Privacy Policy

Who We Are

FaceCutie ("we," "us," or "our") is a product of Goshen Consulting LLC, a New Jersey limited liability company. This policy covers our website at facecutie.com, web application at app.facecutie.com, and FaceCutie iOS and Android apps.

For privacy questions, contact us at privacy@goshenconsultingllc.com.

Information We Collect

Account Information

When you create a FaceCutie account, we collect:

• Email address — used for sign-in via magic link and account recovery
• Username — chosen by you, displayed on your community posts
• Avatar — an emoji you select to represent yourself
• Account creation date — automatically recorded

If You Sign in with Google

If you choose "Continue with Google," Google shares the following with us via OAuth 2.0:

• Your Google email address
• Your Google account name
• Your Google profile picture URL (we don't display this — we use the FaceCutie avatar emoji instead)
• A unique Google user ID

We do NOT receive: your password, contacts, calendar, search history, or any other Google data. You can revoke FaceCutie's access at any time at myaccount.google.com/permissions.

Photos You Upload

When you use the AI Beauty Mirror, Product Scanner, or attach a product photo in Beauty Genie, your photo is transmitted to Anthropic's Claude AI service for real-time analysis. FaceCutie does not save the one-time analysis photo after the request is complete. Under Anthropic's standard API terms, Anthropic may retain API inputs and outputs for up to 30 days, subject to its policy exceptions and any different retention agreement that applies.

What FaceCutie keeps (when you're signed in): For AI Beauty Mirror, a record of the analysis result — your skin score, celebrity twin match, and recommended routine. FaceCutie does not add a one-time analysis photo to Mirror history, Beauty Genie chat history, or Glow Club.

Saved progress photos (optional). The above applies to one-time analysis. If you choose to save a photo to Skin Tracker, we store it privately using Supabase. It is not visible to other users unless you separately choose to share it. You can delete individual saved photos or delete your account. These photos have no fixed automatic expiry while saved. Our storage provider processes them to provide this feature; FaceCutie does not use them to train AI models.

Glow Club Photos, Videos, and Audio

When you publish to Glow Club, we store the caption and any photo or video you attach, including sound in the video. Posts, comments, replies, and your public profile name and avatar can be seen by other people. Treat Glow Club as a public space, not private photo storage. Other people may save or share copies of what you publish.

Uploading to Glow Club is separate from submitting a photo for AI analysis or saving a private progress photo. We do not automatically publish your scans or private progress photos. Glow Club media has no fixed automatic expiry while its post remains stored. See "Delete Your Account and Data" and "Data Retention" below for deletion details.

If you choose to take a photo, record a video, or select media, your device may ask for camera, microphone, or photo-library access. Microphone access is used to record sound when you record a video. You can manage these permissions in your device or browser settings. Turning off permission does not delete content you already uploaded.

Data You Create in Your Account

When you're signed in, we store the following in our database (Supabase, hosted in the United States):

• Skin Tracker logs — the daily mood, score, and notes you record
• Skin Tracker progress photos — selfies you choose to save to track your skin over time, stored privately and visible only to you
• Products tried — products you've added with your reactions
• Mirror analysis history — past skin scores, celebrity twin matches, and routines (without photos)
• Community posts and media — captions, photos, videos, and video audio you choose to publish in Glow Club
• Comments and replies — the text you post, its author, time, and connection to a post or another comment
• Reports and blocks — the content or account you report or block, your report reason, and details you submit, used to address abuse and apply your blocking choices
• Likes — which community posts you've liked

Anonymous Local Data

Tracker entries and products saved locally while you are signed out stay in your browser or app's local storage and may be lost if you clear that data. This does not mean all signed-out activity stays on your device: a photo or question you submit for AI analysis is sent for processing, and analytics works as described below.

Analytics Data

We use Google Analytics 4 and PostHog to understand how people find and use FaceCutie. Depending on the part of the Service you use, analytics may include pages viewed, buttons used, referral or campaign information, device and browser type, approximate country or region, and product events such as starting a scan or opening a checkout page.

