The short version
- Your photos are processed in memory to make your scan, then deleted. We don’t keep them and don’t train on them.
- We don’t keep your measurements or 3D model either. In the app they’re stored on your phone, and in the web demo in your browser.
- The app has no account. Subscriptions run through Apple or Google.
- We don’t sell your information, don’t use it for advertising, and don’t use photos to recognize or identify anyone.
1. Who we are and what this covers
SnapMeasureAI, LLC (“SnapMeasureAI”, “we”, “us”) is an Illinois limited liability company at 119 South Western Avenue, Unit 1 #488, Chicago, IL 60612, USA. We make software that estimates body measurements and a 3D body model from photos.
This policy covers:
- the SnapMeasureAI mobile app for iOS and Android (the “App”);
- the live demo at demo.snapmeasureai.com (the “Demo”);
- this website, snapmeasureai.com (the “Website”); and
- emails and other messages you send us.
Businesses that use our scanning API in their own products have a separate agreement with us. For scans made through a business’s product, that business decides how the data is used, and its privacy notice applies. See section 7.
2. Photos and scans
When you scan in the App or the Demo, your device sends us:
- a front photo and a side photo (the App and the Demo shrink them to about 800 pixels before sending); and
- your height.
The photos and height are encrypted in transit (TLS) to our servers, which Amazon Web Services runs for us in the United States. Our servers process them in memory and send back your measurements and a 3D body model. Then:
- Photos are deleted. They are not written to disk, kept in logs, or reviewed by people.
- Measurements and the 3D model are not kept by us. They go back to your device, and our copy is discarded.
- Your photos are never used to train or improve our models. We train on synthetic (computer-generated) data.
- No one is identified. The software locates body landmarks to estimate shape and size. It does not recognize people. It does not create or keep face templates, faceprints or any other biometric identifier.
Request logging is turned off on our scanning servers. If a scan fails, the server writes a technical error record so we can fix the bug. That record holds only the location of the fault in our code and the type of error. It holds no photos, heights, measurements or other information about you.
Only send photos of yourself, or of an adult who has agreed to be scanned.
3. Information kept on your device
App. The App has no account and no cloud copy. It keeps these on your phone:
- your scans: measurements, 3D model and date;
- any weight you enter; and
- your profile: height, sex (used to pick the body-fat formula) and units.
We can’t see, recover or restore this information. You can delete one scan, or everything at once in Settings → Delete all data. Uninstalling the App also removes it.
Your phone’s own backups (iCloud on iPhone, Google backup on Android) may include App data if you have backups turned on. Those backups are controlled by you and Apple or Google, not by us.
The App can make a PDF report or a CSV file of your scans. It does this on your phone. The file goes only where you choose to send it.
Demo. The Demo keeps your recent scans in your browser’s local storage, on your device, so you can compare them later. Clearing your browser’s site data removes them.
4. Subscriptions and purchases
App subscriptions are bought and billed through the Apple App Store or Google Play. Apple or Google handles your payment details, and we never receive them.
We use RevenueCat, Inc. to confirm which subscription is active on your device. RevenueCat receives:
- a random app user ID that is not linked to your name or email;
- your purchase and subscription history from the store, with transaction IDs;
- the store country and price; and
- basic device information, such as the operating system and app version.
See RevenueCat’s privacy policy. To cancel, manage or ask for a refund on a subscription, go through Apple or Google.
5. The Website, analytics and cookies
The Website and Demo use Google Analytics 4, loaded through Google Tag Manager. They set cookies to show us how pages are used: pages viewed, device and browser type, approximate location (country or city), referring site, and events such as starting a scan or opening the contact form. We use this only to improve the site. We don’t use advertising features or build advertising profiles.
To opt out, block cookies in your browser or use Google’s opt-out add-on. See also how Google uses information from sites that use its services. The App contains no analytics or advertising code.
Our hosting providers may keep standard technical logs, such as IP address and request time, for security and to keep the service running.
