Privacy Policy

Your face, photos and scans. The app uses your camera, or a photo you choose, to place facial landmarks and compute your readings. This analysis runs on your phone. Photos, scans, readings, scan history and 3D models are stored on your device and are not uploaded to us. Deleting the app deletes them.

Subscriptions. Purchases are handled by the Apple App Store or Google Play; we never receive your card details. We use RevenueCat to check whether you have an active subscription. RevenueCat receives an anonymous app user ID, your purchase receipts and basic device information.

Usage statistics. We use PostHog to understand how the app is used, so we can fix problems and improve it. It receives events such as the app being opened, onboarding steps, your answers to onboarding questions (fixed choices, such as which area you want to work on), a scan starting or finishing, and a subscription screen being shown. Each event comes with an anonymous ID, your device model, operating system, app version and an approximate location (country and city) derived from your IP address. PostHog does not receive your photos, face images or readings, and we do not record your screen.

Install measurement. We use AppsFlyer to learn which links or ads lead people to install Symmi. It receives device information (such as model, operating system and IP address), the vendor identifier your iPhone assigns to our apps, the install, two onboarding events, and subscription events forwarded by RevenueCat. We do not ask for permission to track you across other companies' apps and websites, and we do not collect the advertising identifier (IDFA). On iOS, ad measurement uses Apple's privacy-preserving SKAdNetwork, which reports results in aggregate.

Your photo stays in your browser. The free tools (face shape, symmetry, colour analysis and the others) run inside your browser tab. The photo you choose is not uploaded; close the tab and it is gone. To run, the tools download face-landmark software from public servers (jsDelivr and Google). Those servers see an ordinary download request from your browser, never your photo.

Usage statistics. We use PostHog to count page views and tool use: the page and the site that sent you, which tool you used, the kind of result it showed (for example a face shape or a colour season), and clicks on the app store buttons. A random ID is stored in your browser's local storage so repeat visits count once; we don't set advertising cookies. PostHog derives an approximate location (country and city) from your IP address.

Hosting. The site is served and protected by Cloudflare, which processes IP addresses and request details to deliver pages and block abuse.

The Personal Face Report is a paid, made-to-order report and the one part of Symmi where you upload photos. This section applies only if you order one.

• What we collect: your name and email, the photos you upload, the areas you ask us to focus on and any notes you add, and your order and payment status.
• How it is made: your photos are processed by our own software and by AI services from Anthropic and OpenAI (for example, to generate the styling previews), then reviewed by a person on our team before delivery. They are used only to make your report.
• Payment: Stripe processes the payment for TidalAurum LLC. We see the payment status, never your full card number.
• Storage: photos and the finished report are stored privately in Cloudflare R2; your account and order records are kept in Supabase; sign-in codes and "your report is ready" emails are sent through Cloudflare's email service.
• Who can see it: you, when signed in with your email, and the team members who make and review your report.
• How long we keep it: your original photos are deleted after your report is delivered. The report, including the images inside it, stays in your account so you can download it. Order and payment records are kept as long as accounting and tax rules require. You can ask us to delete your report and account at any time.

Report terms: symmiapp.com/report/terms.

Only the service providers named above, each for the purpose described: RevenueCat, AppsFlyer, PostHog, Cloudflare, Supabase, Stripe, Anthropic and OpenAI, plus Apple and Google for app downloads and purchases. They process data on our behalf under their own terms and security controls. We do not sell your personal information, and we don't share it for others to advertise to you. We may disclose information if the law requires it.

• Everything the app stores about your face is on your device. Deleting the app removes it.
• You can block the website's usage statistics with your browser's privacy settings or a content blocker; the tools still work.
• You can ask us for a copy of the data we hold about you, or ask us to correct or delete it, by emailing nathan@symmiapp.com. We reply within 30 days. Depending on where you live (for example in the EU, the UK or California), you have these rights by law, and you can complain to your local data protection authority.

Symmi is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has sent us personal information, contact us and we will delete it.

Data travels over encrypted connections (HTTPS) and report files are stored privately, accessible only through your signed-in account or to our team. No system is perfectly secure, and we will tell you if a breach affects your data. Our service providers are based mainly in the United States, so your data may be processed there and in other countries where they operate.

When our data practices change we update this page and the date at the top. If a change is significant, we will say so on this page before it takes effect.

Symmi is made by TidalAurum LLC. Questions or requests about privacy: nathan@symmiapp.com.