Privacy Policy

VsiqueMax measures your physique from a photo and a few numbers, and turns the results into a training and nutrition plan. Photos of your body and measurements of it are among the most personal information you can share, so this policy sets out plainly what we collect, why, who receives it, how long we keep it and how you control it.

This Privacy Policy applies to the VsiqueMax website, apps and Coach (the "Services"), operated by VsiqueMax [pending: legal entity name] ("VsiqueMax", "we", "our" or "us"). It should be read with our Terms of Service. Information about your body is consumer health data, and our Consumer Health Data Privacy Policy sets out the additional rights you have over it.

In short:

• Your photo is analyzed on your own device. We do not need your photo to give you results.
• When you save a scan, we store the measurements taken from the photo, not the photo itself, unless you turn on keeping a copy.
• We do not sell your data, we do not use it for advertising, and we do not use any tracking or advertising cookies.
• The Coach sends your question and a summary of your saved results to our AI provider to write the answer. The provider does not train its models on it.
• You can export your data, delete any scan, or delete your whole account from Settings at any time.

1. Who is responsible for your data

VsiqueMax [pending: legal entity name] is the company responsible for your personal data (the "controller") when you use the Services. You can reach us at [pending: contact email] or by mail at [pending: mailing address].

2. Personal data we collect

Information you give us

Account. You sign in with Google. Google gives us your Google account ID, your name and your email address. We ask Google only for these basic profile details. We never see your Google password, and we have no access to your Gmail, Drive, contacts, calendar or any other Google data.

Profile. Your sex, age, height and weight, and, if you choose, a body fat reading and how it was measured (for example a DXA scan or a smart scale), along with your training, activity and diet answers.

Photos. You take or choose a body photo for each scan. The photo is analyzed in your browser: finding the body, placing the measurement lines and outlines, and reading muscle and leanness. The photo is not sent to us to be analyzed. Your device keeps it so you can see your results again. A photo reaches our servers only in the cases listed under "What we store when you save".

People you scan. If you scan a photo of someone else, such as a public figure, you give us that person's name and the height and weight you enter for them, and the same scan information as for your own scans. Our Terms of Service set out when you may do this. If you name the person as a celebrity, we may review the scan and, once we approve it, show that person's name, scores and any photo kept with the scan to other signed-in users in the Celebrities list. Who added it is never shown. Deleting the scan, or renaming it or changing its photo until we review it again, takes it off the list.

What we store when you save. When you are signed in and save a scan, we store:

• the scan record: the measurement lines and outlines found in the photo, the corrections you make to lines and areas, the muscle and leanness readings, your profile numbers and your results;
• a private copy of the scan photo, only if you turn off "Keep photos on this device" in Settings, Privacy, after agreeing to the photo consent;
• progress check-ins (weight, calories, protein, tape measurements and notes) and progress photos, if you add them;
• a body scan reading you enter to calibrate your estimates, and the report file if you upload it.

Coach. When you ask the Coach a question, your messages are sent from our server to our AI provider together with a summary of the saved scan you are asking about, written by our server. We keep a daily count of your messages to apply your plan's limit. We do not store your Coach conversations on our servers.

Payments. If you subscribe, Stripe collects your payment details as the merchant of record. Stripe tells us your customer ID, which plan you bought, its status and its billing dates. We never receive your full card number.

Settings and onboarding answers. Your settings, such as units, theme and reminder choices, are kept on your device and, when you are signed in, on your account so they follow you to another device. If you answer "How did you hear about us?", we keep that answer.

Bug reports and messages. If you send a bug report, we receive the categories you tick, your description and the page you were on. It is linked to your account, or, if you are not signed in, to a scrambled code derived from your IP address that cannot be turned back into the address. If you email us, we receive your email address and what you write.

Information collected automatically

Request logs. Our hosting provider receives your IP address, browser details and the time of each request, as any website does. Our own logs record the route, the result, a random request ID and the software version. They leave out your measurements, notes and photos.

Error reports. If a page fails, your browser sends us the kind of error, a shortened message, the page path and the software version. Scan values, photos and account details are not included. When you measure a photo, your browser also tells us how far the measuring got (for example measured, saved or stopped), how long it took and how much it downloaded, rounded, with your device's memory and processor count in broad groups. This has no scan values, photos, account details or ids, and it is how we find where measuring fails on phones.

Cookies and local storage. We use only strictly necessary cookies: one keeps you signed in, and a short-lived one protects the sign-in step itself. Your browser's own storage on your device keeps your scan photos, your latest unsaved scan and your settings. We do not use advertising, analytics or tracking cookies, pixels, fingerprinting or third-party trackers. Our fonts and measurement models are served from our own site.

Information we create

From your photo and answers we calculate estimates: measurement lines, ratios, body fat, muscle levels, scores, your body archetype, an Envision illustration and your plan. These estimates describe your body, so we treat them as health data.

3. How we use personal data

We use personal data to:

• provide the Services: analyze your scans, show your results and history, build your plan, run Envision and answer your Coach questions;
• keep the information you choose to save, and apply your plan's features and limits;
• process subscriptions, with Stripe;
• keep the Services secure and working: authenticate you, prevent abuse and fraud, apply limits, and find and fix errors;
• respond to you when you contact us, and tell you about important changes to the Services or to our terms; and
• comply with the law and protect the rights, safety and property of our users, VsiqueMax and others.

We do not use personal data for advertising, we do not build marketing profiles, and we do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

Model improvement. We do not use your photos or scans to train or evaluate our measurement models unless you agree to share a specific scan. Sharing is a separate choice on each scan and is never required for any feature. The "Offer to share my scans" setting only decides whether we may ask; it shares nothing by itself. Sharing is not open to users yet. Before it opens, this policy will set out exactly what a shared scan contains, who reviews it, how long it is kept and how to stop.

