Privacy Policy

■ Information processed on your iPhone

• –Facial photos you select or capture

Scoring is performed on your iPhone using features calculated from your photos. We do not store TrueDepth depth data, live-capture video, or raw features used for scoring.

■ Information sent to our servers (only when you use the feature)

• –AI photo generation: the source photo (including the reference photo, if you choose one)
• –Survey feature: the answers you choose, your score at the time of answering (an integer from 0 to 100), your self-declared gender and age group, the text of comments you write with your score at the time of posting, and likes
• –Subscription points: your balance and records of grants and spending

These are processed and stored on servers operated by us and our service providers to the extent needed to provide the feature. Survey answers are aggregated into percentages by score, gender, and age group before being shown to other users; individual answers are not shown. Comments are shown to other users with the score at the time of posting and without any name or icon identifying the writer.

Photos generated with AI are kept on our servers only until your device receives them and are deleted after receipt is confirmed. Photos that are not received are deleted after three days have passed since generation. Source photos and reference photos are not stored on our servers after the image is generated.

■ Information stored on your iPhone and potentially synced to iCloud

• –Scan results (scores and comments) and history
• –Low-resolution thumbnails
• –Face verification data (the minimum features needed to identify you in a group photo and to verify that photos in “Current Best,” “Find from Album,” and “Face Changes” are yours)

For a single-face scan, confirming that the face belongs to you is not a condition of access. For a photo containing multiple people, verification is used to identify the User who matches the face verification data and crop only that User. Verification is also used to protect personal-record features such as “Current Best,” “Face Changes,” and “Find from Album.”

If you are signed in to iCloud, this information may sync to your iCloud private database, an encrypted area managed by Apple exclusively for you. The Operator cannot read its contents.

■ Information handled for billing, referrals, and operations

• –Purchase history (App Store billing records used for receipt validation and cancellation analysis)
• –A pseudonymous identifier issued by the billing-management service that does not contain your name or email address
• –A random identifier generated by the App for each device
• –An app-scoped pseudonymous identifier derived from Apple-signed app transaction information (used to prevent duplicate referral benefits and duplicate grants of the first points; it does not contain a name or email address)
• –App and device-verification information from App Check, App Attest, and DeviceCheck
• –Referral codes; issuance and redemption status; IDs and states for point grants, usage, and refunds; and server timestamps (to operate the ledger and prevent misuse)
• –Minimum technical information processed by external services for security and incident response, such as request time, errors, and IP address
• –Crash information (Apple’s standard anonymous diagnostics)

■ Information we do not collect

• –Name or email address (the App does not require sign-in)
• –Precise location obtained through GPS or similar means, contacts, or calendar data
• –Identifiers used for advertising tracking across other companies’ apps or websites (the App does not perform advertising tracking)

We use collected information only for the following purposes:

• –Providing the App’s face-analysis features (processed on your iPhone)
• –Face verification to keep “Current Best,” “Face Changes,” and “Find from Album” as your personal records
• –Processing payments, managing purchase history, analyzing cancellations, and detecting payment fraud
• –Issuing and validating referral codes, granting referral benefits, and preventing misuse
• –Verifying point grants, usage, and balances, billing cycles, and trusted time, and preventing duplicate grants after reinstallation or similar events
• –Improving the App’s quality and stability based on crash and diagnostic information provided according to Apple settings
• –Responding to inquiries and complying with legal obligations

The Operator does not use facial photos or face verification data to train AI models.

The App uses Firebase services provided by Google LLC, including Cloud Functions, Firestore, and App Check, to validate referrals and prevent improper reacquisition of points.

Apple-signed app transaction information is verified externally and converted into an app-scoped pseudonymous identifier. The raw signed information and the identifier before conversion are not retained permanently after verification. App Attest and DeviceCheck help verify requests from the genuine App and prevent repeated grants on the same device. These mechanisms are not identity verification using a name or email address, and no App login is required.

Firebase stores or receives referral codes; pseudonymous identifiers; app and device-verification information; IDs and states for referral and point grants, usage, and refunds; server timestamps; and minimum technical information needed for fraud prevention and incident response. Face verification data, names, and email addresses are not sent.

While you take part in the seasonal ranking, the App sends one number to Firebase: your best overall score for that season, an integer from 0 to 100, linked to the pseudonymous identifier described above. It is sent only when that best score improves; no per-scan history is sent or stored. Face verification data, capture times, and location are not sent.

