Privacy Policy
Last updated: August 13, 2026
This Privacy Policy forms part of, and should be read alongside, our Terms and Conditions and Cookie Policy.
The official text is the Japanese-language version of this Privacy Policy. Any conflict or discrepancy created by translation into another language is not binding and has no legal effect.
(1) Who We Are
Pretty Scale ("we", "us", "our") operates the website www.prettyscale.info (the "Website") and the AI facial analysis service offered through it (the "Service").
For the purposes of data protection law, Pretty Scale is the controller of the personal data described in this Policy — that is, we decide why and how it is processed.
- Contact for privacy matters: support@prettyscale.info
This Policy applies to the Website and the Service. It does not apply to third-party websites we link to, which have their own privacy policies.
(2) The Data We Collect
2.1 Your facial photograph
This is the core of the Service and the most sensitive data we handle, so we treat it separately throughout this Policy.
When you use the Service, you upload one or more facial photographs. We accept JPEG, PNG, and WebP images. Your photograph is uploaded directly from your browser to our storage provider using a temporary, single-use upload link that expires after five minutes.
Under the EU and UK GDPR, when an image is processed specifically to analyse facial features it may constitute biometric data. Under Japan's Act on the Protection of Personal Information (APPI), facial feature data is treated as personal identification data. We therefore process your photograph only on the basis of your explicit consent, which you give by choosing to upload it, and only for the purposes set out in Section 3.
We do not use facial recognition to identify you, match you against any database, or link your face to any other person. The analysis produces a score and a written report about the image you submitted, and nothing more.
2.2 Your questionnaire answers
Before your report is generated, we ask you a series of questions about yourself and your goals. We store your answers together with the question they relate to, so that the report can be tailored to you.
2.3 Account and contact data
- Account data: your email address, display name, avatar, and the authentication identifier supplied by your login provider (for example Google) when you sign in.
- Contact data: anything you tell us when you email us or complete a form on the Website.
- Marketing data: your email address and preferences, if you subscribe to our mailing list.
If you begin an assessment before signing in, we create a temporary anonymous record so you do not lose your progress. If you later create an account, that record is migrated to it.
2.4 Payment data
Payments are handled by a third-party payment processor. We never receive or store your card number. We retain only the record of the transaction — the amount, currency, status, and the country the payment originated from.
2.5 Data collected automatically
- Device and connection data: IP address, browser type and version, operating system, language, and device identifiers.
- Usage data: pages you view, features you use, time and duration of visits, and how you arrived at the Website.
- Cookies and similar technologies: described in Section 9.
We also process your IP address transiently for rate limiting, to protect the Service against automated abuse.
2.6 Data we do not collect
We do not ask for, and you should not send us, your government identification number, financial account details, health records, or any special category data beyond the facial image you knowingly upload for analysis.
(3) Why We Use Your Data, and Our Legal Basis
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Generate your facial score, written report, and hairstyle/colour simulations | Facial photograph, questionnaire answers | Explicit consent (Art. 9(2)(a)) |
| Create and maintain your account; keep your assessment progress | Account data, questionnaire answers | Performance of a contract |
| Take payment, issue receipts, handle refunds and subscriptions | Payment data, account data | Performance of a contract |
| Email you when your report is ready, and about service changes | Account data | Performance of a contract |
| Respond to your support enquiries | Contact data | Legitimate interests |
| Detect and prevent fraud, abuse, and security incidents | Device data, usage data | Legitimate interests |
| Understand how the Website is used so we can improve it | Usage data, device data | Consent, or legitimate interests where permitted |
| Send you marketing emails | Marketing data | Consent (withdrawable at any time) |
Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect processing carried out before you withdrew it, but it may mean we can no longer provide the Service.
(4) How We Handle Your Facial Photograph
This section is the commitment that matters most, so we state it precisely.
Deletion. Your uploaded photograph is deleted from our storage once your analysis is complete. We do not retain a copy for any other purpose. If you replace a photograph, restart an assessment, or delete an assessment, the superseded image is deleted at that point as well.
No training. We do not use your photograph, or the results derived from it, to train, fine-tune, or develop any AI or machine learning model. We contract with AI providers on terms that prohibit them from using your data to train their models.
No human browsing. Our staff do not browse uploaded photographs. Access is restricted to the automated pipeline that produces your report, and to the small number of personnel who may need access to investigate a specific technical fault or a report of abuse.
Where it goes during analysis. To produce your report, your photograph is transmitted to the third-party AI processing providers listed in Section 5. It is transmitted over encrypted connections and processed only to fulfil your request.
What survives. Your report — the scores, the written analysis, and any generated hairstyle or colour simulation images — remains available in your account until you delete it. Generated images are new images produced by an AI model; they are derived from your photograph but are not your original photograph.
Your control. You can delete an individual photograph, reset an assessment, or ask us to erase everything we hold about you. See Section 8.
(5) Who We Share Your Data With
We do not sell your personal data. We have never sold it, and we do not share it with advertisers or data brokers.