6. When you contact us
If you use the contact form or email us, we receive what you send, such as your name, email address, company and message. The contact form is delivered to our inbox by Web3Forms. We use this only to reply to you and to run any business relationship that follows. We keep the correspondence for as long as that relationship lasts, plus a reasonable period for our records.
7. Business customers and the API
When a business, such as a clinic, retailer or uniform supplier, uses our API in its own product, it decides why and how the scans are processed. For those scans we process data only on that business’s instructions, under our agreement with them, and in the cloud region agreed with them. Photos are handled as described in section 2. Questions about those scans should go to the business whose product you used. We will help them answer you.
8. What we don’t do
- We don’t sell personal information, and we don’t share it for targeted or cross-context advertising.
- We don’t keep your photos, measurements or 3D models.
- We don’t use your photos to train our models.
- We don’t identify people from photos or create biometric identifiers.
9. Who we share information with
We share only what each provider needs to do its job for us:
- Amazon Web Services: runs the servers that process scans.
- Apple and Google: distribute the App and handle subscription payments.
- RevenueCat: checks subscription status (see section 4).
- Google Analytics: measures Website and Demo use (see section 5).
- Web3Forms: delivers contact-form messages.
- GitHub: hosts the Website.
We may also disclose information if the law requires it, to protect people’s safety or our rights, or to a buyer or successor if our business is sold or reorganized. In a sale or reorganization, this policy would continue to apply.
10. How long we keep information
- Photos, height, measurements and 3D models sent for a scan: only while the scan is being processed, usually a few seconds.
- App and Demo data on your device: until you delete it.
- Subscription records: kept by Apple, Google and RevenueCat as long as needed to provide the subscription and meet tax and accounting rules.
- Analytics data: kept in Google Analytics for 14 months at most.
- Correspondence: as described in section 6.
11. Security
Scans travel over TLS 1.3. Photos are processed in memory and never written to disk. Server request logging and crash dumps are turned off. Access to the servers is restricted to the people who run them. No system is perfectly secure, but keeping as little as possible is our main protection: we can’t lose what we don’t keep.
12. Your choices and rights
Most of your information is already in your hands. You can delete App data in the App and Demo data in your browser at any time, and turn off analytics as described in section 5.
Depending on where you live, you may have the right to:
- ask whether we hold personal information about you;
- get a copy of it;
- have it corrected or deleted;
- object to or restrict how we use it;
- withdraw consent; and
- not be treated differently for using these rights.
Email info@snapmeasureai.com with your request. We may need to verify that the request comes from you. We answer within 30 days, or within the time your local law sets, which can be up to 45 days.
Because we keep no photos or scans, often we will have no scan data to return or delete. If we decline a request, you can appeal by replying to our answer. You can also complain to your local data protection or consumer protection authority.
13. Consumer health data
Some US state laws, including Washington’s My Health My Data Act, treat body measurements and body-composition estimates as consumer health data. We use this data only to give you your scan results, and only when you ask for a scan. We don’t keep it on our servers, sell it, or share it with anyone except the service providers in section 9 that process it for us. You can ask about this data, or ask us to delete it, as described in section 12.
14. Visitors from the EEA, UK and Switzerland
SnapMeasureAI, LLC is the controller for the App, the Demo and the Website. We rely on these legal bases:
- performing our contract with you, to make the scans you ask for and provide your subscription;
- your explicit consent, given when you start a scan, because body measurements can count as health data;
- our legitimate interests, to run, secure and improve the Website and to answer messages; and
- your consent for analytics cookies, where the law requires it.
Processing happens in the United States. Where we transfer personal data there, we rely on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.
15. Children
The App, the Demo and the Website are not intended for children. The App is for adults aged 18 and over. Don’t scan anyone under 18. If you believe a child has sent us information, contact us and we’ll delete anything we hold.
16. Changes to this policy
If we change this policy, we’ll post the new version here and update the date at the top. If a change materially affects how we handle your information, we’ll also tell you in the App or on the Website before it takes effect.
17. Contact us
SnapMeasureAI, LLC
119 South Western Avenue, Unit 1 #488
Chicago, IL 60612, USA
info@snapmeasureai.com