Privacy Policy

PlasticAi ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

This Privacy Policy applies to our mobile applications for iOS and Android (the "App") and our related services. By using PlasticAi, you consent to the practices described in this policy.

This section explains, specifically and in full, our collection, use, disclosure, sharing, and retention of face data.

2.1 What Face Data We Collect

To provide our service, we collect the following face data:

• Facial Photographs: Photos of your face that you capture or select and upload. These are the primary input to the App.
• Facial Analysis Data: Information derived from your facial photograph by our AI analysis, including facial measurements, proportions, landmark positions, and descriptive facial attributes. Together these make up your personalized facial analysis report.

We do not use the device's TrueDepth camera or ARKit face-tracking and do not create or store a 3D face map or face geometry mesh.

2.2 How We Use Face Data

We use your face data only to:

• Generate AI-powered before/after cosmetic procedure previews from your facial photograph.
• Produce your personalized facial analysis report (facial measurements, proportions, and attributes).
• Display, and allow you to manage and delete, the previews and report generated for you.

We do NOT use your face data to train AI models, for advertising, or for any purpose other than delivering the features described above.

2.3 Where Face Data Is Stored

• We do NOT operate our own servers and we do NOT store your face data on any server we control.
• Your facial photographs, facial analysis reports, and generated preview images are stored only locally on your device. Photos are saved in the App's private storage and are excluded from device cloud backups (iCloud on iOS and Google/Android auto-backup on Android).

2.4 How Face Data Is Shared

• To produce your results, the App sends your facial photograph directly from your device, over an encrypted connection, to the third-party AI providers listed in Section 5: Anthropic (to produce your facial analysis report) and Google (to generate your cosmetic preview images using its Gemini image-generation models, also known as "Nano Banana").
• These providers process your photo only to return a result and, under the terms of the paid services we use, do not use your photo to train or improve their AI models. Each provider's handling is governed by its own privacy policy (see Section 5 for links).
• We do not sell your face data, and we do not share it with any other third parties or for any other purpose.

2.5 How Long We Retain Face Data

• Because your face data is stored only on your device, it is retained for as long as you keep it in the App.
• You can delete any individual photo, facial analysis report, or generated image from within the App at any time, which removes it from your device.
• Deleting the App, or clearing your photos in Settings, permanently removes all face data from your device.
• The AI providers in Section 5 process your photo to generate a result and retain it only transiently for that purpose. Where applicable, they may keep it for a limited period solely for security, abuse monitoring, and legal compliance, as described in their policies, after which it is deleted. They do not use it to train their models, and we do not retain a copy.

3.1 Information You Provide Directly

The App does not require you to create an account, and we do not collect a username, password, or login credentials.

Subscription Information: We process subscriptions and payments through your app store's in-app purchase system — Apple In-App Purchases on iOS and Google Play Billing on Android — managed via RevenueCat. We do not receive or store your credit card information.

Feedback and Support: If you contact us for support by email, we receive your email address, your message, and any attachments you choose to provide.

3.2 Information Collected Automatically

Device Information: We collect device type, operating system and version (iOS or Android), app version, and device identifiers (such as the identifier-for-vendor, and — only if you grant permission via Apple's App Tracking Transparency prompt on iOS — the advertising identifier / IDFA) for crash reporting, analytics, and advertising attribution.

Usage Analytics: We collect information about which features you use and how you interact with the app, to improve our service.

Advertising and Attribution Data: To understand which marketing campaigns lead people to install PlasticAi and to measure the performance of our ads, we and our attribution partner AppsFlyer collect device and event information such as device identifiers, IP address, install and in-app event data (including purchases), and campaign referral data. On iOS, tracking that uses the advertising identifier across other companies' apps and websites occurs only if you grant permission through Apple's App Tracking Transparency prompt; if you decline, measurement relies on Apple's privacy-preserving SKAdNetwork framework instead.

Crash Reports: If the app crashes, we collect crash logs and diagnostics to fix bugs.

Camera/Photo Library Access: The app requests permission to access your device's camera and photo library. We do not automatically upload or monitor this — we only access photos you explicitly select.

In addition to the face data uses described in Section 2.2, we use the information we collect to:

• Process and manage your subscription and payment
• Provide customer support
• Improve the app's functionality and user experience
• Measure, attribute, and optimize our advertising and marketing campaigns
• Comply with legal obligations
• Prevent fraud and abuse

We use the following third-party services that may access your data:

5.1 Anthropic (Claude API)

• Receives your facial photo to produce your personalized facial analysis report
• Subject to Anthropic's Privacy Policy: https://www.anthropic.com/privacy
• Does not use your photos to train AI models