We do not intentionally send selfies, saved progress photos, skin-analysis contents, or full payment-card details to our analytics providers. Session recording is disabled in the FaceCutie app. On the marketing website, Google Analytics uses Advanced Consent Mode. While consent is denied, Google may receive limited cookieless measurements but does not set or read analytics cookies. Full Google Analytics cookies and PostHog website analytics are enabled only after you accept analytics cookies.

Creator Affiliate Applications

If you apply to the FaceCutie creator affiliate program, we collect your name, email address, requested referral code, public social-media handles, follower counts, content niche, application message, IP address, and application status. We use this information to review eligibility, prevent abuse, contact you about the decision, administer approved referrals and commissions, and keep program records.

How We Use Your Information

• To provide the features you request (skin analysis, recommendations, community)
• To send authentication emails (magic links to sign in)
• To send you newsletter emails if you've subscribed (you can unsubscribe anytime)
• To review creator affiliate applications and administer approved referral links, commissions, and payouts
• To improve our service based on aggregate usage patterns
• To detect and prevent fraud, abuse, or violations of our Terms of Service
• To enforce community guidelines and remove harmful content
• To comply with legal obligations

We do not sell your personal information. We do not use your information for advertising on third-party platforms. We do not use your skin tracker data or selfies to train AI models.

Third-Party Services We Use

FaceCutie relies on these trusted third-party services:

• Anthropic Claude AI — processes photos used with AI Beauty Mirror, Product Scanner, or Beauty Genie for real-time analysis. FaceCutie does not retain the one-time analysis photo after the request. Anthropic's standard API policy says inputs and outputs are deleted from its backend within 30 days, subject to stated exceptions or a different retention agreement. Anthropic's API retention information.
• Supabase — hosts our authentication, database, and uploaded-media storage, including private progress photos, Glow Club photos and videos with audio, comments, replies, reports, and blocks. Data is stored in the United States. Supabase's privacy policy.
• Resend — sends operational emails for creator affiliate applications, review decisions, and business inquiries. Resend's privacy policy.
• Google OAuth — optional sign-in method. Subject to Google's privacy practices. Google's privacy policy.
• MailerLite — manages our newsletter list. MailerLite's privacy policy.
• Google Analytics — anonymized usage analytics. Google's privacy policy.
• PostHog — product and website analytics, including page views, referral information, and feature events. PostHog's privacy policy.
• RevenueCat — manages native-app subscription status and purchase events. RevenueCat's privacy policy.
• Stripe, Apple, and Google Play — process payments and manage subscriptions. They receive the purchase and payment information needed to complete the transaction. FaceCutie does not store your full payment-card number.
• Vercel — application hosting. Vercel's privacy policy.
• Netlify — marketing site hosting. Netlify's privacy policy.
• Amazon Associates — when you click affiliate product links, Amazon tracks the referral. Amazon's privacy policy.

Your Privacy Rights

Depending on where you live, you may have the following rights. We honor these rights for all users worldwide regardless of your location.

Access Your Data

You can request a copy of all data we hold about your account. We will provide it in a machine-readable format (JSON or CSV) within 30 days of request. Email privacy@goshenconsultingllc.com with the subject "Data Access Request."

Correct Your Data

You can update your username and avatar directly in the app via the profile editor. For other corrections, contact us.

Delete Your Account and Data

You can request deletion of your account and associated personal data at any time:

• While signed in, open your account settings, choose Delete Account, and follow the confirmation steps.
• If you cannot use that control, email us at privacy@goshenconsultingllc.com with the subject "Delete My Account" and the email address linked to your account.
• Account deletion covers your profile, tracker logs and saved photos, products tried, Mirror history, posts and their uploaded photos and videos, comments and replies you authored, and likes.
• We complete verified deletion requests within 30 days, except for records we must retain as described under "Data Retention." If an in-app deletion fails, retry or contact us; an error is not confirmation that deletion completed.

