Privacy Policy

Appinara s. r. o., Juskova Voľa 66, 094 12 Juskova Voľa, company ID (IČO) 57623252, registered: Commercial Register of the District Court Prešov, section: Sro, insert no. 52598/P.

Data protection contact: hello@becometen.com.

No Data Protection Officer (DPO) is appointed — our processing does not require one under GDPR Art. 37.

Face photo (biometric / special-category data under GDPR Art. 9).

Email address and basic profile data (sign-in via email or Google, receipts, and the email you give Stripe when you pay without an account).

Answers you give in the app (for example age range, sex, skin type, goals, budget) to tailor the rating and plan.

Analysis results, score and plan.

Payment data — processed directly by Stripe; we never see card details.

Technical data: the cookies listed below, basic logs, the country (two-letter code) and operating system family of the connection, and campaign tags from the link you arrived by (for example utm_source) to know which channel brought you.

For abuse limits, the IP address is kept for up to about 24 hours, and a hashed IP is kept with an unpaid free rating for up to 72 hours.

Consent records: the time and version of your consent to photo processing and of your consent to delivery before the withdrawal period ends (so we can prove they were given).

Face photo: your explicit consent (GDPR Art. 9(2)(a)). You can withdraw it at any time.

Paid service: performance of a contract (Art. 6(1)(b)).

Operation and security: legitimate interest (Art. 6(1)(f)).

Accounting and consent records: legal obligation (Art. 6(1)(c)) and demonstrating compliance (Art. 7(1)).

Emails about your scan (the next-scan reminder, one feedback question): sent to existing customers about the service they bought, on the basis of legitimate interest; every such email has an unsubscribe link and you can opt out in your account settings. Payment confirmations, security emails and subscription notices are necessary to perform the contract.

If you start a checkout and leave a saved photo unpaid, we send one service email before it is deleted, telling you when it will be deleted and how to finish (legitimate interest).

Automated rating: the score and plan are produced by AI without human review. This has no legal or similarly significant effect on you (Art. 22) — it is an informational service you bought; you can contact us at any time for an explanation or to contest it.

Rating and image generation use AI providers: Anthropic (rating) and OpenAI (AI potential image).

Application hosting and compute: Vercel — server functions run in an EU region (Ireland).

Payments on the web: Stripe. In the iOS and Android apps, purchases are made through the Apple App Store or Google Play, which act as sellers of record under their own terms; RevenueCat processes the purchase status for us. Email: Resend. Photo storage: Cloudflare R2 (EU). Database: Turso (EU, Ireland).

Sign in with Google (optional): if you sign in with a Google account, Google shares your email and basic profile data with us and itself processes data as a controller.

Some providers (Anthropic, OpenAI, Stripe, Resend, Google, Apple, RevenueCat) also process data in the USA. Transfers rely on Standard Contractual Clauses (SCC), or the EU-US Data Privacy Framework where the provider is certified.

Face-landmark detection for the visual report (the close-ups of your weak points) runs entirely in your browser using a MediaPipe model served from our own servers. The landmark points are not sent to us or to any third party, are not stored, and are discarded when you close the tab.

Optional photo card: if you choose to export a card that contains your photo, you are sharing your own photo yourself. We do not publish it anywhere.

Ad conversions: only if you arrived by clicking a TikTok or Meta (Facebook, Instagram) ad, and only when your free result appears, you start a checkout or you pay, our server tells that platform so it can measure the ad. It sends the click identifier the ad added to the link (ttclid or fbclid), the event (free result shown, checkout started, purchase), your browser's user-agent string (browser and device type), the amount and the time — never your photo, score, answers or anything about your face. Nothing is sent if you did not come from that platform's ad, for free or promo-code orders, or from a pixel or script on our pages (there is none). TikTok and Meta receive this under their own business terms and may process it in the USA (Standard Contractual Clauses or the EU-US Data Privacy Framework). The legal basis is legitimate interest (Art. 6(1)(f)) in knowing which ads bring people who use and pay for the service; you can object at any time by writing to us.

Free rating: the photo is sent to our AI provider for the rating and is not stored by us. The text result is kept on our server for 24 hours (72 hours if you asked us to email it) so you can unlock it, then deleted.

Paid mode: the photo is stored encrypted in the EU (Cloudflare R2, AES256) until you delete the scan or your account.

Unfinished payment: an unpaid scan and its uploaded photo are deleted automatically about 48 hours after upload (at the latest within 3 days).

Text analysis, score and plan: for as long as your account exists; deleted promptly when you close it.

Payment and consent records: 10 years under the Slovak Accounting Act (payments) and for the limitation period (consents) — no photo, only time, version and order ID.

In-app steps (for example “paid”): at most 24 months, not linked to the photo.

Report-access cookie (after paying without an account): 30 days. Sign-in codes: one day after they expire. Sessions: until you sign out or they expire.

You have the right of access, rectification, erasure (Art. 17), restriction, portability, objection, and to withdraw consent.

You can delete a scan or your whole account at any time from the Account page (if you paid without an account, sign in first with the email you paid with), or ask us at hello@becometen.com.

You may also lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27 (dataprotection.gov.sk).

We use only strictly necessary cookies: the sign-in session; short-lived cookies during Google sign-in; two one-day counters that limit free ratings per device; and, after paying without an account, a report-access cookie (30 days) that opens the report you bought in this browser only. We use no analytics or marketing cookies, so we show no consent banner.

Traffic is measured with Vercel Web Analytics, which stores no cookies and does not identify you across sites; it derives an anonymous daily hash from your IP address and browser purely to tell visits apart. The legal basis is legitimate interest (Art. 6(1)(f)) — knowing how many people reach the site.

Separately, we record steps taken inside our own app (for example “scan started”, “photo uploaded”, “paid”) in our own database, to see where people leave. To count people rather than clicks, each step carries a daily visitor key: a shortened keyed hash of your IP address and browser that changes every day, with nothing stored on your device. We do not store the IP address or the browser details themselves, only the country (a two-letter code from the connection) and the operating system family (for example Android), which is also how the regional price is chosen; for visitors who are not signed in, steps from different days cannot be linked (for signed-in users they are linked to the account); there is no profiling, and these steps are not shared with third parties (the only advertising-related data shared is the ad conversion described under Recipients). The legal basis is legitimate interest (Art. 6(1)(f)).

We may update this policy. We will announce material changes on this page and, where needed, by email.