5.2 Google (Gemini API — Image Generation)

• Receives your facial photograph to generate your cosmetic preview images, using Google's Gemini image-generation models ("Nano Banana").
• We use the paid Gemini API. Under Google's Gemini API Additional Terms for paid services, Google does NOT use your prompts, uploaded images, or the generated outputs to train or improve its AI models.
• Google logs your prompts and the responses only for a limited period, solely to detect and prevent abuse and security violations and to meet legal or regulatory requirements; this content is handled as transient or cached data and is not used for any other purpose.
• Because we use the paid tier, your content is not subject to the human review that Google applies to its unpaid services; Google's processing is governed by its Data Processing Addendum.
• Generated preview images carry Google's provenance markings (SynthID watermark and C2PA metadata) identifying them as AI-generated.
• Subject to the Google Privacy Policy: https://policies.google.com/privacy and the Gemini API Additional Terms: https://ai.google.dev/gemini-api/terms

5.3 App Store & Google Play (Payments)

• On iOS, Apple processes all payments and manages billing for your subscription; on Android, Google Play processes all payments and manages billing. In both cases we never receive or store your payment card details.
• Subject to Apple's Privacy Policy: https://www.apple.com/privacy and Google's Privacy Policy: https://policies.google.com/privacy

5.4 RevenueCat (Subscription Management & Analytics)

• We use RevenueCat to validate your purchases, manage your subscription status and entitlements (so your access stays in sync across your devices), and provide us with subscription analytics.
• RevenueCat receives your App Store or Google Play purchase and receipt data and transaction history, an anonymous app user ID we generate for your installation, and device and app information (such as a per-installation device identifier, country, device type, operating system, and app version). It does NOT receive your name or your payment card details.
• RevenueCat uses this data only to manage subscriptions and provide us aggregate analytics. It does NOT receive your facial photographs, your facial analysis report, or your generated preview images.
• Subject to RevenueCat's Privacy Policy: https://www.revenuecat.com/privacy

5.5 AppsFlyer (Attribution & Marketing Analytics)

• We use AppsFlyer, a mobile measurement partner, to attribute app installs to the marketing campaigns that referred them and to measure the performance of our ads and in-app events.
• AppsFlyer receives device information (such as device identifiers, IP address, device type, and operating system), install and session data, and in-app events (including purchases). It does NOT receive your facial photographs, facial analysis report, or generated preview images.
• Subject to AppsFlyer's Privacy Policy: https://www.appsflyer.com/legal/services-privacy-policy/

5.6 TikTok (Advertising Measurement)

• If you install the App after interacting with one of our TikTok ads, we use TikTok's advertising measurement (via AppsFlyer) to attribute the install and measure campaign performance.
• TikTok may receive attribution and event data — such as install and post-install events and device/campaign identifiers — for ad measurement and optimization. It does NOT receive your facial photographs, facial analysis report, or generated preview images.
• Subject to TikTok's Privacy Policy: https://www.tiktok.com/legal/page/row/privacy-policy/en

5.7 PostHog (Product Analytics)

• We use PostHog to understand how people move through the App — for example, which onboarding steps and features people reach — so we can find where the experience can be improved.
• PostHog receives anonymous product-analytics events (such as screens viewed and features used), an anonymous identifier we generate for your installation, and basic device and app information (such as device type, operating system, app version, and approximate region derived from IP address). It does NOT receive your facial photographs, facial analysis report, generated preview images, your name, or your answers to the in-app questionnaire.
• We use this data only in aggregate to measure and improve the App, not to advertise to you.
• Subject to PostHog's Privacy Policy: https://posthog.com/privacy

Storage and retention of face data (facial photographs and facial analysis data) are described in Sections 2.3–2.5. In summary, all face data and generated images are stored only on your device, never on a server we control, and remain until you delete them or remove the App.

6.1 Generated Images

• Generated before/after preview images are stored only on your device until you delete them
• You may save generated images to your device's photo library
• You own the rights to generated images for personal, non-commercial use

We take the security of your information seriously:

• Your photos, reports, and generated images are stored on your device, not on our servers, and are excluded from device cloud backups (iCloud on iOS / Android auto-backup on Android)
• Data sent to our third-party AI providers is transmitted over encrypted connections (HTTPS/TLS)

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of data once it leaves your device.

8.1 Access and Control

• All your photos, reports, and generated images are stored on your device and are viewable within the App
• You can delete any individual photo, report, or generated image at any time
• Deleting the App, or clearing your photos in Settings, permanently removes all your data from your device

8.2 Privacy Rights by Region

If you are in the EU (GDPR), California (CCPA), or other regions with privacy laws, you have additional rights including the right to access, correct, delete, and port your data. Contact us at support@visageai.app to exercise these rights.

PlasticAi is not intended for users under 13 years old. We do not knowingly collect data from children under 13. If we discover we have collected data from a child under 13, we will delete it immediately.

Some regions may have different age requirements. If you are under the minimum age in your region, do not use this app.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, if required, by sending you an email or in-app notification.

Your continued use of the app constitutes acceptance of the updated Privacy Policy.

If you have questions about this Privacy Policy, how we handle your data, or if you wish to exercise your privacy rights, please contact us at:

Email: support@visageai.app
Website: https://plasticaiapp.com
Mailing Address:
PlasticAi
Suite 314, Railway House
GU21 5AH, Woking, Surrey
United Kingdom

For EU users, you also have the right to lodge a complaint with your local data protection authority.