Privacy Policy

Proportio is run by Proportio (“we”). This policy explains what we collect when you use Proportio, why, and the choices you have. Questions: proportioface@gmail.com.

The short version

• Your photos are analyzed on your device and never uploaded to us.
• We store the measurements taken from them (face and body geometry) so we can show your results. This is biometric data, and we only process it with your explicit consent.
• We don't sell your data, show ads, use your data to identify you, or train AI models with it.
• You can download or delete your data at any time in Settings.

What we collect

• Face and body geometry (biometric data). For each analysis: the positions of landmarks on your face (or body, for body scans), and the measurements, scores and notes we compute from them.
• Your answers. Gender, ethnic background, age, and optional height and weight. Ethnic background is used only to choose reference proportions; it's never scored or compared. Height and weight are used only for the body scan's BMI check.
• Consent records. When you agree to our biometric consent with an account, we record that you agreed, for face analyses or body scans, which version of the consent text, and when.
• Account details. Your email address and password. Passwords are stored as secure hashes by our authentication provider; we never see them.
• Billing. If you subscribe, Stripe processes your payment. We store your Stripe customer ID and plan, not your card details.

What stays on your device

Your photos (face and body), and the 3D head shape fitted to them, are processed in your browser and saved only in that browser's storage so you can see them with your results. We never receive them. Clearing your browser data removes them. Your display settings (theme, accent color and units) are also kept only in your browser.

How we use it

Only to produce and show your results and progress, run your account and subscription, keep the service secure, and comply with the law. We don't use your face or body data to identify you, and we don't sell or rent it, share it for advertising, or use it to train machine-learning models.

Consent and legal basis

We ask for your explicit consent before your first face analysis and your first body scan, separately. With an account, we keep a record of each agreement (face or body, the version, and the date); every analysis also records the version it was made under. Under the GDPR, we process biometric and ethnicity data on the basis of your explicit consent, and account and billing data to provide the service you asked for. You can withdraw consent at any time by deleting your analyses or account.

Who we share it with

Only the service providers that run Proportio, under contracts that limit how they use it:

• Supabase: database and sign-in (stores your account and analyses).
• Stripe: payments, if you subscribe.
• Our hosting provider: serves the website.
• Google: your browser downloads the face- and body-analysis model files from Google's servers, which sees your IP address as with any download. No photos or results are sent.

We may also disclose data if the law requires it.

How long we keep it

• Results made without an account: deleted 30 days after they were made, unless you log in to save them.
• Analyses saved to your account: until you delete them or your account.
• Inactive accounts: all face and body data is deleted 3 years after your last sign-in.
• Deleted data may remain in encrypted backups for a short time before it's overwritten. Stripe keeps billing records as the law requires.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA or Illinois BIPA), you can access, download, correct, or delete your data, and withdraw consent. In Settings you can download all data we store (including your consent records) and delete your account; each result has a “Delete this analysis” button. For anything else, email us. You can also complain to your local data protection authority.

Cookies and browser storage

We use only what the service needs: sign-in cookies, a cookie that remembers results you made before logging in (30 days), a cookie for your units choice (ft, in and lb, or cm and kg), and browser storage for your photos, your consent choice when signed out, and your theme and accent color. No advertising or tracking cookies.

Age

Proportio is for people 18 and older. We don't knowingly collect data from anyone younger; if we learn we have, we delete it.

Security

Data is encrypted in transit, stored with access limited to our servers, and never exposed directly to browsers.

Changes

If we change how we handle biometric data, we'll ask for your consent again before your next analysis.