Privacy Policy
Effective September 28, 2026 · Replaces the version dated September 2, 2026
What changed on September 28, 2026
- The app now shows an overall score from 0 to 100, nine area scores, and — when enough members share your reference group — a percentile. We explain how they are made below.
- Ask Maxx, our assistant, can send your scores, profile answers, goals, plan, and recent chat messages to Anthropic to write its replies. It never sends your photos, age, gender, or ethnicity.
- Try On can render looks on your own photo. It sends your front photo to Higgsfield, an image-generation provider, only after you give a separate permission for it.
- We now name every service provider that processes your information, including TypeSafe AI, which reads the words you write so we can tailor your plan.
- Ask Maxx conversations, saved looks, and product lists are kept on your device, not on our servers.
What MaxxLook does
MaxxLook is a personal beauty and grooming coach for adults. It analyzes photos of your face, gives you an overall score, area scores, and a plan, tracks your progress, lets you preview looks on your own photo with Try On, and answers questions through Ask Maxx. Its scores and advice are about appearance only. They are not a medical or dermatological assessment and do not diagnose any condition.
Information we collect
- Account data: your name when an identity provider (Apple or Google) shares it, email address, authentication identifiers, verification status, account role, and time zone.
- Profile and onboarding answers: age and age range, gender, ethnicity, your goals, the areas you want help with, style vibe, skin type, routine level, budget, plan preferences, hair length, whether you have facial hair or wear glasses, whether you want facial-hair recommendations, and lifestyle factors. If you choose to tell us in your own words what brought you here, we keep that text too.
- Photographs: the photos you take for an analysis, plus technical details such as image type, dimensions, capture angle, and quality results. Skin-check, style-check, and free-preview photos are measured and then discarded (see below).
- Face data derived from your photos: facial landmarks, measurements, your overall score, percentile, area and dimension scores, reports, opportunities, and skin-check and style-check results.
- Try On renderings: the generated images of your face you request, and which looks you asked for.
- Ask Maxx messages: your questions and up to eight recent messages from the conversation, which the app sends with each question so Ask Maxx can follow along. We process them to answer and do not store them on our servers.
- Wellbeing signals: if something you write, or how often you re-check, suggests you may be distressed about your appearance, we keep a count of those moments — a number, never a label or a diagnosis — so the app can respond more gently and point you to support.
- Plan and service activity: plan steps you complete, reminders, watchlists, feedback survey answers, notification preferences, device push tokens, subscription status and purchase records, support emails you send, and the security and audit records needed to operate and protect your account.
MaxxLook does not use advertising SDKs, does not access the advertising identifier, and does not track you across other companies' apps or websites.
What stays on your device
Some features keep their data only on your iPhone:
- Apple Health. If you connect Apple Health, MaxxLook reads the sleep, activity, and (only if you allow it) cycle data you choose to share and looks for patterns on your device. That data is never sent to our servers and is never used for advertising. The app stores only your on/off choices and the experiment you are running.
- Ask Maxx conversations. The app saves up to the last 50 messages of each conversation on your device. Clear conversation in Ask Maxx removes it.
- Saved looks and product lists. Looks you save, product favorites, and your shopping list are stored on your device.
Because this data is stored only on your device, deleting your account does not remove it. Clear it in the app or delete the app to remove it from your iPhone.
How we use information
- Authenticate your account and prevent unauthorized access.
- Run the analyses, skin checks, and style checks you request, and produce your scores, report, opportunities, and plan.
- Tailor your plan, product suggestions, and Ask Maxx replies to your profile answers, goals, and the words you write.
- Render the Try On looks you request, if you have turned Try On on.
- Maintain your history and show your progress over time.
- Compute percentiles. Your scores, together with your age, gender, and ethnicity, are counted — without your name, email, or photos — in the reference group we use to compute percentiles for other members who share those attributes. No member can see another member's scores, photos, or identity.
- Send reminders and account emails and notifications you have allowed.
- Process subscriptions, consent, export, and deletion requests.
- Operate, troubleshoot, audit, and protect maxxlook.
- Comply with legal obligations and enforce our terms.
How your scores are made
Your overall score is a weighted blend of the facial measurements from your photos that can be compared with a reference range for people of your age, sex, and population group; symmetry and proportion count most. The nine area scores (skin, hair, eyes, brows, face shape, jaw and structure, smile, makeup style, and overall harmony) come from the same measurements. Any area we cannot score from your photos — hair and makeup style, and skin until skin reference ranges exist — is shown as unscored rather than given a number. Hydration is not measured.
