Skip to content

PolicyVersion 2026-09-30

Consumer health data policy

Effective

Some laws, such as Washington’s My Health My Data Act, treat body measurements, biometric data and wellness programs as consumer health data. We treat the data below that way for everyone, wherever you live.

The short version

  • 01We collect health data only with your separate, opt-in consent. It is optional.
  • 02Without it, the check skips measurements and the body photo, and still works.
  • 03We never sell health data, and never use it for advertising.
  • 04You can see it, delete it, or withdraw consent at any time.

1What counts

  • Tape measurements: bust or chest, waist, hips, inseam, dress, suit and shoe size, and whether you measured today.
  • Body proportion ranges and posture angles from the optional on-device body photo (the photo itself never leaves your phone).
  • Training days per week.
  • Glow-Up program data: tasks you complete, weekly check-ins, safety answers (for example “leave retinoids out” or prescription skin care, used only to leave out unsuitable tasks; we don't ask why).
  • For results from before 28 September 2026 only: neutral skin-visibility codes from the former photo-quality check, used only to choose skincare topics in the program. They never affect the score. New checks don't produce them.
  • Derived face ratios, which we also treat as biometric data.

2Where it comes from

From you (what you type), and from your phone (ranges computed on the device). We don’t buy or receive health data from anyone else.

3Why we collect it

  • To compare your measurements to published category ranges and compute your result.
  • For Stats and Glow-Up: your history, measurements log, program and check-ins.
  • To apply health floors: below a certain waist measurement we stop rewarding smaller numbers and show a supportive note. We never ask for weight or calculate BMI.

4Who we share it with

Only service providers that process it for us. DeepSeek, which writes result explanations, receives reason codes and bucketed values (for example “waist outside sample”), never your raw measurements. When it personalizes your program notes it also receives your program safety answers (whether you avoid retinoids, have sensitive skin or use prescription skin care) and your skin-topic codes, never your name or email. Its servers are in China. We don’t sell health data or share it for advertising, and there are no ad pixels on pages that show it.

ProviderWhy
VercelHosts the site and runs the server code.
NeonHosts the database (derived numbers, results, accounts).
DeepSeekWrites the plain-language explanations on your result and personalizes program notes. Text only: it receives reason codes and bucketed values (for example "height within range", an age band), and for program notes your program safety answers (retinoids, sensitive skin, prescription skin care) and skin-topic codes. It never receives photos, measurements, your date of birth, name or email. Its servers are in China.
StripeTakes payments for paid plans. We never see your full card number.
ResendSends the emails you ask for (your report, sign-in links, receipts, reminders), and tips and offers only if you ticked the box for them.
CloudflareDNS, bot protection (Turnstile) and forwarding of support@ and privacy@ email.

5How long we keep it

Anonymous: 30 days. With an account: while it’s active, and deleted 12 months after your last sign-in or when you delete it. Full schedule on the privacy page.

6Your rights

You can confirm whether we hold your health data, get a copy, have it deleted, and withdraw consent. Withdrawing stops future collection; delete to remove what we hold. Use “Delete everything now” on the privacy page, or email privacy@shouldibecomeamodel.com. We answer within 30 days, and if we decline a request you can appeal by replying to our answer.

7Contact

privacy@shouldibecomeamodel.com