Privacy policy

FacialSense (facialsense.app) is operated by Yorkshire Technology Solutions Ltd, registered in the United Kingdom. You can reach us any time at support@facialsense.app.

If you run a clinic account, we are the data controller for your account information (your name, email, business details, billing status).

If you are a client scanned by a clinic, your clinic is the data controller for your consultation records, and FacialSense processes that data on the clinic's behalf as their data processor. Your clinic decides how long your records are kept and can delete them at your request; their own privacy policy also applies.

• Clinic account data: clinic name, login email, business contact details, logo, booking link, and subscription status.
• Consultation data: the client's name and contact details captured at intake, their consent record, facial photographs, and the AI-generated assessment (scores, findings, recommendations, aftercare).
• Consent and intake forms: where a clinic attaches its own forms, whether the client ticked or signed them, and a copy of any document the client uploads back. This can include health-history information the clinic's own form asks for.
• Purchase data: when a client buys from a clinic, the item, amount, and the buyer's name and email. Card details are entered directly with Stripe and never pass through or get stored on FacialSense systems.
• Technical data: anonymous page-view analytics to understand product usage. We do not run advertising trackers.

Facial photographs are sensitive personal information and are handled with extra care, processed only with the explicit consent recorded before every scan.

• Images are stored encrypted in access-controlled private storage. They are never published to public URLs.
• Images are used for exactly two purposes: producing the AI assessment, and comparing the client's own scans over time so their progress can be measured. To keep comparisons fair, images may be adjusted for brightness and colour consistency.
• Images are never used to identify anyone across other services, never used for surveillance, never used for advertising, and never sold.
• Images are kept until the client's record or the clinic's account is deleted, since that retention is what supports the progress-tracking feature the client consented to.

Each scan is analysed by an AI model (Google's Gemini) acting under our instructions as a processor: the model receives the image (and, for returning clients, their previous image for direct comparison) and returns the written assessment. Our AI and infrastructure providers are contractually prohibited from using this data to train their models, build profiles, or serve advertising. Assessments are aesthetic estimates, not medical findings.

Each finding also carries a confidence level (High, Moderate, or Low), based on how clearly the image supports it, shown to the practitioner alongside the finding itself. The assessment is designed to judge pigmentation, redness, and similar findings relative to each individual's own skin tone, not a fixed standard, and results are always shown as qualitative bands rather than precise scores, since a single photograph cannot support that level of precision. See Keeping your data safe for the fuller explanation.

We share data only with the service providers needed to run the platform, each under a data processing agreement:

• Supabase: database, authentication, and encrypted file storage (hosted in Dublin, Ireland).
• Google: AI analysis of scan images (Gemini).
• Stripe: subscription billing, and payment processing for clinic sales.
• Resend: transactional email delivery.
• Vercel: application hosting and anonymous analytics.

We do not sell personal data and we do not share it with advertisers.

Emails to clinic clients are transactional and sent on the clinic's behalf, carrying the clinic's name and branding: scan invites, scan results, approved recommendations, purchase confirmations, a link to complete any outstanding forms, and, where the clinic has opted in, follow-up reminders, limited to one per visit. Replies route to the clinic. We do not send marketing email to clinic clients.

When a client buys a product or service, checkout runs on the clinic's own Stripe account: the clinic is the merchant, the charge appears under the clinic's name, and refunds are handled by the clinic. FacialSense never holds funds or card details. Booking links route to the clinic's own booking system, where that provider's privacy policy applies.

• Consultation records are kept while the clinic's account is active, so clients can see their history and progress.
• Deleting a client's record removes their data, facial images, reports, and any uploaded form copies in a single action.
• Deleting a clinic account removes the practice's client records and images. Order records are anonymised instead of destroyed; names and contact details are scrubbed while amounts and dates are retained, as financial record-keeping requires.
• Deleted data leaves our operational systems immediately and expires from short-term recovery backups on a rolling schedule.

You can ask to see the data we hold about you, to correct it, or to have it deleted, and you can withdraw consent at any time. Clients should contact their clinic first (as the holder of their records); either way, we support every request. Just email support@facialsense.app.

FacialSense provides aesthetic assessments for consultation and documentation purposes. It is not a medical device, does not diagnose conditions, and its outputs are estimates, presented as qualitative bands, not clinical measurements.