Your percentile shows where your overall score sits among other MaxxLook members of a similar age and the same gender and ethnicity. It appears only when at least 30 members share that reference group. Everything is computed automatically; no person reviews your photos or scores. A score describes measurements of your photos. It is not a judgment of your worth, and it has no effect outside the app.
Biometric data and your consent
Photographs of your face, the facial landmarks and measurements derived from them, the scores built from those measurements, and Try On renderings of your face may be biometric data. Under laws such as the EU and UK GDPR (Article 9) and the Illinois Biometric Information Privacy Act, you have a right to know how it is used and to decide whether it is. This section is our written policy for that data.
Consent
MaxxLook asks for your explicit permission before any photograph is processed, and the server refuses to process photos without it. You may decline and still manage or delete your account. Try On needs a second, separate permission because it sends your photo to an outside provider (see Try On below). You can withdraw biometric permission at any time in Settings → Privacy, and Try On permission at any time in the app. Withdrawing biometric permission immediately locks every camera-backed feature; withdrawing Try On permission stops new renderings, including any already queued. Withdrawing does not by itself delete data you already gave us — use Delete account or delete individual renderings for that.
Purposes
We use face data only to:
- perform the analyses, skin checks, and style checks you request;
- produce your scores, percentile, report, opportunities, and plan;
- show your progress between scans;
- render the Try On looks you request, if you have turned Try On on;
- count, without your identity, toward the reference groups used for percentiles; and
- keep the service secure and meet legal obligations.
What we never do
We do not sell, lease, or trade face data, and we do not otherwise profit from it. We do not use it to identify you, match your face against anyone else's, advertise to you, or train machine-learning models. We disclose it only to the service providers listed below, only for the purpose listed, or when the law requires it.
Retention and destruction schedule
| Data | How long we keep it |
|---|---|
| Analysis photos | While your account needs them to provide the service; permanently deleted within 30 days after you delete your account. |
| Photos from an incomplete analysis set | Expire after 72 hours. |
| Skin-check, style-check, and free-preview photos | Not stored. Measured, then discarded; only the resulting measurements from skin and style checks are kept. |
| Landmarks, measurements, scores, percentiles, and reports | While your account is active; permanently deleted within 30 days after you delete your account. |
| Try On renderings | Until you delete the rendering or your account (then within 30 days). Higgsfield may keep the photo it received and the renderings for up to about seven days. |
| Consent and security audit records | Up to 365 days, where needed to document compliance, resolve disputes, and protect the service. |
When the purge runs, stored photographs, renderings, landmarks, measurements, scores, reports, plans, and related account content are removed from our database and storage. Data that has been irreversibly anonymized and aggregated no longer identifies you.
Equal protection
We store, transmit, and protect face data with at least the same care we use for other confidential information. Service providers that receive face data may process it only to provide their service to us and only under our instructions, and are required by contract to protect it at least as well as this policy does.
Camera and photo handling
The camera opens only after consent, and a photo is captured only when you tap the shutter. Analysis photos are encrypted in transit and at rest. Skin-check and style-check photographs are measured on our servers and discarded without being stored; only the resulting measurements are kept. The free preview on our website measures one photo and discards it; it creates no account and stores nothing.
Ask Maxx
Ask Maxx answers questions about your results. To write a reply, we send Anthropic, the company that makes the Claude AI model, your question, up to eight recent messages from the conversation, and a summary of your results: your overall score and percentile, area scores with their summaries and takeaways, your ranked opportunities, your current plan steps, your goals, and the styling answers from your profile (skin type, budget, style vibe, routine level, focus areas, plan preferences, hair length, facial hair, and glasses). We never send Anthropic your photos, age, gender, or ethnicity.
Questions we recognize as medical, or as a sign that you are distressed, get a fixed response and are not sent to Anthropic. When the Anthropic service is off or unavailable, Ask Maxx answers from fixed, measurement-based templates and nothing is sent to Anthropic. Ask Maxx replies are generated automatically and can be wrong; they are styling guidance, not medical advice. Ask Maxx is part of the membership.
