Privacy Policy

Last updated: February 1, 2026

1. Information We Collect

1.1 Images

When you use our Service, you upload photographs for analysis. These images are:

  • Processed in real-time by our AI analysis system
  • Temporarily stored in your browser's local storage for retry functionality
  • Sent to Anthropic's Claude AI for analysis (subject to their privacy policy)
  • NOT permanently stored on our servers
  • NOT used for training AI models
  • NOT sold or shared with third parties

1.2 Payment Information

Payment processing is handled entirely by Stripe. We do not receive, store, or process your credit card numbers. We only receive:

  • Confirmation of successful payment
  • Stripe session IDs (for delivery verification)
  • Email address (if provided to Stripe)

1.3 Technical Information

For rate limiting and abuse prevention, we temporarily collect:

  • IP addresses (for rate limiting, stored temporarily)
  • Browser type and version (standard web logs)

2. Biometric Data Notice

Important: Our Service analyzes facial features, which may be considered biometric data under certain laws (e.g., BIPA in Illinois, GDPR in EU). By using this Service, you consent to the processing of your facial image for aesthetic analysis purposes. This data is processed in real-time and not stored permanently. You may be subject to additional protections based on your jurisdiction.

3. How We Use Your Information

  • To provide facial aesthetic analysis
  • To process payments and deliver purchased analyses
  • To prevent abuse through rate limiting
  • To improve our Service (aggregate, anonymized analytics only)

4. Data Retention

  • Images: Not retained after analysis completes (browser storage only)
  • Payment records: Retained by Stripe per their retention policy
  • Rate limit data: Automatically deleted after 24 hours
  • Session tracking: Deleted 7 days after analysis completion

5. Third-Party Services

We use the following third-party services:

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Request deletion of your data
  • Object to processing
  • Data portability
  • Withdraw consent

Since we do not permanently store your images or create user accounts, most data is automatically deleted. For payment-related inquiries, contact Stripe directly or reach out to us.

7. Children's Privacy

This Service is not intended for users under 18 years of age. We do not knowingly collect information from minors. If you believe a minor has used this Service, please contact us.

8. Security

We implement appropriate technical and organizational measures to protect your data, including:

  • HTTPS encryption for all data transmission
  • Secure payment processing through Stripe
  • No permanent storage of sensitive biometric data
  • Rate limiting to prevent abuse

9. International Users

If you are accessing this Service from outside the United States, please be aware that your data may be transferred to and processed in the United States and other countries where our service providers operate.

10. California Residents (CCPA)

California residents have additional rights under the CCPA. We do not sell personal information. You may request information about the categories of personal information we collect and how it is used.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of material changes by updating the "Last updated" date.

12. Contact Us

For privacy-related questions or to exercise your rights, please contact us through the GitHub repository linked on the main page.

← Back to Narciss