Upface - Privacy Policy

Last updated: 14 October 2026

This Privacy Policy explains how Furkan Kaya ("we", "us") collects, uses, shares and retains information when you use the Upface mobile application for iOS (the "App").

In short: the App works without an account. To score your photos, they are sent through our server to Google's Gemini API; our server does not store them, and Google does not use them to train its models. We keep only the result, encrypted, for at most 24 hours. We do not sell your data, show ads or track you across other companies' apps or websites.

1. Who we are

The App is developed and operated by Furkan Kaya, an independent developer established in the Republic of Türkiye, the data controller for the processing described here. Contact: support@kayaapps.com.tr. We answer data-protection requests within 30 days.

2. What we process

  • Your scan photos (one front and one side selfie per scan, from the camera or a photo you pick) — to estimate your scores and, for subscribers, to create your Day-30 "Potential" portrait. Before upload they are resized on your device (about 1024 px on the long edge, JPEG).
  • Your answers in the setup questions (gender, birth year, goal, routine, sleep, diet, hair/beard, target look, commitment) — to tailor your scores' explanations, your 30-day plan and your reminders. They are stored on your device; with a scan we send only the short answer codes the analysis needs (goal, routine, sleep, diet, hair/beard, target look, commitment), the style branch derived from your gender answer (male, female or unspecified) and the App language — never your name or birth year.
  • Weekly rescans (subscribers) — the new photos plus your previous scores, the areas your plan works on and how many plan tasks you completed, so the change between scans can be measured.
  • Coach questions you type (subscribers) — the question, your goal, the relevant scores and plan modules, to answer it; sent without your photos.
  • Purchase and subscription status — to unlock and restore Upface Pro.
  • Technical data — an anonymous installation identifier, an Apple App Attest key, app version, OS version, device model and language — to keep your subscription in sync, enforce fair-use limits, prevent abuse and diagnose faults.

The App contains no analytics SDK: the in-app usage events it records stay on your device. We never ask for your name, email, phone number or address. We do not access your contacts, location, health data or microphone, and the system photo picker gives us only the image you select.

3. Face data

This section controls everything face-related in this policy.

  • What happens to your face. Your selfies are analysed by an AI model to estimate the appearance scores you asked for (skin, jawline or glow, eyes, puffiness, hair, symmetry or harmony, and an overall Glow Score) with a one-sentence reason for each, and — for subscribers — to create one edited "Potential" portrait of you (clearer skin, less under-eye shadow, tidier hair and better light; your face shape, features and skin tone are kept).
  • What we do NOT do. We do not create, store or compare faceprints, face templates, embeddings or any biometric identifier, and we never use your face to recognise, identify or verify anyone. We do not infer ethnicity, health, sexual orientation or emotion. There is no face database and no ranking of you against other people.
  • Who processes it. Photos travel over TLS to our own processing service (servers we rent from a hosting provider in Türkiye), which passes them to the Google Gemini API (Google LLC / Google Ireland Limited) for the analysis and the portrait. We use Gemini as a paid API service: under Google's terms for paid services, Google does not use your photos, prompts or results to train or improve its models. Google may keep them for a limited period solely to detect abuse and policy violations and for legally required disclosures, under the Gemini API Additional Terms of Service and Google's data processing terms. No one else receives your photos; they are never sold or used for advertising.
  • How long, on our side. Our server never writes your photos, answers or questions to storage or logs: they exist in memory for the seconds a request takes. Only the finished result (scores and reasons, the Coach answer, or the generated portrait) may be held encrypted for at most 24 hours — so a free scan can be unlocked after purchase and a result can be delivered again if the connection drops — and is then deleted automatically. Your photos, scores, portraits and plan are stored on your iPhone, inside the App.
  • Your control. Nothing leaves your device before you accept the consent screen shown before your first scan, which names Google's Gemini API and these retention rules. Settings → "Delete all scans and photos" erases every scan, photo, portrait and answer on your device at once; deleting a single scan is possible from Progress. Our server holds no photos to delete, and any result it holds expires within 24 hours. Deleting the App removes everything stored on your device.

4. Service providers

  • Google (Gemini API) — AI analysis, portrait editing and Coach answers, as described in section 3.
  • Apple Inc. — App Store payments and subscriptions (we receive only the subscription status); App Attest, which lets our server check that requests come from the genuine App; and the notification system. Reminders are local notifications scheduled on your iPhone — we do not collect a push token.
  • Adapty Tech Inc. — subscription infrastructure. Adapty receives an anonymous profile identifier, your purchase and subscription history, and basic device data (such as app version, OS version, device model, locale, IP address and the identifier for vendor) so that a subscription can be verified, synced and restored. Our server asks Adapty only whether your subscription is active.
  • Our processing service — authenticates requests (Apple App Attest), checks the subscription with Adapty, enforces fair-use limits and relays requests to Google. It keeps usage records (which feature was used, when, whether it succeeded, processing cost) without photos, answers, questions or results.

