Privacy Policy

Last updated: 21 September 2026

This Privacy Policy explains how the LookGrade iOS app (formerly FaceRate; "LookGrade", "we", "us") handles your information. LookGrade is designed to be private by default: your facial analysis runs entirely on your device.

LookGrade is operated by Ahmet Numan Şahin, the controller of the personal data described in this policy.

1. Face data we access and generate

For this policy, face data means the face photo you choose to provide and the information generated from that photo. LookGrade accesses or generates the following face data:

• Input photo — a photo you take with the camera or select using Apple's photo picker.
• Temporary analysis data — a face bounding box, facial landmark and contour coordinates, head-position measurements, and cheek-region color and luminance samples.
• Derived results — an overall score, category scores, findings, an estimated face shape, and an estimated skin undertone.
• Comparison thumbnail — a locally stored JPEG copy reduced to no more than 480 pixels on its longest side for the before-and-after comparison feature.

LookGrade does not create or store a biometric identity template, does not perform facial recognition or identity matching, and does not use face data to authenticate a person.

2. How face data is collected and used

Face data is provided directly by you after you choose to take or select a photo. LookGrade uses Apple's on-device Vision framework to detect facial landmarks and uses local pixel sampling to calculate heuristic appearance scores and personalized self-care tips. Face data is used only to:

• perform the face analysis you request;
• display your score report and personalized tips;
• show local scan history and progress trends; and
• provide an on-device before-and-after comparison.

Face data is not used for advertising, tracking, profiling across apps or websites, facial recognition, identity verification, or training artificial-intelligence or machine-learning models.

3. On-device processing and storage

All face detection, landmark processing, pixel sampling, scoring, and tip generation occurs locally inside LookGrade's private app container on your device. LookGrade does not operate a server that receives face data.

• The full-resolution working copy of the latest input photo is stored in the app's private cache so the latest report can be displayed. A new scan removes the previous working copy.
• Comparison thumbnails are stored in the app's private Application Support directory.
• Scan dates, scores, findings, face-shape estimates, and undertone estimates are stored in the app's local preferences and history.
• Facial landmark coordinates, contours, bounding boxes, head-position measurements, and raw cheek pixel samples exist only in memory while a scan is being analyzed and are discarded when that analysis finishes. They are not saved to persistent storage.

4. Face data sharing and disclosure

LookGrade does not automatically upload face data to us or our analytics and subscription providers. This includes input photos, thumbnails, landmarks, pixel samples, scores, findings, face-shape estimates, and undertone estimates. Apple's Vision framework executes on the device as part of iOS; LookGrade does not send Vision results to Apple or to an external service.

If you tap Share, iOS presents the sharing options and sends your chosen report content to the destination you select. That destination's privacy practices apply. Device backups and exports you make are also subject to your iOS and backup settings; deleting data in LookGrade does not erase a previously shared or backed-up copy.

5. Face data retention and deletion

• Temporary analysis data: retained only in memory for the duration of the requested analysis, then discarded immediately after analysis completes.
• Latest full-resolution working photo: retained locally until the next scan replaces it, iOS purges the cache, you select Profile → Delete all data, or you uninstall the app, whichever occurs first.
• Comparison thumbnails and scan summaries: retained locally until you use Clear scan history or Delete all data, or uninstall the app.
• Latest derived result: retained locally until it is replaced by a later scan, you select Delete all data, or you uninstall the app.

Profile → Delete all data removes all scan history, saved face photos, thumbnails, and derived results from LookGrade's local storage and resets onboarding. This deletion is immediate and cannot be undone. Deleting the app also removes its local app container. LookGrade has no server-side copy of your scan photos or results to delete. Subscription records and optional usage analytics are separate; deleting local data does not erase those records.

