Privacy Policy

What stays on your device

When you start a live session, your browser analyses the camera picture (or a photo you choose) frame by frame and discards each frame once it is analysed. The face-analysis models run in your browser. We never receive, record or store:

• images, photos or video frames
• facial landmarks or any other map of your face
• the facial-age estimate
• anything from the demonstration mode, which is a simulation and is never saved

Your browser keeps a cached copy of the face-analysis models so they don’t download on every visit. Clearing your browser’s site data removes it.

What we collect

• Account: your email address and your password, which is stored only in hashed form. If you sign in with Google, Google shares your name, email address and profile picture link with us; we use the email address to identify your account.
• Sign-in and security records: when your account was created and last signed in, and, kept by our authentication provider, the IP address and browser of sign-in requests.
• Consent records: each time you accept these terms, the biometric consent for a live session, or the consent to save results, we record which text you accepted (its version) and when.
• Free scan: whether you have used your free scan, and when. Free-scan results are not saved.
• Saved scans: only when you unlock a scan and agree to save it. A saved scan contains the symmetry score of each facial zone (a whole number from 20 to 98), the four session metrics (face lock, capture quality, symmetry, stability), the date, and the version numbers of the app and its models. It contains no image and no facial landmarks, and it cannot be used to rebuild a picture of your face.
• Scan credits: each credit added to or used from your account, the scan it was used for, and, for a purchase, the identifier of the Stripe checkout session.

Some US state laws treat information derived from your face as biometric or consumer health data. We collect saved scan results only with your consent, use them only as described here, and never sell them.

How we use it

• to create your account and sign you in
• to provide your free scan and scan credits, and to save and show your scans
• to process purchases and refunds
• to send emails about your account: address confirmation and password reset (no marketing)
• to keep the service secure and prevent abuse
• to meet legal obligations

We do not use your information for advertising, we do not sell or share it for cross-context behavioural advertising, and we do not use your scans to train models.

Who processes it for us

We use these service providers. Each processes information only to provide its service to us:

• Supabase: our database, sign-in and file hosting. Your account, consent records, credits and saved scans are stored with Supabase in the United States.
• Vercel: hosts the web app. Like any web host, it processes your IP address and the pages you request.
• Stripe: processes payments. When you buy a scan credit you go to Stripe’s checkout page, and we give Stripe your email address, your account identifier and the price. Stripe collects your payment details itself; we never see your card number. Stripe never receives scan results. Stripe’s privacy policy applies to what it collects.
• Resend: delivers our account emails. It receives your email address and the email’s content.
• Google: only if you choose to sign in with Google. Google’s privacy policy applies to your Google account.

We disclose information to others only if the law requires it, or to protect the rights and safety of our users or of CONTOUR.

Cookies

We use only the cookies that keep you signed in. There are no analytics, advertising or tracking cookies.

How long we keep it

A saved scan is kept until you delete it or your account. Your account, consent records and credits are kept until you delete your account.

Deleting your account permanently removes your account, consent records, credits and saved scans from our database straight away. Copies in our database provider’s backups are gone within 7 days. Stripe keeps its own records of payments, as financial regulations require.

Your choices and rights

• See your saved scans, and delete any of them, from your account page.
• Delete your account, and everything saved with it, from your account page at any time. Unused scan credits are lost when you do.
• Decline to save a scan: unlocked results stay on your screen for that session only.

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, and to withdraw consent. We honour these requests for every user, wherever you live. Write to privacy@thecontourapp.com. We will not treat you differently for exercising them.

Security

Connections to CONTOUR are encrypted. Each account can read only its own data, enforced by the database itself, and only our server can add credits. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Children

CONTOUR is for adults aged 18 or over. We do not knowingly collect information from anyone younger. If you believe a child has created an account, write to privacy@thecontourapp.com and we will delete it.

Changes to this policy

When this policy changes, we update the date at the top. If a change affects what we collect or share, we ask you to accept the new version before you continue.

Contact

Questions and requests about your privacy: privacy@thecontourapp.com.