Delete individual content: Use the delete control on a saved progress photo. For your own Glow Club posts, use the post menu and choose Delete post (older versions may show a trash icon). Where comments are available, use Delete on your own comment or reply. Deleting a comment removes its text but may leave a deleted-comment marker, its author reference, and thread information so other people's replies still make sense.

Post removal and file erasure are different. A successful post deletion removes it from the feed. Its uploaded file may remain in storage after the post is removed; deletion is not a promise of immediate erasure from every storage system or cache. To request or confirm removal of remaining files, contact us using the email above, or use account deletion. We cannot erase copies that other people have independently saved or shared.

Deleting your account does not cancel subscriptions managed by Apple or Google Play. Cancel those through the store that processed your purchase. Account deletion attempts to cancel an associated active Stripe web subscription.

Opt Out of Marketing

Every newsletter email contains an "Unsubscribe" link. You can also email us to be removed from all marketing communications. Note: even if you opt out of marketing, we will still send you essential account emails (sign-in links, security notifications, terms updates).

Manage Analytics

Click "Decline" on our cookie banner to keep analytics cookies, PostHog, and Pinterest tracking disabled. Google Analytics remains in consent-denied mode and may send limited cookieless measurements. Already accepted? Clear your browser's site data for facecutie.com to reset your choice.

For California Residents (CCPA/CPRA)

You have specific rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the "sale" or "sharing" of your information. We do not sell or share your personal information for cross-context behavioral advertising.

For European Residents (GDPR)

If you are in the European Economic Area, UK, or Switzerland, you have rights under the GDPR including access, rectification, erasure, restriction of processing, data portability, and objection. The lawful basis for our processing is your consent (which you can withdraw at any time) and the performance of our service contract with you. We do not transfer data outside our hosting providers' standard contractual frameworks.

Children's Privacy

FaceCutie is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us immediately and we will delete the account and all associated data.

Users between 13 and 17 should only use FaceCutie with the consent and supervision of a parent or legal guardian.

Data Security

We use industry-standard security measures:

• All data transmitted between your device and our servers is encrypted (HTTPS/TLS)
• Authentication is handled by Supabase with industry-standard JWT tokens
• Database access is protected by Row-Level Security policies that prevent users from accessing each other's private data
• API keys are stored in secure environment variables, never exposed in client-side code
• We don't store passwords (we use passwordless magic-link authentication or Google OAuth)

However, no system is 100% secure. We cannot guarantee absolute security of any information you transmit to us.

Data Retention

Saved progress photos and Glow Club media do not have a fixed automatic expiry. They are kept to provide the feature until you delete them, delete your account, or we remove them under our rules. Removing a post from the feed and erasing its stored media can happen at different times, as explained above. Temporary access links expiring does not delete the underlying photo or video.

We complete verified account or remaining-file deletion requests within 30 days, subject to legal retention requirements. Limited payment, tax, affiliate, security, abuse-report, and dispute records may be retained where needed to meet legal obligations or establish, exercise, or defend legal claims; this is not permission to keep all uploaded media indefinitely. One-time AI analysis is subject to the separate provider retention terms described above. Anonymized aggregate analytics may be retained indefinitely.

International Users

FaceCutie is operated from the United States. If you are using our services from outside the U.S., your information will be transferred to, stored, and processed in the U.S. and other countries where our service providers operate.

Changes to This Policy

We may update this Privacy Policy to reflect changes to FaceCutie, our service providers, or legal requirements. We will post the updated policy and change the "Last updated" date. For material changes that affect your rights or how we use personal information, we will provide any notice required by applicable law and may also notify you by email, in the app, or through a prominent notice on the Service before the change takes effect.

Changes apply from their stated effective date and do not apply retroactively. When applicable law requires consent for a new use of personal information, we will ask for that consent. If you do not agree with an update, you may stop using FaceCutie and request account deletion before the change takes effect.