Privacy Policy

App: Umax — Face Analyzer & Looksmax
Effective date: April 15, 2026
Last updated: April 15, 2026

This Privacy Policy explains how Umax ("we", "us", "our", or the "App") collects, uses, shares, and retains information when you use our iOS application. By using Umax you agree to the practices described here. If you do not agree, please do not use the App.

1. Data We Collect

1.1 Face Analysis Photos

Umax's core feature is AI-powered face analysis. When you use this feature, you either take a selfie with the device camera or pick an existing photo from your photo library. The photo is the primary input to the analysis feature.

Quoted statement regarding face data:
"When you use the Face Analysis feature, the selfie photo you take or select is sent to our AI provider (Google Gemini) solely to generate your analysis. The photo is not stored on our servers. Analysis results (scores and recommendations) are stored locally on your device and can be deleted at any time from the Settings screen. Google processes images per its API terms and does not use API requests to train its models."

What we receive: the photo itself (image bytes), transmitted once per analysis.
What we do NOT collect: we do not compute or store any biometric template, face embeddings, face geometry, or facial landmarks on our servers. On-device face presence detection (Apple's Vision framework) runs locally and its output never leaves your device.

1.2 Analysis Results

The text and numeric output of each analysis (scores across 11 categories, celebrity match results, color palette suggestions, hairstyle previews, eye analysis, ancestry predictions, recommendations) is returned to the App and stored locally in your device's app container. These results are not transmitted to our servers.

1.3 Profile Information You Provide

During onboarding you may provide: gender, age, personal goal, and self-rating. This information is stored locally in the app (UserDefaults) and used to personalize analysis prompts sent to the AI provider. It is not transmitted to any server operated by us.

1.4 Purchases and Subscriptions

To manage in-app purchases and subscriptions we use Adapty, a third-party SDK. Adapty receives a device-generated identifier and your purchase receipts from Apple's StoreKit. Adapty stores subscription state so we can validate entitlements and enable "Restore Purchases". See Adapty's privacy policy.

1.5 Product Interaction Events

Adapty also receives anonymized events such as paywall impressions and conversions to help us measure which offers users prefer. These events are tied to the device identifier described in 1.4 and are not linked to your name or email because the App does not collect those.

1.6 Device Identifier

A per-installation device identifier (not the IDFA) is used by Adapty to tie purchases to an installation. If you reinstall the App a new identifier is generated.

2. How We Use Your Data

To provide the core feature — sending your selfie to our AI provider to generate analysis results.
To personalize recommendations — using the onboarding answers you provided locally to tailor analysis prompts.
To manage subscriptions — via Adapty, for validating entitlements and enabling restore purchases.
To measure product health — anonymized paywall and feature-usage events through Adapty.

We do not use your data for advertising, cross-app tracking, or profiling unrelated to the App. We do not sell your data.

3. Third-Party Services We Use

The App shares specific data with the following third parties only for the purposes stated:

Google Gemini (Google LLC) — Receives your selfie photo and a text prompt when you run a face analysis. Google processes the image in real time to produce the analysis output. Per Google's current API terms, content submitted via the Generative Language API is not used to train Google's models. Google may retain API request data transiently for abuse monitoring. See Google's privacy policy.
Adapty (Adapty Tech Inc.) — Receives device identifier, purchase receipts and paywall/subscription events, as described in Sections 1.4 and 1.5.
Apple (App Store / StoreKit) — Processes payments for in-app purchases and subscriptions. Apple does not share your payment details with us.

These third parties are contractually bound to apply privacy protections that are equivalent to or stronger than those described in this policy for the data they receive from the App.

4. Data Retention

Selfie photos: not retained on our servers. After Google returns the analysis result, no copy of the photo remains with us.
Analysis results: stored locally on your device until you delete them from Settings or uninstall the App.
Profile answers (gender, age, goal, self-rating): stored locally on your device until you reset onboarding or uninstall the App.
Subscription / purchase data at Adapty: retained per Adapty's policy for as long as needed to validate entitlements; typically mirrored from Apple's receipt lifecycle.
Google Gemini request data: retained by Google per Google's API policies; we have no control over this window.

5. Consent to Third-Party AI Processing

Before your selfie is sent to Google Gemini for the first time, the App shows an explicit consent screen that names Google Gemini, explains what is sent, states that the photo is not stored on our servers, and links to this Privacy Policy. Tapping "I Agree" is required to proceed. Tapping "Cancel" prevents the data from being sent.

You can withdraw consent at any time from the Settings screen; doing so disables online analysis features and clears all stored analysis results from your device.

6. Your Rights and Choices

Delete local data: uninstalling the App removes all locally-stored analysis results and profile answers.
Revoke AI consent: from Settings → Privacy → "Revoke AI Analysis Consent". This clears stored analyses and disables online analysis.
Restore purchases: managed via Apple and Adapty from Settings.
Request account-style data: because the App does not require a user account and does not store personal identifiers server-side, there is no server-side account to access, export, or erase. If you have specific concerns, email us at the address below and we will respond within 30 days.

7. Children's Privacy

Umax is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided data to the App, contact us and we will take appropriate steps to address it.

8. Security

All data transmitted to Google Gemini, Adapty, and Apple is sent over TLS. Locally stored data is protected by iOS's standard app container sandboxing. No transmission or storage system is perfectly secure, so while we apply industry-standard protections, we cannot guarantee absolute security.

9. International Transfers

Google Gemini and Adapty may process data in the United States and other jurisdictions. By using the App, you consent to such transfers. These providers maintain safeguards consistent with applicable data-protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent changes. Material changes will be announced within the App. Continued use of the App after an update constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy or our data practices, please contact:

Email: support@umax.app
Developer: Meriç Değirmencioğlu
Privacy policy URL: https://mericdegirmencioglu.github.io/umax-privacy-policy/
Terms of Service: https://mericdegirmencioglu.github.io/umax-terms-of-use/