Your account identity (email, via our sign-in provider Clerk), the photos you upload, the AI results we generate from them, your plan and purchase state (via Stripe — we never see card numbers), and your daily-mission preferences.

Your photo is sent to OpenAI (OpenAI, L.L.C., US), our third-party AI provider, to generate your analysis and optional before/after render, then stored with your history so you can revisit results. OpenAI is the only third party that receives your photo for analysis. Photos are used only to serve you. They are never sold, never used for advertising, and never used to train AI models — under our API agreement with OpenAI, what we send is not used to train its models, and we do not opt in to model improvement on submitted content. We do not perform facial recognition, identity matching, or surveillance of any kind.

Data lives in our database (Supabase, United States) keyed to your account. Traffic is encrypted in transit with TLS and Supabase encrypts data at rest. Before/after renders are identity-locked, presentation-only edits of your own photo. We keep your photos and results for the life of your account so your history and progress view work; delete them sooner at any time from Settings.

Delete your history anytime from Settings. Deleting your account from Settings erases your uploaded photos, every AI result and before/after render generated from them, and your personal profile fields, and removes your sign-in identity — we keep only the billing record we are required to retain for tax purposes. Email unsubscribe links are honored immediately.

If you opt in, we send a short daily mission email. Every email contains an unsubscribe link. Purchase receipts come from Stripe.

Clerk, Inc. (sign-in), Stripe, Inc. (payments), Supabase Inc. (database), OpenAI, L.L.C. (AI analysis — the only one that receives your photo), and Vercel Inc. (hosting). Each receives only what it needs to do its job, and each is bound by a written data-processing agreement that permits it to use that data solely to provide its service to us and requires it to protect your data to a standard equal to or greater than the protections described in this policy. We do not share your data with advertising networks, data brokers, or any party for advertising, profiling, or surveillance, and we do not sell personal data.