De-identified data. We may create statistics that do not identify anyone, such as how accurate a measurement is across many scans. We keep them de-identified and do not try to re-identify them.

4. Biometric information

We do not use any part of the Services to recognize or identify people. We do not create face templates, faceprints or any other identifier for recognizing a person.

To measure proportions, the Services locate points on the body in your photo, including points on the head, and measure distances such as head width. These measurements are made on your device. They are stored on our servers only as part of a scan you choose to save, are used only to give you your results, and are never sold, leased, traded or otherwise profited from. Where the law treats these measurements as biometric information, by starting a scan you consent to this processing.

Retention schedule. We delete these measurements when you delete the scan or your account, and in any event no later than three years after your last use of the Services.

5. How we disclose personal data

We do not sell your personal data, and we do not share it for targeted or cross-context behavioral advertising. We disclose it only as follows.

Service providers. These companies process personal data for us under contracts that allow them to use it only to provide their services to us:

Stripe also acts on its own behalf for the payment itself, for example to meet tax, fraud prevention and financial regulations, under its own privacy policy.

Legal and safety reasons. We may disclose personal data if we believe in good faith it is required by law or legal process, or necessary to protect anyone's safety, prevent fraud or abuse, or protect our rights.

Business transfers. If VsiqueMax is part of a merger, acquisition, financing or sale of assets, personal data may transfer to the new owner, which must honor this policy. We will notify you before your data becomes subject to a different policy.

At your direction. When you ask us to share something, for example by exporting your data.

6. How long we keep personal data

When you delete a scan or your account in the app, we remove it from our active systems right away. Stored files, such as photos, are deleted at once and are not kept in backups. Database backups roll off within 30 days. We may keep data longer where the law requires it, or to resolve a dispute or enforce our terms. To prevent abuse of the free plan, we keep your account's internal id and how many scans it has used each month after you delete it; this holds no measurements, photos or contact details.

7. Your controls

• Use VsiqueMax without an account. You can scan and see your results without signing in. Nothing is stored on our servers until you sign in and save.
• Keep photos on your device. "Keep photos on this device" is on by default. While it is on, your scan photos are never uploaded.
• Export. Settings, Privacy, Export my data downloads everything in your account as a file.
• Delete. You can delete any scan, all scans (Settings, Privacy, Delete all scans) or your whole account (Settings, Account, Delete account).
• Clear your device. Clearing your browser's site data for VsiqueMax removes everything kept on that device.

8. Your privacy rights

Depending on where you live, you may have the right to:

• know what personal data we hold about you, and get a copy in a portable format;
• correct inaccurate personal data;
• delete your personal data;
• withdraw any consent you gave, without affecting processing that took place before;
• object to or restrict certain processing;
• opt out of the sale or sharing of personal data or targeted advertising (we do neither);
• appeal our decision on a request; and
• complain to your data protection authority or attorney general.

Many of these you can do yourself in the app (Section 7). Otherwise email [pending: contact email] from the address on your account. We may need to confirm the request is yours before we act on it. You may use an authorized agent, who must show your signed permission. We respond within the time the law requires, usually 30 to 45 days, and we will never treat you differently for exercising your rights. If we decline a request, you may appeal by replying with "Appeal" in the subject, and we will answer within 45 days. If your appeal is denied, you may contact your state attorney general.

9. Accuracy and limitations

Our results are estimates made from a photo, and they can be wrong. If a measurement about you looks incorrect, you can move its lines in the app, enter your own body fat reading, or delete the scan. Our Terms of Service explain the limits of our results in more detail.

10. Children

VsiqueMax is only for adults. You must be 18 or older to use it, and you must not upload a photo of anyone under 18. If you believe a minor has given us personal data, or appears in a scan, contact [pending: contact email] and we will delete it.

11. Security

We use reasonable technical and organizational measures to protect personal data, including encryption in transit, account data that only your signed-in session can read, signed and revocable sessions, checks that every change comes from our own site, and logs that leave out personal details. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach involves your personal data, we will notify you, and regulators such as the Federal Trade Commission, as the law requires.

12. International users

VsiqueMax is run from the United States, and our service providers may process data in the United States and other countries. If you are in the European Economic Area, the United Kingdom or Switzerland:

• we process data about your body, which is health data, only with your explicit consent, which you give at the privacy step before your first scan and can withdraw at any time by deleting your scans or your account;
• we process your other personal data to provide the Services you ask for (performance of a contract), to meet legal obligations, and for our legitimate interests in keeping the Services secure and working; and
• transfers outside your region rely on safeguards recognized by law, such as the European Commission's standard contractual clauses.

13. Additional United States disclosures

These disclosures are made under the California Consumer Privacy Act and similar state laws.

Sources. You, your device, Google (for sign-in) and Stripe (for subscription status).

Sale and sharing. We do not sell personal data or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not knowingly collect personal data from anyone under 18. We honor Global Privacy Control signals as a request to opt out, though there is nothing for them to turn off.

Sensitive personal information. We use it only to provide the Services you ask for and for other purposes the law permits, so a separate right to limit its use does not apply. We do not use it to infer characteristics about you beyond the results you request.

Consumer health data. Residents of Washington, Nevada, Connecticut and other states with consumer health data laws have additional rights, set out in our Consumer Health Data Privacy Policy.

14. Changes to this policy

We may update this policy. We will post the new version here with a new date. If a change materially affects how we use personal data you already gave us, we will tell you in the app or by email before it takes effect and, where the law requires, ask for your consent.

15. Contact us

VsiqueMax [pending: legal entity name], [pending: mailing address]

Email: [pending: contact email]