Privacy policy
Your photo is processed only on your device. This page covers the data that the anonymous score and the artwork match send to our server, what this device keeps, and how to clear it.
Your photo: processed only on your device
Face detection and scoring run in your browser, on your device. Neither your photo nor any face image made from it is ever sent to a server. The landmark mesh you see during analysis is drawn right here on your device.
Scores in the comparison pool: you can turn it off
What gets sent: Your score, the four dimension values, and the standard and pool you picked. No photo, no device identifier.
After you turn it off: Scores from then on stop counting toward the pool. You can still see where you stand. Scores already sent are anonymous and can't be deleted one by one.
This device may hold one anonymous record that hasn't been sent yet — your score and four dimension values, no photo and no device identifier. It is kept at most 30 days, and you can clear it any time in Data & privacy settings.
What is sent when you unlock the full report
One request to pick artworks
When you go to unlock the full report (opening the payment sheet, or unlocking with a pass), we send our server one request so it can pick artworks whose facial proportions are close to yours: the names of up to 3 facial proportions, whether each runs high or low and by how much; your scoring basis; which proportions could be read from this photo; where each of those sits in a reference population (one number with two decimals for each); and the comparison pool you chose plus the app's version number. The server uses this only to pick those 4 artworks — it isn't stored or logged, and nothing is sent when you just get your score. The chosen artwork IDs, plus the names and directions of the proportions you share with the main artwork, are saved with your paid report. Your photo and facial landmarks never leave this device.
Scoring basis
The scoring basis you pick before uploading (women or men) comes from you — we never infer gender from your photo. It's remembered on this device so it's preselected next time. When we pick artworks, it's sent once with that request, only to show artworks depicting people of the same gender, and isn't stored. If you buy a report, it's stored encrypted with that result in your order, only so the report shows on the same basis. It is never included in the anonymous scores we collect.
What this device keeps, and how to clear it
Clearing this device’s data in Data & privacy settings deletes:
- The thumbnail of your photo — it only ever exists on this device, and clears itself after 30 days anyway
- Your age and consent record
- An anonymous device id (your pass recognizes this device by it)
- Your language preference and last scoring basis
- The cached 15MB detection model — it downloads again next time
- One anonymous record not yet sent, kept at most 30 days
Won't be deleted, and can't be: Reports you bought and their links are unaffected. After clearing, they're no longer listed on the home page; a saved link or your recovery code brings them back.
What data stands behind the tier word
The tier word on your result comes from a reference scale that ships with the app and is built offline. We measured it once, at build time, from a set of publicly released, clearly licensed photographs of adults — none of them belong to anyone using this app, and none of them were uploaded to us. So your photo plays no part in building that scale, and reading your tier does not create anything for us to collect. What went into the scale — which regions the photographs came from, the age at which each was taken, the gender entry recorded by the source, and the lighting conditions — is written down item by item and archived alongside each version of the scale, so it can be checked later.
Ads and cookies
The articles in this website’s guide show ads. They appear only there: the photo test, your result and the report show none, and the photo you test is not shared with advertisers. It stays on your device.
About cookies: Our own pages don’t use cookies, and neither does Cloudflare Web Analytics, which counts visits to them. The ads in the guide are served by Google. Google and its advertising partners use cookies and similar identifiers to show ads based on your earlier visits to this and other websites, to limit how often you see the same ad, and to measure how ads perform.
You decide whether you see personalised ads. You can turn them off in Google’s ad settings, or opt out of other vendors’ personalised ads on the ad industry’s page. If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before personalised ads are shown.
Manage your data
Your data, your call. Every item here can be turned off on its own, and takes effect immediately.