We use the following service providers, each of whom processes data only on our instructions and under a written agreement:
| Provider | What it does | Data it receives |
|---|---|---|
| Cloudflare R2 | Stores uploaded photographs and generated images | Facial photographs, generated images |
| Supabase | Database and authentication | Account data, questionnaire answers, report records |
| Replicate | Runs the AI models that produce your analysis and generated images | Facial photograph, report prompt |
| Stripe | Payment processing | Payment data, email address |
| Resend | Transactional and marketing email delivery | Email address, name |
| Upstash | Rate limiting and abuse prevention | IP address (transient) |
| Google Analytics | Website usage measurement | Usage and device data |
The AI models run on Replicate's infrastructure are supplied by model providers including Google (Gemini) and OpenAI (image generation). Your photograph is sent to these models to produce your report and is not retained by them for training.
We may also disclose your data:
- Where the law requires it — in response to a valid court order, subpoena, or lawful request from a public authority.
- To protect rights and safety — where we reasonably believe disclosure is necessary to prevent fraud, investigate a violation of our Terms, or protect the safety of any person.
- In a business transfer — if Pretty Scale is involved in a merger, acquisition, or sale of assets, your data may be transferred to the acquiring party. We will notify you before your data becomes subject to a different privacy policy.
(6) International Transfers
We are based in Japan, and the providers listed above operate globally. Your data may therefore be processed in countries outside your own, including the United States and the European Union.
Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards — principally the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where applicable. Where we transfer personal data out of Japan, we take the measures required by the APPI in relation to overseas transfers.
You may request a copy of the safeguards we have put in place by emailing support@prettyscale.info.
(7) How Long We Keep Your Data
| Data | Retention period |
|---|---|
| Uploaded facial photographs | Deleted once the analysis is complete |
| Superseded or replaced photographs | Deleted immediately on replacement or reset |
| Reports, scores, and generated images | Until you delete them or close your account |
| Questionnaire answers | Until you delete the assessment or close your account |
| Account data | For as long as your account is open |
| Payment and transaction records | Seven years, as required by tax and accounting law |
| Support correspondence | Two years from the last message |
| Analytics data | Up to 14 months in aggregated form |
When you close your account, we delete or irreversibly anonymise your data within 30 days, except where we are required by law to retain it — most commonly transaction records kept for tax purposes.
(8) Your Rights
Depending on where you live, you have some or all of the following rights:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — have inaccurate data corrected.
- Erasure — have your data deleted ("the right to be forgotten").
- Restriction — ask us to limit how we use your data.
- Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — withdraw consent to the processing of your facial photograph at any time.
- Complain — lodge a complaint with your data protection authority.
How to exercise them
Email support@prettyscale.info with the request and the email address associated with your account. We will respond within 30 days. We may ask you to verify your identity before we act, to make sure we are not disclosing your data to someone else. Exercising these rights is free; we may charge a reasonable fee only if a request is manifestly unfounded or excessive.
If you are in the EEA or the UK
You may complain to your national supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk).
If you are in Japan
You may contact the Personal Information Protection Commission (ppc.go.jp) regarding our handling of your personal information.
If you are in California
You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not knowingly process the personal information of anyone under 18. We will not discriminate against you for exercising any of these rights.
(9) Cookies and Analytics
We use cookies and similar technologies for the following purposes:
- Strictly necessary — signing you in, keeping your session active, securing the Website, and remembering your language. These cannot be switched off.
- Preferences — remembering the settings you choose.
- Analytics — understanding which pages are used and where people encounter problems.
- Marketing — measuring the effectiveness of our campaigns, where enabled.
We currently use Google Analytics to measure Website usage. We may also use other privacy-focused analytics tools, such as Plausible and Microsoft Clarity, to understand how the Website performs.
You can control or delete cookies through your browser settings. Blocking strictly necessary cookies will prevent parts of the Website from working. For the full detail, see our Cookie Policy.
(10) Security
We take the following measures to protect your data:
- All traffic between your browser and our servers is encrypted using TLS.
- Photographs are uploaded through short-lived, single-use links rather than being posted through our application servers.
- Database access is governed by row-level security, so one user's records cannot be read by another.
- Card details are handled entirely by our payment processor; we never see or store them.
- Access to production systems is limited to personnel who need it, and is reviewed regularly.
No system is completely secure, and we cannot guarantee absolute security. If a breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, as the law requires.
(11) Children
The Service is for people aged 18 and over. Because we process facial images, which are sensitive, we do not permit use by minors and we do not knowingly collect data from anyone under 18.
If you believe a person under 18 has provided us with personal data, email support@prettyscale.info. We will delete the account and its associated data promptly. You must not upload a photograph of any person under 18, including your own child.
(12) Automated Processing
Your score and report are generated automatically by AI models, without human review. This is the Service you are asking us to provide.
These results are for entertainment and personal reference only. They produce no legal effect and have no similarly significant effect on you, and they must not be used for hiring, education, housing, insurance, dating selection, or any other decision about a person. See Section (6) of our Terms and Conditions.
If you would like a human to review a result you believe is wrong, contact us at support@prettyscale.info.
(13) Changes to This Policy
We may update this Policy from time to time. When we make a material change, we will update the "Last updated" date at the top and, where the change significantly affects how we use your data, notify you by email or through the Website before it takes effect.
If a change affects how we process your facial photograph, we will ask for your consent again.
(14) Contact Us
Our full name is Pretty Scale.
For any question, request, or complaint about this Privacy Policy or about how we handle your data:
- Email: support@prettyscale.info
- Website: www.prettyscale.info
We aim to respond to every privacy enquiry within 30 days.