Privacy Policy for Beardmax

1. Information We Collect

• Account information: When you sign in with Google or Apple, we receive your user identifier and email address.
• Profile and onboarding answers: The information you give us during onboarding and in your profile — such as your age range, beard goals, grooming routine and frequency, products you use, skin considerations, and how you found us. We also record your country and whether your device is iOS or Android.
• Scan photos: Photos you capture for beard analysis. See section 3 for exactly how these are handled.
• Analysis results: The scores and written assessments produced from each scan, saved to your account with the date, so your progress history survives reinstalling the App or moving to a new phone.
• Community content: Anything you post to the Beardmax Community — posts, comments, reactions, any images you attach, and your community display name. See section 4.
• Journey and routine progress: Which program you're on, days completed, and checkpoint results.
• Notification data: If you enable push notifications, a device token from Apple or Google, plus your device language and time zone so notifications arrive in your language and at a reasonable hour.
• Purchase information: Subscription and purchase receipts validated with Apple or Google. We never see or receive your card details.
• Usage analytics: Which screens you open and which features you use, in aggregate, to understand what works and what doesn't.

2. How We Use Your Information

• To provide the App's core features: analysing your scans, building your routine and journey, and showing your progress over time.
• To personalise recommendations based on your goals, age range, and country.
• To operate the Community, including moderation and enforcement of our content rules.
• To send notifications you've enabled, and to stop sending them when you turn them off.
• To verify purchases and manage subscriptions.
• To understand aggregate product usage and improve the App.
• To detect abuse, prevent fraud, and keep the service secure.

We do not sell your personal information. We do not use your personal information for third-party advertising.

3. Scan Photos — In Detail

We think you should know precisely what happens to a scan photo, so here is the whole path:

1. The photo is saved to your device. This copy is yours and stays on your phone until you delete it or remove the App.
2. A copy is transmitted securely to our servers so it can be analysed. It is placed in a short-lived processing queue.
3. It is sent to a third-party AI provider that performs the analysis and returns scores and written feedback.
4. Only the results are saved to your account. The photo itself is never written to our database or to any long-term storage.
5. The queued copy is deleted automatically once analysis completes — within one hour, or within 24 hours if the analysis fails and is retried.

So while we are accurate in saying we don't keep your scan photos, we want to be equally accurate that they do briefly leave your device in order to be analysed. Any claim that they never leave your phone would be untrue, and we would rather tell you exactly what happens.

We do not use scan photos to identify you. We do not create or store a faceprint, face template, face geometry, or any other biometric identifier. We do not use your photos to recognise you across sessions or services, we do not sell or disclose them to data brokers, and we do not use them to train AI models. We require our AI provider to contractually agree not to use your content to train their models. Providers may retain content briefly for security and abuse monitoring under their own terms.

4. The Beardmax Community

The Community is a public space inside the App, and it works differently from the rest of your data.

• What you post is visible to other users. Posts, comments, reactions, your community display name, and any images you attach can be seen by anyone using the App.
• Community images are stored on our servers and served from a publicly accessible address. This is the opposite of how scan photos are treated, and it's because a post has to be viewable to work at all. Do not post an image you would not want to be public.
• Deleting a post deletes it. The post, its comments, its reactions, and its images are removed outright — not hidden or flagged. The image files are deleted from our storage as part of the same action, so the link stops working.
• Moderation: Content is screened automatically and may be reviewed by our moderators. We keep records of reports and moderation decisions so we can enforce our rules consistently and handle appeals.
• Your community display name is generated for you and is not your real name or email.

5. Who We Share Information With

We do not sell your personal information. We share it only with service providers who process it on our behalf, under contract, and only as needed to run the App. The categories are:

• Cloud hosting and database providers — storing your account, analysis results, journey progress, and community content.
• AI analysis providers — performing the beard analysis described in section 3.
• Authentication providers — Apple and Google, when you sign in.
• App store and payment providers — Apple and Google, for subscriptions and purchase validation.
• Push notification providers — delivering the notifications you've enabled.
• Analytics providers — aggregate product usage measurement.
• Internal operations tooling — our team receives operational alerts about signups and purchases. These identify accounts by an internal reference only, never by your name or email address.

We may also disclose information where required by law, to enforce our terms, or to protect the rights and safety of our users.

Affiliate links: Some product recommendations in the App are affiliate links. If you follow one, the destination retailer will know you arrived from Beardmax and may set its own cookies or identifiers under its own privacy policy. We earn a commission on qualifying purchases. We do not send the retailer your account information.

If you want to know which specific providers process your data at any given moment, ask us at the address in section 11 and we will tell you.

6. How Long We Keep Things

• Scan photos: Up to one hour after a successful analysis, or up to 24 hours after a failed one. Then deleted automatically. Never stored long-term.
• Analysis results, profile, and journey progress: Kept for as long as your account exists, so your history is there when you come back.
• Community content: Kept until you delete it or we remove it under our content rules, then deleted along with its images. We keep a record that a moderation decision was made — so we can enforce rules consistently and handle appeals — but not the deleted content itself.
• Notification tokens: Removed when you disable notifications or the token stops working.
• Purchase records: Kept as long as needed for subscription management, tax, and accounting obligations.

When you delete your account, we delete the personal information associated with it, except where we are required to keep records by law or need them to resolve disputes and enforce our agreements.

7. Your Rights and Choices

You can request account deletion from within the App's settings. You can turn notifications off at any time, in the App or in your device settings. Photos on your device are removed when you delete the App.

If you are in the EEA or UK (GDPR): You have the right to access your personal data, correct it, delete it, restrict or object to how we process it, and receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time. You also have the right to complain to your local data protection authority.

Our legal bases for processing are: performing our contract with you (providing the App's features), your consent (notifications, and posting to the Community), our legitimate interests (security, abuse prevention, and improving the product), and compliance with legal obligations.

If you are in California (CCPA/CPRA): You have the right to know what personal information we collect, use, and disclose; to request deletion; to request correction; and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law.

To exercise any of these rights, contact us at the address in section 11. We will verify your request against your account before acting on it.

8. International Transfers

We operate from the United States, and our service providers may process your information there or in other countries. Where information is transferred out of the EEA or UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect it.

9. Data Security

We use encryption in transit for everything the App sends, restrict access to production systems, and design our storage so that scan photos are never written to long-term storage in the first place. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

Beardmax is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it. Some features and product recommendations are restricted for users under 18 based on the age range you provide.

11. Changes and Contact

We may update this policy. Material changes will be reflected in the "Last Updated" date above, and we will notify you in the App where the change is significant.

Questions, requests, or concerns: privacy@support.beardmax.club. Pack6 LLC is the controller of your personal information.