Privacy Policy
1. Data Controller
Kim Junhyung is the data controller for this service. Contact: [email protected].
2. Information We Collect
- Required: email (or contact information), payment identifiers
- Service data: uploaded photos, height/weight inputs, generated report data, usage logs
- Device/connection data: IP address, browser information, cookies
3. How We Use Information
- Deliver the service and generate results
- Process payments and provide support
- Improve service quality, prevent abuse, and analyze issues
- Comply with legal obligations
4. Legal Bases (GDPR/UK GDPR)
- Contract: to deliver the paid digital service
- Consent: to process photos and inputs as requested
- Legitimate interests: service security and performance
- Legal obligations: accounting, tax, and compliance
5. Sensitive Data
Photos may be considered sensitive or biometric data in some jurisdictions. We process photos only to provide the requested service and do not use them for advertising or profiling. By uploading a photo, you consent to this processing.
6. Third-Party Processing
- Payments: Polar checkout processes payments. Polar acts as the Merchant of Record and handles payment and tax obligations.
- AI processing: OpenAI
- Infrastructure/hosting: Cloudflare Pages
7. International Transfers
Your data may be processed outside your country. Where required, we rely on approved transfer mechanisms such as standard contractual clauses or other lawful safeguards.
8. Retention and Deletion
We retain personal data only as long as necessary for service delivery, support, and legal compliance. You can request deletion by contacting us.
9. Your Rights
You may request access, correction, deletion, restriction, portability, or objection to processing by contacting [email protected]. If you rely on consent, you may withdraw it at any time.
10. U.S. State Privacy Rights
We do not sell personal data or share it for cross-context behavioral advertising. If you are a resident of a U.S. state with privacy laws (e.g., CA, CO, CT, VA, UT), you may request access or deletion through the email above.
11. Children’s Privacy
This service is not intended for children under 16. If you believe a child has provided personal data, please contact us to request deletion.
12. Security
We use reasonable technical and organizational measures to protect personal data.
13. Cookies
We may use cookies for functionality and analytics. You can restrict cookies in your browser settings.
14. Policy Updates
We will notify you of material changes. Continued use indicates acceptance.