Privacy

Last updated 18 August 2026. Plain English first, then the detail.

The short version

• Your selfie stays in your browser. It is sent once, over an encrypted connection, to Google’s Gemini API to build your profile (and again only if you tap “Paint it in HD”). We do not store it on our servers, we never train anything on it, and we never sell it.
• Face measurements happen on your device. The brow map and proportions are calculated in your browser from face landmarks; the landmarks themselves never leave your device. Only derived numbers (for example “eye spacing 1.2×”) are sent as text with your analysis.
• Email only if you give it, to send your profile and, if you opt in, occasional updates. One click to unsubscribe.
• Analytics need your OK. We ask before setting any analytics cookie. If you decline, we still count your visit anonymously, without cookies.
• Payments are handled by Stripe. We never see your card number.
• Sample faces on this site are AI-generated, not customers.

Who we are

The data controller is GlowJourney (sole trader, United Kingdom). Contact: hello@beautyprofile.app. This service is intended for people aged 16 and over.

What we process, why, and for how long

Your selfie. A photo of your face is sensitive, so we treat it carefully. Legal basis: your explicit consent, given by ticking the box on the upload screen; you can decline and simply not use the service. Purpose: generating your Glow Profile (colour season, undertone, face and eye shape, palette, look) and, only if you tap it, one rendered “after” image. Where it goes: from your browser to our server (hosted on Vercel, memory only, not written to disk or logs) and on to Google’s Gemini API for processing. We use the paid Gemini API, where Google does not use your content to train its models; Google may keep API inputs for a limited period for abuse monitoring under its own terms. After the response, GlowJourney holds nothing. In your browser the photo and your result are kept in session storage (cleared when the tab closes) and, if you open “My Glow Profile”, in your device’s local storage until you clear it there. Nothing about your photo is used for advertising.

Quiz answers (skin type, preferences, name if you give one). Legal basis: consent, as above. Sent with the selfie for the analysis; kept only in your browser afterwards.

Face landmarks and measurements. Computed on your device with an on-device model; the landmark points never leave your browser. A short text summary of proportions (ratios and millimetres) is sent with the analysis so the profile can use it. It cannot identify you and is not stored by us.

Email address, if you enter it (to save your results, at the “we’re at capacity” screen, or to hear about Pro). Legal basis: consent. Stored in our database (Supabase, EU/London region) together with your colour season, where you came from (for example “pinterest” and a campaign name) and the date. Used to send you what you asked for. Kept until you unsubscribe or ask us to delete it. Never sold or shared for others’ marketing.

Payment and subscription data (Pro). Handled by Stripe under Stripe’s privacy policy. We receive your email, a customer identifier and subscription status so we can unlock Pro; we store those in our database while your subscription exists and for our tax records afterwards.

Fair-use and cost limits. To stop abuse of the free analysis we count requests per visitor per day. The counter key is a one-way hash of your IP address (we cannot turn it back into an IP); rows are deleted after 7 days.

Hosting logs. Our host (Vercel) keeps standard request logs (IP address, time, URL, status) for a short period for security and reliability.

Analytics and cookies

We use PostHog (EU cloud, hosted in the EU) to understand which pages, buttons and steps work, so we can improve the product. We show a notice on your first visit:

• Accept: PostHog may set a first-party cookie/local storage to recognise your browser across visits, and may record a session replay to help us fix usability problems. In replays, all images, camera previews and canvases are blocked and every input is masked, your face and your email are never in a recording. We also remember where you first came from (for example a Pinterest pin) so we know what brought you here.
• Decline (or no choice yet): no analytics cookies or storage at all. Your visit is counted using a daily-rotating, one-way hash generated on PostHog’s servers, which cannot recognise you tomorrow. No replay.

Either way we record what happened (for example “quiz started”, “result viewed”) and derived facts about your result (such as your colour season), never your photo, never your name. If you gave us your email, we can associate your events with it so we can, for example, stop asking you for it. Analytics data is retained by PostHog for 12 months.

If you accept, and only then, we may also load Pinterest’s conversion tag so Pinterest can tell us which of our pins led to a visit or sign-up. Pinterest’s use of that data is governed by Pinterest’s privacy policy.

Strictly necessary storage that does not need consent: your quiz answers, photo and result in your own browser (so the pages work), your cookie choice, and a signed cookie that remembers Pro access after you pay.

Where your data goes (processors)

• Google (Gemini API): analysis and, in Pro, painting looks onto your selfie; US-based, under Google’s API data-processing terms and standard contractual clauses.
• Vercel: hosting; request handling and logs.
• Supabase (EU/London): email list, fair-use counters, Pro entitlements.
• PostHog (EU cloud): analytics, with your consent as described above.
• Stripe: payments.
• Pinterest: conversion tag, only with your consent.

Your rights

Under UK GDPR and EU GDPR you can ask what we hold about you, ask us to correct or delete it, object, or withdraw consent at any time (withdrawing consent does not affect what was done before). Email hello@beautyprofile.app and we will answer within 30 days. Because your selfie is not stored by us there is normally nothing to delete on our side; to remove your local copy, clear this site’s data in your browser. You can also complain to the ICO (ico.org.uk) or your local data-protection authority.

Not medical advice

Skin notes and routines are cosmetic guidance only, not a diagnosis. Persistent or painful skin concerns need a pharmacist or dermatologist.

Changes

If we change what we do with data, we change this page first, and we date it. Material changes will be flagged on the site.