PolicyVersion 2026-09-30
Privacy policy
Effective
Should I Become a Model? is a model-readiness check. It works with sensitive things: a photo of your face, and, if you choose, your body measurements. This policy says exactly what happens to them. The short version: as little as possible leaves your phone, nothing is sold, and you can delete it all at any time.
The short version
- 01Your photo never leaves your phone. The face and optional body photos are checked on the device and never uploaded.
- 02We keep derived numbers (ratios, ranges, your answers and result), not images.
- 03Anonymous results are deleted after 30 days. Accounts are purged 12 months after your last sign-in.
- 04To open your report we ask for an email (in the EU, the UK and Switzerland you can skip it). Tips and offers only if you tick a separate box.
- 05We don't sell or share your data for advertising, and there are no ad pixels on the check or results.
- 06The check is for adults 18+. Under-18s only get text guides; we collect nothing from them.
- 07Delete everything now, below, in two taps.
1What we collect
- Age. You enter a month and year of birth. We keep only an age band and your computed age, never the date itself.
- Quiz answers. Height, which boards to check (women’s, men’s or both; we never infer gender), your nearest market and travel preference, training days, on-camera comfort, optional social stats and parts interest.
- Optional tape measurements (bust or chest, waist, hips, sizes, inseam), only with your health-data consent. We never ask for weight and never estimate measurements from a photo.
- Face photo. See “Photos” below. We keep derived face ratios and a photo-quality summary, not the photo.
- Body proportions (optional): ranges and posture angles computed on your phone.
- Email. The address you give to open your report: we send it the report and a link that opens it on any device. In the EU, the UK and Switzerland giving it is optional (“Continue without email”), and anywhere paid plans are sold you can pay once for the Full Report instead. Also the address you sign in or buy with. Tips and offers only if you tick the separate box for them.
- Technical data: a random anonymous ID cookie (
sibam_anon), a keyed hash of your IP address for rate limits (and of an address we send a report to, for its daily limit), and your approximate region (to preselect a market and to apply regional rules on paid plans and the email step).
2Photos
Your photo never leaves your phone. The face photo is checked on your phone for light, sharpness, framing, angle, expression and distance. Only the results of those checks (pass, warn or fail) and the face ratios measured on the device are sent. The photo itself is never uploaded, stored or sent to any AI service. Face photos from checks before 28 September 2026 were sent in memory to a US-based AI model provider for a quality check and never stored; only a SHA-256 fingerprint was kept, deleted with that result.
The AI never sees your photo or rates your looks. AI (DeepSeek) writes the plain-language explanations, from reason codes and bucketed values such as “height within range”, and personalizes paid program notes, for which it also receives your program safety answers (retinoids, sensitive skin, prescription skin care) and skin-topic codes. It never receives a photo, a measurement, your date of birth, your name or your email. Its servers are in China.
Full-body photo (optional). Pose and proportions are measured on your phone and the photo never leaves it. Only ranges and posture angles are sent.
Face mesh and body landmarks are computed on your phone and are never sent, stored or logged.
3How we use it
- To compute your result with our published rules, and to match you with agencies and markets.
- To send the emails you ask for (your report and its link, sign-in links), and, for purchases, receipts and the renewal reminders the law requires.
- Only if you tick the separate, unticked box: tips and offers by email. Unsubscribe in one click from any of them.
- To keep the service working and fair: rate limits, bot protection, spend caps on AI checks.
- To improve the product with bucketed analytics (for example “score band 60–79”, never your numbers).
4How long we keep it
| Data | Where | How long |
|---|---|---|
| Face photo | Stays on your phone. Photo quality is checked on the device. | Never leaves your device. |
| Full-body photo | Stays on your phone. Pose is measured on the device. | Never leaves your device. |
| Face mesh (478 points) and body landmarks (33 points) | Your device only | Never sent, stored or logged. |
| Derived face ratios and body proportion ranges | Our database, with your result | Anonymous: 30 days. With an account: while it's active, deleted 12 months after your last sign-in, or when you delete it. |
| Tape measurements, program progress, check-ins, submission tracker | Our database (only with your health-data consent) | Same as account data. Tracker notes are encrypted. |
| Progress photos (Glow-Up) | Your device only (browser storage) | You control them; export and delete are in the app. |
| Quiz answers and your result | Our database | Anonymous: 30 days. With an account: as above. |
| Email address (to open or send your report) | Our database, on your report and in our log of emails sent | Anonymous: deleted with your report after 30 days, or when you delete the report, including our log of the emails about it. With an account: kept with it, and sent emails are logged for 400 days. If you unsubscribe, we also keep a keyed hash of the address and its domain, so we keep honouring it after the address itself is deleted. If you asked for tips and offers, a keyed hash of the address (not the address) stays in our email log for 400 days, so that series never starts twice. |
| Consent records | Our database | 3 years. |
| Subscription and auto-renew consent proof | Our database and Stripe | The longer of 3 years or 1 year after the subscription ends. |
| Orders and payments | Our database and Stripe | Kept as financial records for as long as the law requires. |
| Analytics events | Our database | 13 months. Buckets only (score band, category, confidence level), a random per-tab session id and a hashed visitor id. Never images, landmarks, raw measurements or your email. Teen pages count page views only, with no identifier. |
A daily job deletes expired data and logs only the counts.
6Your choices and rights
You can see, correct, download or delete your data, and withdraw any consent, wherever you live. Deleting is one step below; for anything else email privacy@shouldibecomeamodel.com and we’ll answer within 30 days. We don’t treat you differently for using these rights.
Residents of states with specific rules (including California, Colorado, Illinois, Texas and Washington) have those rights too. Our biometric policy and consumer health data policy give the details for face data and measurements.
7If you're in the EU, the UK or Switzerland
Westward, operated by Orion Jones, runs Should I Become a Model? and decides how your data is used here (the “controller”). You can reach us at privacy@shouldibecomeamodel.com. The providers listed above process your data for us outside the EU, the UK and Switzerland: most are in the United States, and DeepSeek is in China.
We send your report and its link to the email you give us because you asked for them: that is part of providing the check to you (a contract). Tips and offers are sent only with your consent, given by ticking the separate box, and you can withdraw it at any time in one click from any of those emails, without affecting anything sent before.
You don’t have to give an email to see your result: the screen before your report offers “Continue without email”, and your report then opens only in that browser.
You can ask for a copy of your data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable format, by emailing privacy@shouldibecomeamodel.com. You also have the right to complain to the data protection authority where you live or work.
8Children and teens
- Under 13: we show a static page and collect nothing.
- 13 to 17: text-only guides. No photo, measurements, score, account, email capture or payment, and page views are the only analytics.
- If we learn that a user is under 18, we delete all their data, cancel any plan and refund it in full. Tell us at support@shouldibecomeamodel.com.
9Security
Data is encrypted in transit. Tracker notes are encrypted at rest. Access to production data is limited to the people who run the service. No system can be made completely secure; if a breach affects you, we’ll tell you as the law requires.
10Delete everything now
11Contact and changes
Questions: privacy@shouldibecomeamodel.com. When this policy changes we update the version date above; material changes are shown before you next use the check, and new consent is asked for where the law requires it.