Try On
Try On renders hair, brow, makeup, and beard looks on your own photo. It is off until you give the separate Try On permission. When you request a look, we send your most recent front-facing analysis photo and a description of the look to Higgsfield, an image-generation provider, which returns a generated image. We store that rendering, encrypted, in your account until you delete it or delete your account, and it is included in your data export.
Under Higgsfield's API terms, Higgsfield may keep your photo and the renderings for up to about seven days. Every rendering is labeled in the app as a generated image. It is an illustration of a look, not a prediction of how you will look. Try On is part of the membership.
Service providers
We use these contracted service providers to run MaxxLook. Each receives only what it needs for the purpose shown. No SDK inside the app receives your photographs, facial landmarks, or measurements.
| Provider | What it receives | Why |
|---|---|---|
| Cloudflare (R2) | Analysis photos, Try On renderings, and report files, encrypted at rest. | Private object storage. |
| Cloudflare (Email Sending) | Your email address and the content of account emails. No photos or biometric data. | Sending email. |
| Railway | The data our servers handle, including photos while they are being measured. | Hosts our API, background workers, measurement services, and website. |
| Clerk | Email address, name, and sign-in identifiers, including those shared by Apple or Google if you sign in with them. No face data. | Account sign-in and authentication. |
| Apple | App Store purchase and subscription records; your device push token and the text of notifications you allowed. No face data. | In-app subscriptions (StoreKit and the App Store Server API) and push notifications (APNs). |
| Stripe | Payment details, only if you subscribe on our website. The iOS app never collects card information. No face data. | Website payments. |
| Anthropic | Your Ask Maxx question, up to eight recent messages, and the results summary described under Ask Maxx. Never photos, age, gender, or ethnicity. | Writing Ask Maxx replies. |
| Higgsfield | Your most recent front-facing analysis photo and the look you chose — only after you give the separate Try On permission. | Generating Try On renderings. |
| TypeSafe AI | The words you write about what brought you here (in the app, and in the free preview on our website), goals you type in your own words, Ask Maxx questions, the names of your findings and candidate plan steps, the lifestyle and presentation answers from your profile, how often you run checks, and the wellbeing-signal counts described above. Never photos, age, gender, or ethnicity. | Automated judgments that match what you told us to your results — which finding or plan step to lead with — and that notice possible distress so the app can respond with care. It picks among options we give it; it does not write what you read. |
The Anthropic, Higgsfield, and TypeSafe AI features switch off cleanly: if one is not enabled or not available, the app falls back to a version of the feature that sends nothing to that provider, or shows the feature as unavailable.
Other disclosure
We may disclose information when required by law, to protect users or the service, or as part of a business transaction where the recipient assumes this policy's obligations. We do not sell personal or biometric information.
Product suggestions link to the retailer's own website. We do not add affiliate or tracking codes to those links, and we do not tell the retailer who you are. What you do on a retailer's site is governed by its own privacy policy.
Deleting your data
You can delete your face data and all associated account content in the app under Settings → Delete account, or by writing to privacy@maxxlook.app. Access is disabled immediately. Signing back in within 30 days cancels the deletion; otherwise the permanent purge removes stored photographs, Try On renderings, facial landmarks, measurements, scores, reports, plans, and related account content within 30 days, subject only to the limited compliance and security records described above. You can also delete individual Try On renderings in the app at any time.
Withdrawing a permission stops new processing but does not by itself delete previously retained data.
Your choices and rights
Depending on where you live, you may have rights to access, correct, export, or delete your information; withdraw consent; object to or restrict processing; and complain to a data-protection authority. In the app you can withdraw biometric and Try On permission, delete Try On renderings, clear Ask Maxx conversations, disconnect Apple Health, and delete your account. To get a copy of your account data, write to privacy@maxxlook.app from the email address on your account and we will send it to that address. You may also contact us for help exercising any right.
Security
MaxxLook uses transport encryption, encryption at rest, access controls, expiring sessions, and audit logging designed to protect sensitive information. No system is perfectly secure, so we also monitor operational failures and maintain procedures for responding to security incidents.
Age requirement
MaxxLook is for adults aged 18 and older. We do not knowingly collect personal or biometric information from anyone under 18.
Changes to this policy
When we change how we use personal or biometric data, we update this page, change the effective date above, and summarize what changed at the top.
Contact
Questions, privacy requests, and appeals can be sent to privacy@maxxlook.app. For product help, visit the support page.