Only Looksmax

Privacy Policy

Last updated: June 4, 2026

Solarity AI (“we”, “us”) operates the Only Looksmax mobile application (the “App”). This policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have over it. It is written to comply with the EU/UK GDPR, the Turkish Personal Data Protection Law (KVKK), and the California Consumer Privacy Act (CCPA/CPRA).

1. Data We Collect

  • Account data: email address and authentication credentials.
  • Profile data: name, gender, age, height, and weight that you provide.
  • Photos you submit: images of your face/body uploaded for AI analysis.
  • Analysis results: the scores, observations and advice generated from your photos.
  • Purchase data: subscription / one-time entitlement status (via RevenueCat and the App Store / Google Play). We never receive your full card number.
  • Usage & device data: app events, device type and platform, used to operate and improve the App.
  • Consent records: a log of the consents you give (e.g. for sharing a result card).

2. Biometric / Special-Category Data

The facial photos you upload, and features derived from them for aesthetic scoring, may constitute biometric or special-category data under GDPR Art. 9 and the KVKK’s “özel nitelikli kişisel veri” rules. We process this data only with your explicit consent, given when you submit a photo for analysis, and solely to produce your requested analysis. You can withdraw consent at any time by deleting your account (Section 7).

3. How We Use Your Data

  • To create and run your AI aesthetic analysis.
  • To maintain your account, history, and progress over time.
  • To process and verify your purchases and entitlements.
  • To operate, secure, debug and improve the App.
  • To comply with our legal obligations.

4. Photo Retention

Photos submitted by free users are automatically deleted from our storage within 24 hours of upload. Photos associated with a premium/paid analysis are retained so your results stay viewable, until you delete the analysis or your account. We do not use your photos to train AI models.

5. Who We Share Data With

We do not sell your personal data. We share it only with service providers (data processors) who help us run the App, under contract and only as needed:

  • OpenAI — processes your photo to generate the analysis (not used to train their models per their API terms).
  • Supabase — authentication, database and encrypted photo storage.
  • RevenueCat and the App Store / Google Play — purchase and subscription processing.
  • PostHog — product analytics (you can opt out in the App under Privacy & Security).

6. International Transfers

Some providers process data outside your country (e.g. in the United States). Where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

7. Your Rights

Depending on where you live, you have the right to access, correct, export, restrict, or delete your personal data, to withdraw consent, and to object to certain processing. You can:

  • Export your data in the App: Profile → Data Management → Export My Data.
  • Delete your account and all associated data in the App: Profile → Data Management → Delete Account (see also our Data Deletion page).
  • Contact us at privacy@onlylooksmax.xyz to exercise any right.

California residents have the right not to be discriminated against for exercising these rights. EU/UK and Turkish users may lodge a complaint with their local data protection authority.

8. Data Security

Photos are stored in a private, access-controlled bucket and transmitted over encrypted connections. Access is restricted by row-level security so only you (and our authorized systems) can reach your data.

9. Children

The App is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has used the App, contact us and we will delete the data.

10. Changes

We may update this policy. Material changes will be reflected by an updated “Last updated” date and, where appropriate, in-app notice.

11. Contact

Solarity AI — privacy@onlylooksmax.xyz