Privacy Policy

Information We Collect

The app stores your name, quiz answers, scan records, product shelf items, daily logs, product tests, verdicts, saved scan photos, and saved product photos locally on your device. If you subscribe, scan history remains on your device so you can compare progress over time.

For an OpenAI analysis, the app sends a compressed selfie and these quiz answers: age, skin type, selected skin concerns, skincare spending range, sleep range, sensitivity, fragrance preference, routine-safety preference (including pregnancy-safe, if selected), and shopping preference. Your name, location, random app-install identifier, and the Apple Vision face rectangle are not sent to OpenAI.

The app generates a random app-install identifier and sends it only to the Works On Me analysis endpoint, hosted by Vercel, to link repeated free-scan requests to one app installation, enforce scan limits, and protect the service from abuse. Works On Me does not send that identifier to OpenAI.

Vercel hosts the Works On Me website and API endpoints. It processes request contents and ordinary network metadata, such as IP address, device or browser information, and request timestamps, to operate and secure those endpoints.

If you allow location access, the app uses your approximate location at scan time to request local humidity, UV index, and weather context. Coordinates are used for that weather request and are not saved in your scan history.

Apple and RevenueCat process an anonymous app user identifier, subscription product, purchase history, and entitlement status to complete purchases, unlock membership, restore access, and provide subscription-performance analytics.

The app automatically sends privacy-filtered product-interaction events, such as scan completion, report views, routine actions, and paywall actions, to the Works On Me analytics endpoint. These events exclude names, contact information, user or device identifiers, photos, location, and quiz answers.

If you use the website email form, Works On Me collects your email address only for waitlist and launch updates.

Works On Me is for adults 18 and older at launch.

How We Use Information

• To send a scan to OpenAI only after you allow that specific analysis, then generate your cosmetic overall signal estimate, marker bands, and personalized routine guidance.
• To show your report, timeline, and scan comparisons inside the app.
• To enforce scan limits and protect the Works On Me analysis endpoint from abuse.
• To provide optional scan-time weather context.
• To understand product performance using privacy-filtered interaction events.
• To send waitlist and launch updates if you use the website email form.
• To process subscriptions, restore purchases, and understand subscription performance through RevenueCat and Apple.

Data Monetization

We may use aggregate, anonymized insights to understand product performance. We never sell individual user data or share it for advertising. Brand payments never influence Works On Me recommendations.

Face and Scan Data

Face data means the selfie you choose to submit for cosmetic analysis and the temporary face rectangle used to guide capture. Apple Vision calculates the face rectangle on your device only. The rectangle is not transmitted or stored, and Works On Me does not perform face recognition, identify people, or create faceprints or biometric identity templates.

After you take a selfie and answer the quiz, the app shows an Allow OpenAI analysis? screen before the selfie and quiz answers are sent for analysis. Those items are not sent until you tap Allow & analyze for that specific scan. If you tap Not now, the app sends no selfie or quiz answers for that scan. Permission is not carried to later scans, so future OpenAI sharing is withheld by default until you allow another specific scan. Any saved age or camera acknowledgement is not permission to transfer data to OpenAI.

After you tap Allow & analyze, the compressed selfie and the quiz fields listed above pass through the Works On Me analysis endpoint, hosted by Vercel, to OpenAI only to generate the requested cosmetic report and protect service integrity. Works On Me does not persist the selfie or quiz answers on its servers after completing the request. OpenAI may keep API inputs and outputs, including the submitted selfie, quiz answers, and report, in abuse-monitoring logs for up to 30 days, unless longer retention is required by law or reasonably necessary to protect its services or third parties from harm. OpenAI does not use API data to train its models by default.

Paying users can save scan photos locally on their device for timeline and comparison features. Local photos remain until you use Delete all data in the app, delete them through an available app control, or remove the app. Scan photos are not sold, used for advertising, or used to train Works On Me models.

Third-Party Services

Works On Me uses Vercel to host its website and API endpoints, OpenAI as its third-party AI provider for report generation, Open-Meteo for optional weather context, RevenueCat for subscription entitlement management, and Apple for App Store purchases. Vercel processes analysis requests, the scan-limit identifier, privacy-filtered product-interaction events, and ordinary network metadata only to operate and secure the Works On Me endpoints. The random app-install identifier used for scan limits is not forwarded to OpenAI.

Works On Me requires every service provider that receives personal data from the app to use it only for the purposes described in this policy and to provide the same or equal protection of user data as this policy and Apple's App Review Guidelines require.

Consent and Your Choices

OpenAI analysis is opt-in for each scan. Allow & analyze authorizes only that scan. Not now sends no selfie or quiz answers. Future scans default to no transfer and require a new choice, so the app stores no continuing AI-transfer permission to revoke. A transfer that has already completed cannot be reversed; the retention terms below still apply to data already processed.

You can turn off location access in iOS Settings. You can use Delete all data in the app to remove locally stored quiz answers, including their device-local Keychain copy, scan records and photos, shelf items and photos, daily logs, product tests, verdicts, the random app-install identifier, and scan-limit counts. Use Delete all data before removing the app if you want to ensure the Keychain copy is deleted.

To request deletion of a website email address or ask about data already processed by a service provider, email help@worksonme.com.

Retention and Deletion

• Works On Me does not retain submitted selfies or quiz answers on its servers after completing an analysis request.
• OpenAI may keep the submitted selfie, quiz answers, and generated report in abuse-monitoring logs for up to 30 days, unless longer retention is required by law or reasonably necessary to protect its services or third parties from harm.
• Vercel retains service-generated network and security data only as described in its service terms and privacy notice. Works On Me does not intentionally log submitted selfies or quiz answers.
• Local app data, the random app-install identifier, and scan-limit counts remain on your device until you delete them with an available app control or use Delete all data. The device-local Keychain copy of quiz answers may persist after the app is removed unless Delete all data is used first.
• Privacy-filtered product-interaction events are retained only as long as needed to understand product performance, then deleted or kept only in aggregate form.
• Apple and RevenueCat retain purchase and entitlement records as needed to provide subscriptions, restore purchases, measure subscription performance, meet legal obligations, and resolve transactions.
• A website email address remains on the launch list until you unsubscribe or request deletion.

Medical Disclaimer

Works On Me results are cosmetic estimates, not medical diagnoses. Consult a dermatologist for medical skin concerns.

Contact

Questions? Email help@worksonme.com.