Privacy Policy

1. Who we are

face navi (the “App”) is a mobile application provided by Chomux G.K. (合同会社Chomux; “we”, “us”).

2. Information we handle

• Facial photographs — front and profile images you choose to use. We handle the image itself only; metadata attached to the photo (location, capture time, device information) is not used. See Section 6 for full detail.
• Editing settings — the areas, colors, intensity, finish and facial-shape adjustments you select. On-device editing uses these settings only on your device. AI makeup generation in earlier versions sends the selected makeup settings together with your photograph.
• Account information — email address and user identifiers for sign-in and account management.
• Analysis and usage — detailed results and simulation history are stored on your device. Your plan, usage counts, most recent face type and language are stored with your account. We also maintain statistics that are not linked to an individual.
• Purchases — product, transaction identifier and expiry for purchase verification, restoration and plan management. App Store or Google Play handles payment details; we do not receive your card number.
• Usage and device data — interactions, diagnostics, IP address and device identifiers for operation, advertising and fraud prevention. IP addresses may indicate approximate location. We do not access precise GPS location.

3. Why we use it

• To provide the facial analysis service
• To generate procedure simulation images and AI makeup images in earlier versions, and to edit facial shape and makeup on your device
• To manage and authenticate your account
• To verify purchases, manage usage limits and prevent misuse
• To deliver and measure advertising
• To improve app quality and fix defects

4. Information sent to external services

We send information needed to operate the App to the services below. For AI analysis, procedure simulation and AI makeup generation in earlier versions, your photos are sent to OpenAI with your consent. On-device face and makeup editing does not send photographs, landmarks or editing settings to external services. We do not send your photos, email address or facial analysis results to advertising providers, and do not sell personal information or photographs. Disclosures required by law are limited to the necessary scope.

5. Third-party services we use

We use the following services to operate the App. Information sent to them is limited to what the service requires.

• OpenAI, L.L.C. (San Francisco, California, USA) — image processing for AI facial analysis, procedure simulation and AI makeup generation in earlier versions. OpenAI is not used for on-device face and makeup editing. Images sent through the API are processed under OpenAI’s API terms, which exclude API data from model training. See the OpenAI Privacy Policy.
• Supabase, Inc. (USA) — account authentication and management. See the Supabase Privacy Policy.
• Google Sign-In / Sign in with Apple — social sign-in. Each provider’s own privacy policy applies.
• Google AdMob — advertising shown to users on the free plan. Gold and Premium members see no ads. AdMob may collect and share IP addresses, approximate location, device and advertising identifiers, interactions and diagnostic information for advertising, analytics and fraud prevention. Your photos are not sent to AdMob. On iOS, personalized advertising is used only if you allow tracking when prompted.
• Vercel — hosting the website and API, including request and error logs. Vercel Privacy Policy.
• App Store / Google Play — payment processing and purchase restoration under their respective policies.

Processing and retention by external services follow their terms and privacy policies. We limit what we send to the purposes described here.

6. Biometric information: facial photographs

On-device instant editing (face and makeup): supported versions detect eye, lip and face-contour positions on your device to adjust facial shape and makeup. This editor does not transmit photographs, landmarks or editing settings to our servers or an AI service. Landmarks are used temporarily within the editing screen, not to identify a person. Images may remain when you save, share or use on-device history. The external processing described below applies to AI analysis, procedure simulations and AI makeup generation in earlier versions.

This section is our written notice regarding biometric information, provided in accordance with the Illinois Biometric Information Privacy Act (740 ILCS 14) and comparable state laws.

(1) Facial data and where it is processed

• AI features process the still images of your face that you choose to upload
• We do not access Face ID data or other device-level biometric identifiers. On-device editing temporarily processes facial landmarks (coordinates of eyes, lips and contours) on your device. These landmarks are not transmitted to or stored by us or external services, and are not used for authentication or identifying a person
• We do not collect image metadata (location, capture time, device information)

(2) Purpose of collection and use

• AI analysis of facial aesthetics (proportions, facial thirds and fifths, symmetry and related measurements)
• Face type classification (eight types)
• Generation of before-and-after simulation images for the procedures you select
• Generation of AI makeup images in earlier versions using the areas, colors and intensity you select
• On-device facial landmark detection and photo editing for facial shape and makeup
• We use your photograph for no other purpose — not marketing, not advertising, not AI training, not medical records, and never for sale

(3) Disclosure to a processor

To perform AI facial analysis, procedure simulation or AI makeup generation in earlier versions, your photograph is transmitted to the processor named below. We obtain your explicit consent in the App before any transmission occurs.

• Recipient: OpenAI, L.L.C. (San Francisco, California, USA)
• What is sent: the image data and, for AI makeup generation in earlier versions, your selected makeup settings. Your email address, name, device identifier and other identifying information are not sent
• Handling by the processor: under the applicable API terms, data sent through the API is not used to train models by default. We do not opt in to training. Abuse-monitoring logs are normally retained for up to 30 days; legal or safety needs may require longer retention. See OpenAI data controls
• We do not transmit your photograph to any other third party, including advertising networks, other AI services or data brokers

(4) Retention schedule and destruction guidelines

• face navi servers: your photograph is never stored. It is held only in memory for the duration of the API request and discarded as soon as the response is returned (retention period: zero days)
• Processor: abuse-monitoring logs are normally retained for up to 30 days, with exceptions for legal and safety needs, including image safety review
• Your device: images you upload remain on your own device. Saved history, where enabled, is stored on your device and is removed when you delete the entry or the App
• We do not persist facial photographs on our servers. External services follow their own retention policies as described above

(5) What we never do

• We do not use your photograph to train or improve AI models
• We do not sell, lease, trade or otherwise profit from your biometric information
• We do not use your photograph for advertising or marketing
• No third party — including our physicians and staff — views your photograph
• We do not send your photograph to any AI or analytics provider other than the processor named above

Your photograph is transmitted only after you give consent in the App for the relevant feature. If you do not consent, AI analysis, procedure simulation and AI makeup generation in earlier versions cannot be used. On-device instant editing does not require consent to this external transmission.

7. Security

We maintain appropriate technical and organizational safeguards against unauthorized access, loss, destruction, alteration and disclosure. All communication is protected with TLS encryption. We use the same or greater standard of care for biometric information as we do for other confidential information.

8. Children

The App is intended for users aged 18 and over. If you are under 18, please use the App only with the consent of a parent or guardian. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact us and we will delete it.

9. Your rights

Request account and related-data deletion without using the App, or use Settings → Delete account in the App. Account information, usage counts, most recent face type and consent records are retained until account deletion. Statistics not linked to an individual may remain. Retention of purchase records and logs held by external services follows their policies.

You may:

• Request access to the personal information we hold about you
• Request correction or deletion of your personal information
• Delete your account, from within the App or by contacting us
• Withdraw your consent to biometric processing at any time by ceasing to use the analysis feature and deleting your account

California residents additionally have the right to know what personal information we collect, to request deletion or correction, and to request information about advertising data and privacy controls by contacting us. We will not discriminate against you for exercising any of these rights.

To exercise any right, contact us using the details in Section 10. We will respond within 45 days.

10. Contact

For any privacy question, including requests regarding biometric information:

Email: enavisupport@gmail.com

11. Changes to this policy

We may update this policy. If a change is material, we will notify you in the App or by email. Continued use after a change takes effect constitutes acceptance of the updated policy.