Privacy policy

• Age. You enter a month and year of birth. We keep only an age band and your computed age, never the date itself.
• Quiz answers. Height, which boards to check (women’s, men’s or both; we never infer gender), your nearest market and travel preference, training days, on-camera comfort, optional social stats and parts interest.
• Optional tape measurements (bust or chest, waist, hips, sizes, inseam), only with your health-data consent. We never ask for weight and never estimate measurements from a photo.
• Face photo. See “Photos” below. We keep derived face ratios and a photo-quality summary, not the photo.
• Body proportions (optional): ranges and posture angles computed on your phone.
• Email, only if you ask us to send your report, sign in, or buy a plan.
• Technical data: a random anonymous ID cookie (sibam_anon), a keyed hash of your IP address for rate limits, and your approximate region (to preselect a market and to apply regional rules on paid plans).

Face photo. Your phone re-encodes it (at most 1092 px, location and camera data removed) and sends it to our server, which passes it to Anthropic’s Claude for a photo-quality check: light, sharpness, framing, filters, makeup and expression. It is held in memory only, never written to disk or storage, and dropped once the check finishes. Anthropic deletes images after processing and does not use them to train models. We store a fingerprint (a SHA-256 hash) of the re-encoded file so the same photo gives the same result; it cannot be turned back into the photo and is deleted with your result.

The AI never rates your looks. Its output has no field that rates appearance, and none for age, ethnicity or body. It never sees the body photo.

Full-body photo (optional). Pose and proportions are measured on your phone and the photo never leaves it. Only ranges and posture angles are sent.

Face mesh and body landmarks are computed on your phone and are never sent, stored or logged.

• To compute your result with our published rules, and to match you with agencies and markets.
• To send the emails you ask for, and, for paid plans, receipts and the renewal reminders the law requires.
• To keep the service working and fair: rate limits, bot protection, spend caps on AI checks.
• To improve the product with bucketed analytics (for example “score band 60–79”, never your numbers).

A daily job deletes expired data and logs only the counts.

We don’t sell personal data and don’t share it for cross-context advertising. There are no Meta or TikTok pixels on the check, results, stats or program pages. These providers process data for us:

We never send anything to modeling agencies. We don’t submit on your behalf, and agency links simply open the agency’s own page. We may disclose data if the law requires it.

You can see, correct, download or delete your data, and withdraw any consent, wherever you live. Deleting is one step below; for anything else email privacy@shouldibecomeamodel.com and we’ll answer within 30 days. We don’t treat you differently for using these rights.

Residents of states with specific rules (including California, Colorado, Illinois, Texas and Washington) have those rights too. Our biometric policy and consumer health data policy give the details for face data and measurements.

• Under 13: we show a static page and collect nothing.
• 13 to 17: text-only guides. No photo, measurements, score, account, email capture or payment, and page views are the only analytics.
• If we learn that a user is under 18, we delete all their data, cancel any plan and refund it in full. Tell us at support@shouldibecomeamodel.com.

Data is encrypted in transit. Tracker notes are encrypted at rest. Access to production data is limited to the people who run the service. No system can be made completely secure; if a breach affects you, we’ll tell you as the law requires.

Questions: privacy@shouldibecomeamodel.com. When this policy changes we update the version date above; material changes are shown before you next use the check, and new consent is asked for where the law requires it.