FaceKit icon FaceKit
Score Daily Plan AR Routines Progress Testimonials FAQ’s
Download App
Home Privacy Policy Terms of Service Download App
Privacy Policy

Our Privacy Policy

How FaceKit collects, uses and protects your information.

Last Updated: October 20, 2026

This Privacy Policy explains how MINDMUSH LLC (“FaceKit”, “we”, “us”) collects, uses, shares and protects information when you use the FaceKit apps for iPhone and Android, our website and related services (the “Services”).

1. Who we are

The Services are operated by MINDMUSH LLC, 1111B S Governors Ave STE 49061, Dover, DE 19904, United States. Privacy contact: contact@facekitapp.com. Depending on where you live, MINDMUSH is the controller or business responsible for your personal information. Our service providers process it for us under contract.

2. Information we collect

Information you provide

  • Account information: an anonymous account identifier, and if you sign in with Apple or Google, your email address and the name your provider shares.
  • Onboarding and profile information: your first name, age, gender, goals, concerns, preferences, routine choices and any creator code you enter.
  • Face scans and images: the photos or camera frames you choose to submit, and the 3D face model, landmarks, measurements, scores and skin analysis made from them (see section 3).
  • Coach and support content: messages you send to the in-app Coach, feedback, support requests and anything you attach.
  • Purchase information: the product, transaction, subscription status and entitlement for purchases made through the App Store, Google Play or our website. The store or payment processor handles your card details; we never receive your full card number.
  • Notification information: whether you allowed notifications, and the push token Apple or Google needs to deliver them.
  • Email address at web checkout: used to identify your purchase and send your activation link (see section 9).

Information collected automatically

  • Device and technical information: device model, operating system and app version, language, time zone, network information and app-generated identifiers. On iPhone this can include the identifier for vendors and, only if you allow tracking, the advertising identifier. On Android this can include the advertising ID (unless you have deleted or limited it in your device settings), the app set ID and an identifier derived from the Android ID that our subscription provider uses to recognise your device.
  • Usage information: the screens and features you use, onboarding and scan steps, routine activity, paywall and subscription events, notification opens, session information and experiment identifiers. These events are designed not to contain face scans, measurements or chat text.
  • Crash and performance diagnostics: error, crash, hang and performance details, with device and software information needed to fix them. We do not intentionally send camera frames, chat text or request bodies in crash reports.
  • Install attribution: the campaign or link that led to your install, from Apple, Google Play’s install referrer or our attribution provider.

3. Face scans

FaceKit uses your camera only when you start a scan or a guided routine. We don’t record your camera, microphone or surroundings in the background.

  • On iPhone, compatible devices use the TrueDepth camera and ARKit to build a 3D face model from depth data and a texture image.
  • On Android, the app detects your face on your device and uploads a photo with the face landmarks found in it; a 3D model is estimated from those landmarks.
  • On the web, the scan detects your face in your browser and uploads a cropped photo to analyse skin and grooming. A photo can’t provide the 3D structure analysis available in the app.
  • Guided routines track your face live on your device to count reps and guide you. Those frames stay on your device.

We use scan information to build your 3D model, calculate proportions and cosmetic scores, show visualisations, give skin and grooming feedback and generate your routines. Some analysis runs on your device. To return visual analysis, a resized image may be sent to OpenAI’s vision service, which processes it for us.

FaceKit does not use scan information to identify or authenticate you, to unlock your device, to recognise you, or to build a biometric identity database. Face scans are never used for advertising and are never sold. Scans are kept in private storage with access controls, available to your account and to providers acting on our instructions. You can ask us to delete particular scans (see how), or delete your account.

4. How we use information

  • To provide, secure and troubleshoot the Services, and keep your account, scans, routines and settings together.
  • To process scans, calculate scores, show results and give cosmetic or wellness recommendations.
  • To run the Coach, including changing your routine when you ask it to.
  • To process purchases, restore them, manage access and prevent fraud.
  • To send notifications and emails you asked for, and record whether they were delivered or opened.
  • To understand how the Services are used, measure performance and test improvements.
  • To measure which ads and campaigns lead to installs and purchases, where the law and your device settings allow.
  • To respond to support, legal, security and abuse matters, and to comply with the law.

FaceKit’s scores, routines and Coach replies are automated recommendations for cosmetic and wellness purposes. They are not medical advice or a diagnosis.

5. Who we share information with

We share information only as needed for the purposes above:

  • Supabase and Railway: sign-in, database, private file storage and our servers. They hold your account, profile, scans, scores, routines, Coach messages, push tokens and purchase records.
  • Apple: app distribution, Sign in with Apple, App Store purchases and iPhone notifications.
  • Google: app distribution, Sign in with Google, Google Play purchases, and Android notifications through Firebase Cloud Messaging.
  • OpenAI and xAI: AI services for the Coach, routine generation and visual analysis. They receive only what the feature needs (see section 6).
  • Superwall: paywalls, subscription status and access. It receives your account ID, a device identifier, product and purchase events, and attribution details passed on by AppStack.
  • Stripe: payments on our website, through Superwall.
  • Resend: delivery of purchase, activation and (if you agreed) marketing emails.
  • Mixpanel: product analytics on usage events, app and device details, and account or anonymous identifiers.
  • AppStack: install and campaign attribution. It may receive install identifiers, the advertising ID where permitted, campaign details and selected events, and may report conversions to the ad networks that ran a campaign.
  • TikTok: measurement of our TikTok ads. Our website uses the TikTok Pixel, and we may report web purchases to TikTok, so we can see which ads led to visits and purchases.
  • Sentry: crash and error reports.
  • Microsoft Clarity: optional screen-interaction diagnostics in some app builds, only if you turn it on (see section 7).
  • Professional advisers and authorities: where needed for legal, accounting, security or compliance purposes.
  • A buyer or successor: as part of a merger, acquisition or sale of assets, subject to applicable law.

