Privacy Policy

Welcome to Code Aging (the “App”), operated by Code Aging Ltd. (“we”, “us”, or “our”). This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our mobile application and related services.

Code Aging is an AI-powered facial analysis app that provides non-medical aesthetic insights and treatment suggestions. By using the App, you agree to the practices described in this Privacy Policy.

1. Information We Collect

Depending on how you use the App, we may collect the following categories of data:

1.1 Account and profile information

• Name / display name
• Email address
• Age and gender (provided by you)
• Optional location (city/region text you enter)
• Profile photo (if you upload one)
• Account identifiers and authentication data

1.2 Facial images and biometric-related data

• Selfie / facial photographs you capture or upload for analysis
• On-device face detection signals (for example, to confirm a face is present)
• AI-derived facial analysis outputs (such as landmarks, skin maps, wrinkle or volume indicators, and related aesthetic metrics)
• Analysis reports and treatment suggestions generated from your images

Facial images and derived analysis outputs may be considered special category / biometric-related data under applicable privacy laws. We process this data only with your explicit consent and for the purposes described in this Policy.

Face Data

This section explains how Code Aging collects, uses, shares, stores, retains, and deletes face data. Face data means the facial photographs you capture or upload, on-device face landmarks used to draw the analysis animation, and the measurements, skin maps, and written reports produced from those photographs.

What face data the App collects

• Facial photographs you take with the camera or choose from your photo library for analysis, and an optional profile photo.
• On-device face landmarks (Google ML Kit on iOS and Android) used only to draw the analysis animation on your device. These landmarks are not saved as a face template, are not used to identify you, and are not sent to a face-recognition service.
• For standard analysis: yes/no results about facial lines.
• For premium analysis: skin measurements (such as wrinkle and fine-line counts, spots, skin age, and related aesthetic scores) and skin-map images.
• Written analysis reports and treatment suggestions generated from those results.

How face data is used

We use face data only to provide the aesthetic analysis, history, chat, and optional live consultation you request. We do not use face data to identify you, to unlock the App, for advertising, or to train a face-recognition system. We do not sell face data.

Who receives face data, and where it is stored

• Google Firebase (Cloud Storage and Firestore): your facial photograph is stored under user_images/{your account}, premium skin-map images under face_maps/{your account}, and analysis records in Firestore. This storage lets you open Analysis History.
• RunPod: for standard analysis, the facial photographs are sent to RunPod so it can detect facial lines. RunPod receives those photographs for that analysis.
• AILab Tools (ailabapi.com): for premium analysis, the photograph is sent to AILab Tools to produce skin maps and measurements. AILab Tools receives the photograph for that analysis.
• OpenAI: standard analysis sends only the yes/no line results, not the photograph. Premium analysis sends the measurements, not the photograph. Chat sends the text of the messages you type, and the written report if you opened chat from an analysis. OpenAI uses this to write the report, treatment suggestions, or chat reply.
• Tavus: if you start a live consultation from your results, we send your name, the written report, treatment suggestions, and premium measurements when you have them. We do not send your facial photograph to Tavus. A live consultation started without a saved analysis sends your name and the conversation, not your photograph.

The App asks for your permission in the App before the first time it sends your photo, measurements, chat messages, or consultation details to RunPod, AILab Tools, OpenAI, or Tavus. You can decline. If you decline, that feature does not send the data.

How long face data is retained

Facial photographs, skin maps, and analysis records are kept until you delete that analysis or delete your account. We do not keep a separate face-recognition database. On-device animation landmarks are discarded when the animation ends. Purchase and transaction records may be kept for accounting, fraud prevention, and legal compliance. Those records do not include your facial photographs or skin maps.

How face data is deleted

In Profile, choose Delete Account. Deletion is permanent. It removes your login, facial photographs, skin maps, analysis records, and chats. Purchase records without your photos may remain as described above. You can also email info@codeaging.com to request deletion.

1.3 Communications and support

• In-app chat messages you send to our AI assistant
• Emails or messages you send to us or to clinics/doctors through the App
• Optional live conversation sessions related to your analysis results

1.4 Purchases and credits

• In-app purchase and credit transaction records
• Subscription or product identifiers needed to fulfil purchases
• Payment status and related billing metadata from the relevant store or payment provider

We do not store your full payment card details. Payments are processed by Google Play Billing, Apple In-App Purchase, and/or Stripe (where used).