We do not share data with advertising networks, data brokers or social networks. Transfers outside your country rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

5. No ads, no tracking

The App shows no advertising and has no advertising, attribution, analytics or social-media SDK. It does not collect the Advertising Identifier (IDFA) and does not show the App Tracking Transparency prompt, because it does not track you. Notifications may include occasional offers on Upface Pro (see section 6); you can turn those off in Settings → Notifications → "Offers & discounts".

6. Legal bases

Performance of a contract (scans, plan, subscription) · explicit consent for processing the facial image in your photos (Art. 9(2)(a) GDPR; Art. 6 KVKK), withdrawable at any time · legitimate interests for security, fair use and abuse prevention · consent for reminders and promotional notifications (withdrawable in the App's Settings or iOS Settings) · legal obligations for tax and accounting.

7. Retention

Photos, answers and Coach questions on our side: never stored, discarded after processing · results on our side (scores, Coach answers, portraits): encrypted, max 24 hours · at Google: as described in section 3 (limited period, abuse monitoring only) · everything on your device: until you delete it or the App · subscription records (Apple, Adapty): for the life of the subscription and as long as tax law requires · usage records (no photos, answers or results): for as long as needed to apply the free-scan limit and diagnose faults; email us to have them deleted.

8. Your rights

Access, correction, deletion, portability, restriction, objection, withdrawal of consent and a complaint to your supervisory authority (in Türkiye: KVKK Art. 11). Most of it you can do yourself in the App (delete all scans and photos); for anything else email support@kayaapps.com.tr. As the App is anonymous we may ask for your Apple transaction ID to find the only records that exist.

9. Age

The App is rated 16+ and asks for your birth year; it is not available to anyone under 16, and photos of other people — in particular minors — must not be scanned (see the Terms of Use). If you believe a minor has used the App, contact us and we will delete any data we hold.

10. Not medical advice

Scores and plans are general wellness and grooming guidance, not a medical assessment. The App does not diagnose or treat any condition.

11. Security

TLS for all traffic; every request to our service is verified with Apple App Attest; results held on our side are encrypted (AES-256-GCM) with access limited to the people operating the service. We will notify affected users and authorities of a breach where the law requires it.

12. Changes and contact

We will update the date above when this policy changes and tell you in the App about material changes affecting your photos or face data. Furkan Kaya · support@kayaapps.com.tr

Comments

Post a Comment

Popular posts from this blog

Migraine Tracker - Privacy

  Privacy Policy for Migraine Tracker Effective date: July 11, 2026 This Privacy Policy explains how Migraine Tracker, developed by Furkan Kaya (“we,” “us,” or “the app”), handles information when you use the app. Migraine Tracker is designed as a local-first health diary. We do not require an account and we do not sell personal or health information. 1. Information you enter The app may store migraine and headache entries, pain intensity and location, symptoms, possible triggers, medications and doses, notes, assessment answers and scores, reminder preferences, and app appearance preferences. This information is stored locally on your device in the app database. 2. Optional device and health information Apple Health: If you grant access, the app may read sleep analysis and menstrual flow data and may write completed headache entries. Apple Health access is optional and controlled through iOS Settings. Health data is used only to provide the features you enable and is not used fo...
Read more

PCOS Pandy - Privacy Policy

Privacy Policy PCOS Pandy Last updated: October 3, 2026 Kaya Apps ("we," "us," or "our") built PCOS Pandy (the "App") to help people with PCOS track their cycle, symptoms, food, and weight. This Privacy Policy explains what data the App collects, how it is used, and the choices you have. It applies to the App and to this policy page. If you do not agree with this policy, please do not use the App. 1. Summary (Plain-Language Overview) PCOS Pandy does not require an account. There is no sign-up, login, or password. Your health data (cycle, symptoms, weight, food logs) is stored locally on your device. We do not operate a database of your personal health records. We do not sell your data, and we do not use your health data for advertising. Apple Health (HealthKit) data is used only to power features you explicitly enable, never for advertising, and never sold or shared with data brokers. Three optional features use a third-party AI service, the Goog...
Read more

Peptide Tracker - Privacy Policy

Privacy Policy   Effective Date: July 13, 2026 This Privacy Policy explains how Peptide Tracker ("Peptide Tracker", "the app", "we", "us") handles information when you use the app. Peptide Tracker is developed and published by Furkan Kaya, an independent developer ("the Developer"). Peptide Tracker is built local-first: the compound, dose, injection-site, weight, measurement, wellness, lab, cost, and photo entries you create are stored on your device. We do not operate a server that stores your personal health entries, and we do not require you to create an account to use the app. If you do not agree with this Policy, please do not use the app. Contact us any time at the address in the Contact section below. 1. Information stored only on your device The following categories of information are created by you inside the app and stored in a local database and local key-value store on your device only. None of it is transmitted to us, sold...
Read more