Skip to content

PolicyVersion 2026-09-26

Consumer health data policy

Effective

Some laws, such as Washington’s My Health My Data Act, treat body measurements, biometric data and wellness programs as consumer health data. We treat the data below that way for everyone, wherever you live.

The short version

  • 01We collect health data only with your separate, opt-in consent. It is optional.
  • 02Without it, the check skips measurements and the body photo, and still works.
  • 03We never sell health data, and never use it for advertising.
  • 04You can see it, delete it, or withdraw consent at any time.

1What counts

  • Tape measurements: bust or chest, waist, hips, inseam, dress, suit and shoe size, and whether you measured today.
  • Body proportion ranges and posture angles from the optional on-device body photo (the photo itself never leaves your phone).
  • Training days per week.
  • Glow-Up program data: tasks you complete, weekly check-ins, safety answers (for example “leave retinoids out” or prescription skin care, used only to leave out unsuitable tasks; we don't ask why).
  • Neutral skin-visibility codes from the photo-quality check, used only to choose skincare topics in the program. They never affect the score.
  • Derived face ratios, which we also treat as biometric data.

2Where it comes from

From you (what you type), and from your phone (ranges computed on the device). We don’t buy or receive health data from anyone else.

3Why we collect it

  • To compare your measurements to published category ranges and compute your result.
  • For Stats and Glow-Up: your history, measurements log, program and check-ins.
  • To apply health floors: below a certain waist measurement we stop rewarding smaller numbers and show a supportive note. We never ask for weight or calculate BMI.

4Who we share it with

Only service providers that process it for us. Anthropic receives reason codes and bucketed values (for example “waist outside sample”), never your raw measurements. We don’t sell health data or share it for advertising, and there are no ad pixels on pages that show it.

ProviderWhy
VercelHosts the site and runs the server code.
NeonHosts the database (derived numbers, results, accounts).
AnthropicChecks face-photo quality and writes result explanations. Receives the photo in memory and reason codes, never raw measurements, your date of birth or email.
StripeTakes payments for paid plans. We never see your full card number.
ResendSends the emails you ask for (your report, sign-in links, receipts, reminders).
CloudflareDNS, bot protection (Turnstile) and forwarding of support@ and privacy@ email.
PostHogPrivacy-limited product analytics: bucketed events only, no session replay on the check, results or program.

5How long we keep it

Anonymous: 30 days. With an account: while it’s active, and deleted 12 months after your last sign-in or when you delete it. Full schedule on the privacy page.

6Your rights

You can confirm whether we hold your health data, get a copy, have it deleted, and withdraw consent. Withdrawing stops future collection; delete to remove what we hold. Use “Delete everything now” on the privacy page, or email privacy@shouldibecomeamodel.com. We answer within 30 days, and if we decline a request you can appeal by replying to our answer.

7Contact

privacy@shouldibecomeamodel.com