Last updated: 23 September 2026
Operator: Y Digitals, Australia
Contact: helloiamyusuf@gmail.com
1. The short version
- FacialStack takes three photos of your face to build a skincare and grooming routine.
- Your photos go into private storage that only your account can read.
- We never sell your data, and we never use your photos for advertising.
- You can delete your photos from Settings at any time, and your whole account from the app's Settings or by emailing us.
- FacialStack is for adults only (18+).
- FacialStack is not a medical service and does not diagnose anything.
2. Who this applies to
FacialStack is available to people aged 18 and over. We ask your age range during onboarding and block accounts for anyone under 18. If we learn that we hold data about someone under 18, we delete it.
3. What we collect
You give us:
| Data | Why |
|---|---|
| Email address (or Google / Apple account identifier) | To create your account and keep your progress across devices |
| Three face photos per scan | To produce your analysis and routine |
| Onboarding answers — age range, gender (optional), goals, skin type, budget, time per day, region, reminder times | To pick products and build a routine that fits you |
| Daily check-ins | To track your streak and consistency |
Created automatically:
| Data | Why |
|---|---|
| Analysis results — per-area scores, concern tags, notes | To show your report and compare it to your own later scans |
| Your generated routine and product list | To show the Routine and Products tabs |
| Product link clicks — product, region, timestamp | To understand which recommendations get used |
| Subscription status | To unlock paid features |
| Reminder preference and times | To send the reminders you switched on |
Guest accounts. If you choose "Keep going without an account", we create an account identified only by a random ID — no email or name. Your data is protected exactly as it would be with an email account. You can add an email later in Settings, which keeps everything you have saved. If you sign out of a guest account without adding an email, you cannot get back into it — so if you want that data gone, delete the account in Settings before you sign out.
Scanning on the website before signing up. On our website you can take your scan before creating an account. We give you a temporary guest account for it (a random ID, nothing else). When you then sign up, your scan stays with you; if you sign in to an account you already have — including with Google — we move the scan and your answers into that account and delete the temporary one.
Cookies on the website. We use two cookies, both needed for the site to work: one keeps you signed in, and one remembers your time zone so that "today" in your routine is your today. We do not use advertising or tracking cookies.
Product analytics (only if switched on). We may count which steps of the website get used — for example "started a scan" or "opened checkout" — under a random identifier kept in your browser's local storage, to find where people get stuck. Your photos, your answers and your email address are never sent to our analytics provider. If this is switched on, the provider is listed in section 6.
Reminders in the app are scheduled on your phone. No push token or device identifier is sent to us.
We do not collect: your precise location, your contacts, your photo library, body or weight information, or health records.
4. Your face photos, specifically
Face photos may count as biometric or sensitive personal data under laws including the EU/UK GDPR, the Illinois Biometric Information Privacy Act (BIPA), and the Australian Privacy Act. We treat them accordingly.
- Stored privately. Photos live in a private storage bucket. There is no public link. Access rules restrict every file to the account that uploaded it.
- Viewed through short-lived links. When the app or website shows you a photo, it generates a signed URL that expires within minutes.
- Sent for analysis only. To produce your report, your three photos are sent to our AI provider (OpenRouter, which routes the request to Google's Gemini model) over an encrypted connection. See section 6.
- Not used to train AI models by us. See section 6 for the provider's position, which you should verify.
- Not used for face recognition or identification. We do not build a faceprint, we do not match you against any database, and we do not identify you from your photos.
- Never used to rate your appearance. FacialStack does not score attractiveness and does not compare you to other people. Scores describe areas (like skin clarity) and are only ever shown against your own earlier scans.
- Never logged. Image data is not written to our application logs.
Retention: photos are kept until you delete them (Settings › Delete all photos, in the app or on the website) or your account is deleted. Deleted photos are removed from storage straight away.
Consent: by taking a scan you consent to us processing your face photos for the purposes above. You can withdraw that consent at any time by deleting your photos in Settings.
5. Why we are allowed to process it (GDPR/UK)
| Purpose | Lawful basis |
|---|---|
| Running your account | Performance of a contract |
| Processing face photos | Your explicit consent (Art. 9(2)(a)) |
| Reminders you switched on | Your consent |
| Keeping the service secure, preventing abuse | Legitimate interests |
| Tax and accounting records for purchases | Legal obligation |
6. Who we share it with
We do not sell your data. We share only what each provider needs:
| Provider | What they get | Purpose |
|---|---|---|
| Supabase Inc. | Account, photos, scans, routine, check-ins, preferences | Hosting, database, storage, authentication |
| OpenRouter and Google (Gemini) | Your three face photos and the analysis instructions | Producing your report |
| RevenueCat | A pseudonymous user id and purchase events | Subscription management in the app |
| Google Play (and the App Store if you use iOS) | Purchase and billing data | Processing payments in the app |
| Stripe | Your email address, a pseudonymous user id, and the payment details you type into Stripe's own checkout page | Processing website payments. We never see or store your full card number |
| Vercel | Standard request data such as your IP address and browser type, in short-lived logs | Hosting the website |
| PostHog (only if product analytics is switched on) | Which website steps were used, under a random identifier | Understanding how the website is used |
We never send them your email address for advertising, and none of them are permitted to use your data for their own purposes.
7. Where your data is held
Your data is stored in Sydney, Australia. Our AI provider may process your photos in the United States and other countries where it operates. Where data leaves the UK/EEA we rely on the European Commission's Standard Contractual Clauses, and the UK International Data Transfer Addendum for people in the UK.
8. Your rights
Wherever you live, you can:
- See what we hold about you
- Correct anything wrong
- Delete your photos — Settings › Delete all photos; or your entire account — Settings › Delete account in the app, or email us
- Export a copy of your data
- Withdraw consent for photo processing
- Object to processing based on legitimate interests
Deleting your account removes your photos, scans, scores, routine, check-ins, profile and login from our systems. Records of which product links were tapped are kept, but with nothing that links them to you. It cannot be undone, and support cannot recover it.
No longer have the app? See how to delete your account.
To exercise any right, email helloiamyusuf@gmail.com. We reply within 30 days. If you are in the EU/UK you may complain to your data protection authority; in Australia, to the OAIC.
Subscriptions and deletion. Deleting your account — in the app or by email — also cancels any subscription you bought on the website; if it can't be cancelled at that moment, your account is not deleted and we tell you why. A subscription bought in Google Play or the App Store is not cancelled by deleting your account — cancel it there.
9. Security
Encryption in transit (TLS) and at rest; row-level security so one account cannot read another's data; private storage with per-user access rules; short-lived signed URLs; no image data in logs. No system is perfectly secure, and we cannot guarantee absolute security.
10. Not medical advice
FacialStack is a cosmetic and grooming tool. It does not diagnose, treat or prevent any condition. When the analysis spots something that may need a clinician, it tells you to see a GP, dermatologist or pharmacist instead of recommending a product — that prompt is not a diagnosis either. Always speak to a qualified professional about a health concern, and never delay doing so because of anything in this app.
11. Children
Not for under 18s. We do not knowingly collect data from children. If you believe a child has an account, email helloiamyusuf@gmail.com and we will delete it.
12. Changes
If we change this policy materially we will tell you in the app or on the website before the change takes effect.
13. Contact
Y Digitals
helloiamyusuf@gmail.com