PEAK

Privacy Policy

Last updated: July 22, 2026

PEAK ("we", "us") provides an AI skin-analysis and skincare-coaching app. This policy explains what we handle and how.

The short version

Your selfie is analyzed, then deleted immediately. We never store it, never share it, and never use it to train AI models.
We keep your scores and text results (not your photo) so you can see your history and progress.
We do not sell your data.

Your selfie (temporarily): When you scan, your photo is sent over an encrypted connection to our secure backend, analyzed, and deleted right after analysis. It is never written to a database, log, or backup.
Account: An anonymous account identifier (no name or email required to start).
Scan results: Your numeric scores and written analysis/plan — without the photo.
Subscription status: Managed by RevenueCat / the App Store or Google Play.
Basic analytics: App events (e.g. screen views) to improve the product. Never your photo.

Supabase — backend, database, authentication.
Google Gemini API (paid tier) — performs the visual analysis. On the paid tier, Google does not use your inputs to train its models.
RevenueCat — subscription management.
Apple / Google — payment processing for subscriptions.

Because facial images are sensitive, this section explains exactly how PEAK handles them.

What we collect: A single selfie photo that you voluntarily take or upload. PEAK does not create, extract, or store any faceprint, face template, face geometry, biometric identifier, or face-recognition data. We do not use Apple's TrueDepth/Face ID or ARKit face-tracking APIs. The selfie is used only as a plain image input.
How we use it: The selfie is sent over an encrypted (HTTPS) connection to our secure backend and to the Google Gemini API (paid tier), which returns cosmetic skin-condition scores and written skincare feedback. It is used solely to generate your one-time analysis — never for identification, tracking, advertising, or model training.
Sharing: The selfie is disclosed only to the processors strictly required to produce the analysis — Supabase (our backend) and the Google Gemini API (the vision analysis). On the Gemini paid tier, Google does not use your inputs to train its models. We never sell it, never share it with any other third party, and never use it to build a facial database or profile.
Retention & deletion: The selfie is held only for the few seconds needed to perform the analysis, then deleted immediately. It is never written to a database, disk, log, or backup. We retain only the resulting numeric scores and text (never the image), linked to an anonymous account identifier.
Storage location: The selfie is never stored. Your scores and text results are stored in our Supabase database (EU region).

Delete your account and data any time: Settings → Delete account. This removes your account and all stored scan results permanently.
Manage/cancel your subscription in your App Store / Google Play account settings.

PEAK is for users 16 and older. We ask your birth year at first launch and do not allow use under 16.

We may update this policy; material changes will be reflected here with a new date.