• –Scoring is performed on the User’s iPhone by AI models built into the App. For AI photo generation, the source photo (including the reference photo, if you choose one) is sent to an external AI service.
• –Scan results are entertainment-purpose estimates based on AI pattern analysis and are not a basis for medical, employment, interpersonal-evaluation, or other decisions.

• –Scan results, history, low-resolution thumbnails, and face verification data can be erased using “Delete All Data” in Settings.
• –Low-resolution thumbnails, history, and face verification data synced to iCloud are stored in your iCloud private database. Deletion through the App’s reset function is also synced to iCloud. If you delete only the App, data may remain in iCloud and be restored after reinstallation.
• –On-device markers that prevent reacquisition of the first points, the points ledger, referral-benefit deduplication records, and subscription status are retained even after “Delete All Data.”
• –Purchase history and pseudonymous identifiers are retained by the billing-management service for the period needed for billing management and accounting.
• –Referral codes, pseudonymous identifiers, app and device-verification results, and point grant, usage, and refund records are retained in Google Firebase for the period needed to grant benefits, prevent duplicate use, and combat misuse. Survey answers (the chosen answer, your score at the time, gender, and age group), comments (text, score at the time of posting, and like counts), and point balances with grant and spending records are retained in Firebase, linked to an identifier derived from your iCloud user ID, for as long as needed to provide the feature and combat misuse. Firebase does not store face verification data, names, or contact information. The only photos stored are AI-generated photos, which are kept until your device receives them and are deleted after receipt is confirmed or after three days have passed since generation. Seasonal ranking best scores (integers from 0 to 100) are retained to compute standings and are managed per season.

The App does not provide any personal data, including original photos, scan results, or face verification data, to advertising companies or data brokers.

To the extent necessary to operate the App, the following providers handle data for their respective roles:

• –Apple Inc. (App Store billing, iCloud sync, and verification using AppTransaction, App Attest, and DeviceCheck)
• –Providers of AI image generation (they handle the source photo and any reference photo only when you use that feature)
• –Google LLC (referral and points verification and ledger storage through Firebase Cloud Functions, Firestore, and App Check; fraud prevention and incident response)
• –Billing-management service (purchase-receipt validation and cancellation analysis; it handles a pseudonymous identifier that does not contain your name or email address)

These providers may be located outside Japan, including in the United States and Europe, or may process information using facilities outside Japan. Information needed for billing, sync, and the referral and points verification ledger is handled only to the extent needed to provide those features.

We will respond as required by law or when necessary to protect a person’s life, body, or property.

Under applicable law, Users have the right to request disclosure, correction, deletion, or suspension of use of their information.

• –You can delete on-device data at any time using “Delete All Data” in Settings, or by deleting the App.
• –To request access to or deletion of referral and points ledger data in Firebase, contact us through the App’s support page on the App Store. Minimum records needed to prevent improper reacquisition may be retained or irreversibly pseudonymized to the extent permitted by law.
• –To delete your survey answers and comments, contact us through the App’s support page on the App Store. Deleting all data in the App does not remove answers, comments, or point records held on the server.
• –To exercise any other right, contact us through the App’s support page on the App Store.

• –Data on your iPhone is managed by iOS security protections.
• –iCloud sync uses your iCloud private database, which is encrypted by Apple.
• –Communications concerning billing and Firebase referral and points ledgers are encrypted using HTTPS/TLS.
• –Firebase requests are checked using App Check and App Attest, and referral or benefit updates are processed by Cloud Functions rather than written directly by the client.

Although no security can be guaranteed as absolute, the App structurally minimizes leakage risk by not storing original photos on servers managed by the Operator or Google and by syncing low-resolution thumbnails only to the User’s private iCloud database.

The App is intended for Users aged 18 or older.

We do not knowingly collect information from anyone under 18. If we learn that a User is under 18, we will promptly provide instructions for deleting on-device data. A parent or guardian may contact us through the App’s support page on the App Store.

We may amend this Policy as necessary. Material changes will be announced in the App before they take effect. If the User continues to use the App after an amendment, the User is deemed to have agreed to it, in accordance with Article 548-4 of the Civil Code of Japan concerning amendments to standard terms and conditions.