1.5 Device and technical data

• Device type, operating system, and app version
• Platform information (for example, Android or iOS)
• Basic usage and diagnostic information needed to operate and secure the App
• Local preferences stored on your device

2. Permissions We Request

The App may request the following device permissions:

• Camera – to capture facial photos for analysis and profile images
• Microphone / audio – for optional live conversation features
• Internet / network access – to provide cloud analysis, authentication, storage, and purchases
• Billing – to process in-app purchases on Google Play

You can manage permissions in your device settings. Some features may not work if permissions are denied.

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Authenticate you securely (including Google Sign-In and Sign in with Apple where available)
• Analyse facial images using AI models and generate aesthetic insights
• Provide chat assistance and optional video/live conversation features related to your results
• Display analysis history, recommendations, and related content in the App
• Process purchases and manage analysis credits
• Enable optional sharing of your analysis with clinics or doctors you choose
• Send transactional emails (for example, receipts or appointment-related messages where applicable)
• Maintain security, prevent abuse, and improve App reliability
• Comply with legal obligations

We do not sell your personal data. We do not use your facial images for third-party advertising.

4. Legal Bases for Processing

Where UK GDPR / EU GDPR applies, we rely on:

• Consent – for facial images, biometric-related analysis, and optional clinic sharing
• Contract – to provide the App services you request (account, analysis, purchases)
• Legitimate interests – for security, fraud prevention, and service improvement, where balanced against your rights
• Legal obligation – where we must retain or disclose information to comply with law

You may withdraw consent at any time by using in-app controls (where available) or by contacting us at info@codeaging.com. Withdrawal does not affect processing already carried out lawfully before withdrawal.

5. How We Share Information

Before personal data is sent to a third-party AI service, the App explains what is sent, names the recipient, and asks for your permission. See the Face Data section for face data specifically.

We may share information with:

• Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions, App Check) stores your account, facial photographs (user_images/{your account}), premium skin maps (face_maps/{your account}), analysis records, and chats.
• RunPod receives your facial photographs for standard analysis so it can detect facial lines.
• AILab Tools (ailabapi.com) receives your facial photograph for premium analysis so it can produce skin maps and measurements.
• OpenAI receives yes/no line results for standard analysis, skin measurements for premium analysis, and the text of chat messages (plus a written report if you opened chat from an analysis). OpenAI does not receive your facial photograph.
• Tavus receives your name and, when you start a live session from saved results, your written report, treatment suggestions, and premium measurements. Tavus does not receive your facial photograph.
• Other service providers that help us operate the App: Google Play / Apple for account sign-in and billing, Stripe for certain payments, and Brevo for transactional email delivery.
• Clinics / doctors – only if you explicitly choose to share your analysis or contact them
• Authorities – if required by law, legal process, or to protect rights, safety, and security

These providers process data only as needed to provide their services and under appropriate contractual and security arrangements where required.

6. Data Storage, Security, and International Transfers

Your account data, images, and analysis results are stored using secure cloud infrastructure (including Google Firebase). We apply industry-standard safeguards such as encryption in transit (TLS), access controls, authentication, and App Check protections where enabled.

Because we use global cloud and AI providers, your data may be processed in countries outside the UK/EEA. Where required, we use appropriate transfer safeguards (such as adequacy decisions or Standard Contractual Clauses).

No method of transmission or storage is 100% secure. We work to protect your data, but we cannot guarantee absolute security.

7. Data Retention

• Account information is retained while your account remains active, and is deleted when you delete your account in Profile
• Facial photographs, skin maps, and analysis results are retained until you delete that analysis or delete your account. See the Face Data section
• Chats are deleted when you delete your account
• Purchase and transaction records may be retained for accounting, fraud prevention, and legal compliance. They do not include facial photographs or skin maps
• You may delete your account in the App, or request deletion by email (see Section 9)

8. Children’s Privacy

Code Aging is not intended for children under 16 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, or delete your account in the App from Profile, then Delete Account. That deletion removes your login, facial photographs, skin maps, analysis records, and chats
• Withdraw consent
• Object to or restrict certain processing
• Request data portability
• Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner’s Office – ICO)

To exercise these rights, email info@codeaging.com. We aim to respond within 30 days.

10. AI and Medical Disclaimer

The facial analysis and recommendations provided by Code Aging use artificial intelligence and are for informational and aesthetic guidance only. They are not medical advice, diagnosis, or treatment, and are not a substitute for professional clinical care.

11. Third-Party Links and Services

The App may contain links to third-party websites, clinics, or services. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the latest revision. Continued use of the App after changes means you accept the updated Policy, unless applicable law requires additional consent.

13. Contact Us