Deleting scan history or resetting onboarding does not cancel your App Store subscription or reset the scan allowance. Minimal scan identifiers and timestamps are stored in the device Keychain to enforce the rolling allowance; entries older than 48 hours are pruned the next time the ledger is accessed. A subscription-recovery flag may remain in Keychain across reinstallation, but contains no photos, scores or face measurements. Apple and RevenueCat determine subscription access and trial eligibility.

6. Camera and photo permission

LookGrade requests camera access only when you choose to take a photo. It uses Apple's photo picker when you choose an existing photo. Declining either permission prevents that capture method but does not cause LookGrade to obtain the photo by another means. You can revoke camera permission at any time in iOS Settings.

7. Subscriptions and RevenueCat

If you purchase a LookGrade Pro subscription, we use RevenueCat, Inc. to manage and validate the purchase. To do this, RevenueCat receives an pseudonymous app-user identifier, basic device metadata, and the App Store purchase/receipt information — this is subscription metadata, not face data. RevenueCat does not receive your photos, thumbnails, facial landmarks, pixel samples, scan results, face-shape estimate, or undertone estimate. RevenueCat's handling of subscription data is described in the RevenueCat Privacy Policy. Payments themselves are processed by Apple under your Apple ID.

8. Optional usage analytics

With your permission, LookGrade uses Mixpanel to understand how people move through the app and identify technical issues. Analytics is off until you choose to allow it. Declining does not prevent onboarding, purchases, or access to features included in your subscription.

• Interactions: screen visits and foreground time, onboarding navigation, button actions, visible sections, camera workflow actions, analysis duration and technical error codes.
• Purchase flow: plan selections, paywall and private-offer interactions, purchase or restore outcomes, product identifiers, displayed prices, currencies and trial/subscription status. Displayed prices are not records of money charged.
• Technical identifiers: a pseudonymous app-user ID, a randomly generated analytics device identifier, session identifiers, app/build version, language, device model, operating system and screen size. The app-user ID is shared with RevenueCat to relate subscription outcomes to the app experience.

We do not send names, onboarding answers, photos, facial measurements, scores, findings, face shape or skin undertone to Mixpanel. IP-derived geolocation is disabled; network providers still process IP addresses to deliver requests. We do not enable session replay or screen recordings.

You can withdraw analytics consent in Profile → Usage analytics. This stops future analytics and clears events still queued locally. It does not automatically erase events already received by Mixpanel. Profile → Delete all data also turns analytics off. You can request deletion of previously sent analytics by contacting us with the Privacy Request ID available in Profile. Contact us if you cannot reach Profile; do not post this identifier publicly.

Our Mixpanel project uses its European Union data region. Providers may process data internationally as described in their policies and contractual safeguards. See Mixpanel's Privacy Policy and subprocessor list.

We retain analytics records only for as long as they are needed to understand product usage, investigate reliability issues and support subscription-related requests. The retention decision considers whether the data is still useful for those purposes, its age, applicable legal duties and any deletion request. Turning analytics off or deleting the app does not automatically delete records already received by Mixpanel; contact us to request their removal. Subscription records may be retained separately by Apple and RevenueCat to validate purchases and meet their legal obligations.

App preferences are stored locally. LookGrade does not use advertising identifiers, sell personal data to data brokers, or operate a server-hosted face-photo profile. The basis for optional usage analytics is your consent; subscription-related processing is needed to provide and support the service. We may retain records when required by applicable law.

9. Children

LookGrade is not directed to children. The app is intended for users aged 17 and older and should not be used by children.

10. Your rights

Depending on your region (e.g. GDPR/KVKK/CCPA), you may have rights to access, correct, or delete your personal data. Since your scan data is stored only on your device, you can exercise deletion directly in the app. For requests concerning subscription or analytics records, contact us below. Depending on applicable law, you may also have rights to restrict or object to processing, receive a copy of your data, withdraw consent and complain to the competent data-protection authority. Withdrawing consent does not affect processing that lawfully took place before withdrawal.

11. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

12. Contact

Controller: Ahmet Numan Şahin.
Questions or privacy requests: ahmetnumansahin06@gmail.com.