Web scan privacy

Disclosure version: 2026-10-11-gemini

Processing providers and their policies

Your photo is sent to Google Gemini for analysis through its paid API service. Google does not use paid-service prompts or responses to improve its products. Google retains prompts and responses for a limited period for safety, security, and required legal disclosures. FitFace processes photos temporarily without saving them to its database. Encrypted analysis results remain accessible for 24 hours, then expire and are queued for automatic deletion.

What the web scanner is designed to process

Only photos you intentionally provide after confirming that you are 18 or older, own the photo, and consent to analysis. Photo validation checks format, decoding, dimensions and size. The server re-encodes photos to remove metadata before sending them to the configured analysis provider.

Photo handling and provider retention

The web backend processes photos in memory; it does not save them to its database or upload them to its own photo storage. Images leave your device and are sent to the analysis provider. Provider-side retention and training settings are described in the processing disclosure above; do not assume that server memory handling controls a provider's retention.

Results and anonymous usage

Encrypted results are accessible for 24 hours so you can recover a successful scan after a connection failure. Successful-use counters and a signed browser session last up to 30 days. Clearing cookies can reset anonymous identity; free limits are best-effort. Short-lived keyed network identifiers are used for rate limits rather than storing raw IP addresses.

Database expiry cleanup must be enabled by the operator. Expired results are inaccessible immediately; physical deletion can occur later through the database's expiry process. No photos, analysis attributes or results are included in application logs or analytics.

Accounts and purchases

Free scanning does not require sign-in. For paid access, your shared Firebase account identifies your RevenueCat subscription. Payment information is handled by the approved payment service. The initial checkout implementation supports approved sandbox test accounts only.

Questions or deletion requests

Contact fitmacro14@gmail.com for privacy requests. Include your account email for an account-related request; do not email photos.