We do not sell your personal information for money. Some advertising-measurement disclosures may count as “sharing” or a “sale” under certain privacy laws; you can opt out as described in section 11. We don’t allow our providers to use your face scans or Coach messages for their own advertising.

6. AI features

The Coach stores your messages so you can see your conversation and it can reply in context. To reply, FaceKit sends your message, recent conversation and relevant profile, onboarding, routine and score context to the AI provider configured for the feature (currently xAI’s Grok for the Coach, and OpenAI for routine generation and visual analysis). These providers may process information in other countries.

7. Analytics, attribution and advertising identifiers

Mixpanel helps us understand how FaceKit is used; AppStack and TikTok help us measure installs and purchases from our campaigns. Using FaceKit doesn’t depend on allowing tracking.

  • iPhone: FaceKit asks before using your advertising identifier for tracking. You can change this in Settings › Privacy & Security › Tracking.
  • Android: you can delete or reset your advertising ID in Settings › Privacy › Ads (the name varies by device). When it’s deleted or limited, FaceKit doesn’t send it.

Optional screen diagnostics

Some app builds may offer a setting to help improve FaceKit. If you turn it on, Microsoft Clarity receives limited screen-interaction data so we can find bugs. Camera, scan, sign-in and payment screens are excluded, and photos, scans, personal text and scores are masked. You can turn it off at any time.

8. Purchases and subscriptions

You can subscribe through the App Store, Google Play or our website. Apple and Google process app purchases under their own terms and privacy policies; Stripe processes website payments through Superwall. We receive the product, transaction, subscription status and access information so we can unlock paid features, restore purchases and prevent fraud.

Deleting your account doesn’t cancel a subscription: cancel App Store and Google Play subscriptions in your store account, and contact us about website purchases.

9. Our website

Web scan photos

When you use the web scan, your photo is uploaded to analyse skin and grooming. Photos and results are stored privately and may be linked to your account if you buy FaceKit. They’re kept until you ask us to delete them at contact@facekitapp.com.

Web purchases

Campaign parameters, a web attempt identifier and your web scan identifier may be passed to checkout to attribute your purchase and connect your results to it. Web funnel analytics, when enabled, contain only events and answers, not photos or face landmarks.

Purchase emails

We use the email you give at web checkout to identify your purchase and send the link that unlocks FaceKit in the app, through Resend. Giving this email doesn’t sign you up for marketing emails.

Cookies and similar technologies

The website uses technologies such as the TikTok Pixel and Mixpanel to measure visits and purchases from our ads, alongside cookies needed to run the site and checkout. Where required, we ask before using non-essential cookies. You can also manage them in your browser settings.

10. Marketing emails

If you sign in to FaceKit with an email address, we may send occasional tips and offers. In the United States we send these unless you opt out on the sign-in screen; elsewhere we send them only if you opt in. You can opt out at any time in the app’s Settings or with the unsubscribe link in every email. We keep a record of your choice so we don’t email you again after you unsubscribe.

11. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your information; to object to or restrict some processing; to withdraw consent; to opt out of targeted advertising, “sale” or “sharing”; and to complain to your data-protection authority.

To delete your account, use Delete account in the app’s Settings, or follow these steps. For any other request, email contact@facekitapp.com with the subject “Privacy request”. We may need to verify your identity, and we respond within the time the law requires. We won’t treat you differently for exercising a right, though some features may stop working.

For California and other US state residents: we may collect identifiers, purchase information, app and internet activity, device and diagnostic information, profile and preference information, content you create, and sensitive face-scan information. We use and disclose them as described in sections 4 and 5, and we don’t use face-scan information to infer characteristics about you.

12. How long we keep information

  • Your account, profile, routines, Coach messages, scans, scores and scan files are kept while your account is active or until you delete them.
  • When you delete your account, your profile, its records and its stored scan files are deleted. Encrypted backups and our providers’ systems may keep limited copies until they expire on their own schedules.
  • Analytics, attribution, crash and subscription records are kept according to each provider’s settings and our operational needs. Deleting your account doesn’t automatically erase them; ask us and we’ll request deletion from those providers.
  • Purchase records we must keep for tax and accounting are retained as the law requires.
  • Push tokens are removed when you turn off notifications or delete your account.

13. Security

We use encrypted connections, private storage, authentication, access controls and monitoring to protect your information. No system is completely secure. If a breach legally requires notice, we’ll notify affected people and authorities as required.

14. International processing

We and our providers may process information in the United States, the European Economic Area, the United Kingdom and other countries where they operate. Where required, we use an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.

15. Children

FaceKit is not directed to children under 13, and we don’t knowingly collect personal information from them. If local law sets a higher minimum age, that age applies. If you believe a child has given us information, contact us and we’ll delete it.

16. Changes to this policy

We may update this policy when the Services, our providers or the law change. We’ll update the date above and, where required, give you additional notice.

17. Contact

MINDMUSH LLC
1111B S Governors Ave STE 49061, Dover, DE 19904, United States
Email: contact@facekitapp.com

FaceKit icon FaceKit

Train, Track, and Improve Your Face with FaceKit Pro

contact@facekitapp.com
Score Daily Plan Progress Testimonials FAQ’s Privacy Policy Terms of Service

© 2026 MINDMUSH LLC. All rights reserved.