Privacy Policy
Effective 11 June 2026
This policy covers the Aeviam website at aeviam.com and the Aeviam app. It explains what we collect, where it lives, and the choices you have. We have kept it in plain English on purpose.
- Your face scan is analysed on your device. Scan images are not sent to a server for analysis.
- The face signature used to recognise the account owner is stored on the device only and is never uploaded.
- We don't sell your data and run no ad networks. The website uses Google Analytics for usage stats, and only after you accept cookies.
Who we are
Aeviam runs aeviam.com and the Aeviam app. When this policy says "we", it means Aeviam. When it says "you", it means the person using our website or app.
Aeviam is the data controller for the personal data described in this policy. Full registered company details will be published here once our registration is complete; until then, reach us at the contact address below.
Your face scan stays on your device
The scan is the heart of Aeviam, so we will start there.
Scan analysis happens on your device, in your browser or inside the app. Your scan images are analysed locally. They are not sent to a server for analysis.
The face signature used to recognise the account owner is stored on the device only and is never uploaded.
What leaves your device is the result: the scores and skin metrics from your scan, saved to your account so you can track your trend over time.
One more detail. The scan page is loaded with a pseudonymous identifier, not your account id.
What we store in your account
Your account data lives in our cloud database, run by Supabase. It holds:
- Your email address and name
- Your scan scores and skin metrics
- Scan calibration data: the running scoring state, plus the raw image statistics and capture conditions stored with each scan
- The outcome of the scan's identity check, stored with each scan: a match status and a similarity number. Never the face signature itself.
- Your daily habit logs and Glow check-ins, including the short auto-generated note saved with each Glow check-in
- Your skincare routine and your daily routine completion
- Improvement receipts: which habit improved which skin metric, with dates and session counts
- Your streak, including your rest-day bank
- Your quiz answers
- Your progress photos, only if you give explicit consent. They sit in private storage that only your account can access.
- Once the shelf feature launches: products you add to your shelf, including the ingredient text read from your photos. The photos themselves are never stored.
Apple Health
Apple Health is optional. Nothing is read until you choose to connect it.
If you connect it, Aeviam reads sleep, water, steps, workouts and heart rate variability. Read only. Aeviam never writes to Health.
Your raw Health data is used on your device to personalise your protocol. It is not uploaded wholesale to our servers. Values derived from Health, such as whether you slept 7 hours or how many glasses of water you drank, are saved into your daily habit log in your account, like any habit you tick manually.
Location
The app uses your rough location, at most once a day, for one job: fetching the local UV index and humidity from Open-Meteo, a weather service. The app rounds your position to roughly the nearest 11 km before asking the weather service. Your precise position never leaves your phone, and your location is not stored on our servers.
Infrastructure we rely on
Like every app, Aeviam runs on a small set of services. Here is the full list, and what each one sees:
- Vercel hosts the website. Like any web host, it sees standard request logs.
- Google Fonts serves the site's typefaces.
- The scan's analysis models are downloaded from public CDNs (jsdelivr and Google Cloud Storage), which see your IP address like any download.
- Expo's update service checks for app updates.
- Open-Meteo receives a rough location, rounded to about 11 km, and returns the day's UV and humidity.
None of these receive your scan results, your photos or your face data.
Cookies and analytics
The website uses Google Analytics to understand how visitors use the site, for example pages viewed, broad device and country, and which steps of the scan funnel people reach, so we can improve it. Google Analytics never receives your scan results, your photos or your face data.
Analytics only runs if you accept it. On your first visit nothing is set until you choose: we use Google Consent Mode, so until you accept, no analytics or advertising cookies are stored. You can change your mind at any time using the "Cookie preferences" link in the footer. We do not run advertising networks on the site, and we do not sell your data.
Sharing
We do not sell your data. The only thing that leaves Aeviam is what you choose to share yourself, through the app's share cards. What you share, and where it goes, is entirely up to you.
How long we keep things
Your data stays in your account until you delete it. