Privacy Policy

1. Privacy contact details

Kovacs Software Solutions operates the App. Privacy inquiries: info@kovacssoftware.com. Support: support@kovacssoftware.com.

Providing information is voluntary. Without the required age/self-photo attestations, upload consent, selected photos, device identifier, and active entitlement, we cannot perform an analysis. We use the information only for the purposes and recipients described below. Subject to applicable law, you may request access to or correction or deletion of information by contacting us or using the App’s data controls.

2. Ages 16+ and your own photos only

The App is for people aged 16 or older. Analyze only photos of yourself. We record an eligibility confirmation timestamp, consent/policy version, and per-upload attestations; we do not request your birth date. If we learn that a photo of someone under 16 or another person was submitted contrary to these rules, we may restrict the account and delete or isolate the information as permitted or required by law.

3. Information processed

• The front and right-profile photos you capture or select for a requested analysis, and a front photo you separately choose to upload for an AI hairstyle preview.
• Your chosen goals, 5/10/15-minute routine, grooming and skincare experience, and facial-hair preference. The AI is instructed not to infer these preferences.
• The resulting report, applicable metric scores, confidence, observations, recommendation IDs, 90-day plan, task completions, check-ins, and progress comparisons.
• A random installation identifier, guest or Apple-linked account identifier, authentication tokens, request/idempotency identifiers, entitlement status, purchase status, request timing, IP address, and limited security/diagnostic information.
• Messages or attachments you voluntarily send to support, including any sensitive information you choose to include. Do not send health, mental-health, or other sensitive information that is not necessary for us to answer a product-support request.

How we collect it. We receive photos through the camera or photo picker when you choose to submit them; preferences and attestations directly from the choices you make in the App; account, purchase, and entitlement information from Apple and RevenueCat; technical request and security information automatically when the App communicates with our service; and reports or previews returned by the AI provider used for your request.

We do not create facial-recognition templates or persistent identity embeddings. We do not infer or request ethnicity, religion, nationality, sexuality, disability, medical conditions, personality, exact age, or identity.

4. Why we process information

We process information to provide the analysis, plan, and hairstyle preview you request; assess photo quality and safety; save your report and progress on your device; authenticate sessions; verify subscriptions; enforce the 14-day rescan interval; prevent duplicate, fraudulent, or abusive requests; provide support; maintain security and reliability; and comply with applicable law.

We do not use photos or reports for advertising, public rankings, social comparison, marketing profiles, or sale to data brokers.

5. Face data, photos, and AI processing

Face data we collect. When you request a scan, we collect the pixels in your front and right-profile photos, including the visible facial features, geometry, skin and hair appearance, pose, and lighting contained in those images. For a hairstyle preview, we collect the pixels in the front photo you select. We also process photo-quality and safety flags and the resulting appearance scores, confidence values, observations, recommendations, and plan. We do not create a faceprint, facial-recognition template, persistent facial embedding, or identity profile, and we do not use Face ID data. Apple performs Face ID authentication on the device and tells the App only whether authentication succeeded.

Consent and use. Before your first analysis, the App identifies OpenAI and Google Gemini and asks for your explicit permission to share your front and right-profile photos, App language, and selected goals and appearance preferences for scans you choose to request. Before your first hairstyle preview, the App separately asks for permission to share your selected front photo and hairstyle and hair-color choices with OpenAI or Google Gemini for previews you choose to create. The App does not send your name, email address, or device identifier to those AI providers. We do not use face data for identification, authentication, advertising, user tracking, sale, public rankings, or training our own models.

Remembered permission and withdrawal. Analysis and hairstyle permissions are recorded separately for your account on this device, with the consent version and time of approval. Permission remains valid across App launches for the disclosed data, providers, and purpose; it is not permission to upload in the background or for a result you did not request. You can withdraw either permission at any time in Settings → AI data sharing. Withdrawal stops future sharing for that feature, including new uploads and retries; it cannot recall data already sent or necessarily stop processing already underway. Your saved results remain available. If you decline or withdraw, no new data is sent for that feature until you explicitly allow it again. The App requests new permission when the recipients, shared data, or purpose materially change, or when the consent record is missing or no longer valid. AI-sharing permissions are not restored from the App’s iCloud backup and are cleared when you delete your account.

Transfer, temporary storage, and our deletion schedule. The App re-encodes selected images as JPEG, limits their dimensions, and strips source metadata such as EXIF and location before upload over encrypted transport. Our Laravel API temporarily stores the files in private, access-controlled infrastructure operated through Laravel Cloud so a requested job can be processed, then sends them to OpenAI or Google Gemini. Report analysis uses OpenAI with Gemini failover; hairstyle generation uses Gemini with OpenAI failover. Our temporary raw-photo files are not written to application logs and are deleted immediately after a successful or failed processing attempt. Automated cleanup runs every minute; even if a request is delayed or stalls, our raw-photo copy is deleted no later than 41 minutes after upload.

Results retained by us. The structured report is encrypted temporarily for safe retry and is deleted when the App confirms local storage, or is scheduled for deletion 24 hours after creation and removed by the next minute-by-minute cleanup run. A generated hairstyle result is encrypted for exact retry, expires after 10 minutes, and is removed by the next cleanup run. The result returned to the App is stored only in its private, purgeable cache unless you export or share it.

AI provider retention. We use paid API services and do not opt in to provider training, voluntary data sharing, developer-owned prompt logging, or datasets. OpenAI states that API data is not used for training by default and that content in abuse-monitoring logs may be retained for up to 30 days. Google states that paid Gemini API prompts and responses are not used to improve its products; Google may log them for a limited period solely for abuse monitoring, and isolated implicit in-memory caching can have a 24-hour time-to-live. We do not use Gemini File API storage, Search or Maps grounding, stateful Interactions or Live API storage, or explicit context caching for these features. Provider retention may continue where a provider is legally required to preserve data or must investigate abuse. See OpenAI API data controls and Gemini API retention.

AI processing is automated and probabilistic. We do not use the report to identify you, diagnose or infer a medical or mental-health condition, determine attractiveness or personal worth, or make a decision that produces legal or similarly significant effects. UPrime does not monitor photos, reports, support channels, or device activity to identify distress or imminent harm.

6. On-device storage and optional iCloud

Accepted progress photos, reports, plans, and completion history are stored in private App storage on your iPhone by default. Rejected or abandoned captures are deleted. If you explicitly enable iCloud backup, a versioned copy of the selected App data and photos is stored in your private iCloud container under Apple’s terms. Disabling backup does not by itself delete an existing iCloud copy; use the in-App delete control.

Face ID protection and notifications are optional device features. Face ID matching occurs entirely through Apple’s operating-system service; the App does not receive or store biometric templates. Permission can be changed in iOS Settings.

Anyone who can unlock your device, access your Apple account or iCloud container, view a notification, or receive content you export or share may be able to see the information. You are responsible for device and account access controls. Device loss, operating-system behavior, backup configuration, screenshots, exports, and sharing outside the App are not controlled by UPrime.

7. Processors and international transfers

• Laravel Cloud for the authenticated API, private temporary raw-photo storage, encrypted temporary results, queues, and security controls.
• OpenAI and Google Gemini receive the selected photos and, for report analysis, the App language, goals, and appearance preferences described in Section 5 only for the user-requested analysis or hairstyle image edit.
• RevenueCat receives subscription entitlement and restoration data but does not receive photos, face data, or reports.
• Apple provides the App Store, StoreKit billing, Sign in with Apple, and device permissions. Apple receives App photos and reports only if you separately enable the optional private iCloud backup described in Section 6.
• Diagnostics or support providers only if identified in the current App privacy disclosures and used in the deployed build.

We require every processor that receives user data, including Laravel Cloud, OpenAI, Google Gemini, and RevenueCat, through its applicable agreement and data-processing terms, to provide the same or equivalent protection described in this Policy and required by applicable law and the App Store Review Guidelines. Some recipients may process information outside Israel. We use contractual, organizational, and technical safeguards required by applicable Israeli law. Each provider also publishes its own terms and privacy information and is responsible for processing it performs independently. External services may change their systems or terms; we update this Policy and our processor review when required.

8. Legal disclosures and business changes

We may preserve, access, or disclose the minimum information reasonably necessary when required by applicable law, valid legal process, or a competent authority, or where permitted by law to investigate fraud or security, enforce our terms, defend legal claims, protect rights, or address a credible and imminent threat to life or safety. We do not promise that support is monitored continuously or that we can identify or respond to an emergency.

If the App or its operator is involved in a financing, reorganization, merger, acquisition, insolvency proceeding, or transfer of assets, information may be reviewed or transferred subject to applicable confidentiality, purpose-limitation, notice, and other legal requirements. A transaction does not authorize a materially incompatible new use without any notice or consent required by law.

9. Retention and deletion

Our raw-photo copy is normally deleted immediately after a processing attempt and, including delayed or stalled jobs, no later than 41 minutes after upload. An encrypted structured report is deleted when the App acknowledges local storage, or is scheduled for deletion after 24 hours and removed by the next minute-by-minute cleanup run. An encrypted hairstyle retry result expires after 10 minutes and is removed by the next cleanup run. Provider-side handling is described in Section 5: OpenAI abuse-monitoring retention may be up to 30 days; Google uses a limited abuse-monitoring period and may use isolated in-memory caching for up to 24 hours.

Operational server records retain only the minimum account/request identifiers, consent, prompt and model versions, status, timing, keyed input digest, cooldown metadata, and security information needed to operate and protect the service. These records do not contain raw photos or facial templates and are retained until account deletion, except where a shorter application rule applies or a longer period is required for security, fraud prevention, accounting, dispute preservation, or law.

You may delete an individual scan locally or delete the account and local content from Settings. Account deletion also requests backend identity deletion and removes pending notifications. If iCloud backup is enabled, the App attempts to delete its iCloud copy. Deletion may not be instantaneous in encrypted backups, provider queues, or records that must be retained. Limited records may remain for the period reasonably necessary or legally required for security, accounting, dispute preservation, legal claims, and fraud prevention, after which they will be deleted or de-identified as applicable.

10. Security and incidents

We use encrypted transport, authenticated access, private device storage, encrypted temporary server fields, rate limits, idempotency controls, and access restrictions. No technical or organizational measure, device, transmission, provider, or storage system is completely secure or error-free, and we cannot guarantee that unauthorized access, loss, alteration, or disclosure will never occur. This statement does not reduce our legal security obligations. We maintain an incident-response process and will notify the Privacy Protection Authority or affected people when applicable law requires it.

11. Support and emergencies

Support is not continuously monitored and is not a medical, mental-health, emergency, or crisis service. Do not use support to report imminent danger. If you voluntarily send sensitive information, we will process it to handle the request, protect the service or people, comply with law, and establish or defend legal claims as applicable. If you or someone else may be in immediate danger, contact local emergency services rather than UPrime.

12. Your choices and rights

You may decline an upload, revoke future consent, disable notifications, Face ID, or iCloud, restore or manage subscriptions, delete a scan, or delete your account. Existing locally saved reports remain readable after a subscription expires; new analyses and regenerated plans require an active entitlement.

To exercise applicable access, review, correction, objection, or deletion rights, email info@kovacssoftware.com. We may need to verify the request without requesting unnecessary identity data. Revoking consent applies to future consent-based processing and does not invalidate processing already completed lawfully or processing retained under another applicable legal requirement.

13. External resources and user sharing

The App may open Apple or other independent websites or services. Their operators determine their own processing, availability, and privacy practices. Review their notices before providing information. When you export, screenshot, or share a report or hairstyle image, the recipient and selected service may retain or redistribute it outside our control.

14. Changes and contact

We may update this Policy as the service or law changes. Material changes will be presented through an appropriate notice and, where required, renewed consent. Questions can be sent to info@kovacssoftware.com. See also our Terms of Use.