans and all associated images at any time from Settings > Account > Delete Account.

What we collect.

• Onboarding selfie. A single photo you take or select, used to create your AI before/after simulation.
• AI result image. The simulated image OpenAI generates from your selfie.
• On-device face measurements. For the optional weekly scan, the app uses Apple's ARKit (TrueDepth camera) to take a 3D face measurement on your device. This produces a numeric “Volume Score.” The underlying face-mesh and blend-shape data are processed only in your device's memory.

How we use it. Your selfie and AI result are used only to create and let you re-view your simulation and to compose share cards you choose to create. Your on-device face measurements are used only to compute your Volume Score and build your local progress timeline. We do not use any face data for advertising, tracking, profiling, or to train models.

Who we share it with. We share your selfie with OpenAI only, and only to generate your result. OpenAI processes the image under its API data-usage terms: API inputs are not used to train OpenAI's models and are retained only for a limited period for abuse monitoring before deletion. See OpenAI's terms at openai.com/policies. We do not share your on-device face measurements with anyone.

Where it is stored. Your selfie and AI result are stored in our private, access-controlled cloud storage (Supabase), tied to your account and not publicly accessible. On-device face measurements and thumbnails remain on your device.

How long we keep it. We keep your selfie and AI result until you delete the scan or delete your account, after which they are permanently removed from our storage. On-device data is removed when you sign out, delete your account, or delete the app.

Your choices. Creating a simulation is optional and requires your consent. You can delete all of your scans and images at any time from Settings > Account > Delete Account.

Account information. When you create an account, we collect the name and email address provided by your Apple or Google sign-in. We don't collect passwords — authentication is handled entirely by Apple or Google.

Photos. When you use the face scan feature, your photo is sent to our server for processing. We use OpenAI's GPT Image 2 API to generate your facial simulation. Your original photo and the generated result are stored in your private account so you can access your scan history. Photos are stored in a secure, access-controlled environment. Only you can access your photos — they are never visible to other users, shared publicly, or used for advertising.

Usage data. We collect basic app usage information: which screens you visit, which features you use, and how often you open the app. This helps us improve the product. We do not track your activity outside the app.

Habit tracking data. If you subscribe, we store your daily habit check-ins (such as whether you completed strength training or skincare) and your weekly Volume Scores. This data is tied to your account and is not shared with anyone.

Food noise data. If you use the food noise tracker, your daily self-reported food noise levels are stored in your account. This is a personal journal entry — we don't analyze, share, or sell this data.

Weight loss goal. During onboarding, you tell us how much weight you're planning to lose. This is used solely to personalize your facial simulation. It is not shared with anyone.

GLP-1 status. During onboarding, you indicate whether you're currently on a GLP-1 medication, considering it, or just curious. This is used to personalize your experience. It is not shared with anyone, including pharmaceutical companies.

When you take a scan, your photo is sent to our backend server, which forwards it to OpenAI's image generation API for processing. OpenAI's API data usage policy states that data submitted via the API is not used to train their models. After processing, your original photo and the generated result are stored in your private account. We do not use your photos for training our own models, for marketing, or for any purpose other than delivering your scan results to you.

• We do not sell your data to anyone.
• We do not share your data with pharmaceutical companies.
• We do not use your photos for advertising or marketing.
• We do not use your photos to train AI models.
• We do not display ads in the app.
• We do not track you across other apps or websites.

Subscriptions are processed by Apple through the App Store. We use RevenueCat to manage subscription status. We do not collect or store your payment information — that is handled entirely by Apple. You can manage or cancel your subscription at any time through your iPhone's Settings › Apple ID › Subscriptions.

We use Google Analytics (GA4) on our website to understand aggregate traffic patterns. GA4 uses cookies and collects device and usage information; it does not store IP addresses, and we do not use this data for advertising. In the app, we collect anonymous usage events to understand which features are used. We do not use third-party advertising SDKs or trackers.

Your account data, photos, and scan history are retained as long as your account is active. When you delete your account (see below), all associated data — including photos, scan history, habit logs, food noise entries, share cards, and your account record — is removed from our database immediately. Storage objects (your photos) are deleted in the same request; any object that fails to delete in that moment is removed within 30 days as part of our cleanup process.

Delete your entire account. Open the app and go to Settings › Account › Delete Account. After a two-step confirmation, your account, every scan, every share card, every check-in, and your account record are removed. This is permanent and can't be undone.

Delete an individual share card. Open Settings › Preferences › Share Cards and swipe-to-delete any card you previously generated. The public link stops working immediately. (People who already saved the image before you deleted it still have a copy on their device — that's outside our control.)

Cancel your subscription. Subscription cancellation is handled by Apple, not by us, and is separate from account deletion. Open Settings › Apple ID › Subscriptions on your iPhone to cancel. If you delete your account without cancelling, you may continue to be billed by Apple until you cancel through Apple.

If the in-app path doesn't work for you, email hello@pagecraftllc.com and we'll process your deletion request within 30 days.

GLP Face is intended for adults only. You must be at least 18 years old to use the app. We do not knowingly collect data from anyone under 18. If we learn that we have collected data from a minor, we will delete it promptly.

We use the following third-party services:

• Apple Sign In / Google Sign In — for authentication
• Supabase — for secure data storage and account management
• OpenAI — for AI image processing (photo sent to API, not used for training)
• RevenueCat — for subscription management
• Google Analytics (GA4) — for website traffic analytics

Each of these services has its own privacy policy. We encourage you to review them.

You have the right to:

• Access your personal data (available in-app and by request)
• Delete your account and all associated data — directly from Settings › Account › Delete Account in the app
• Delete individual share cards from Settings › Preferences › Share Cards
• Export your data (by request to hello@pagecraftllc.com)
• Opt out of analytics (contact us)

If we make significant changes to this policy, we will notify you through the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

Questions or concerns about your privacy? Email us at hello@pagecraftllc.com.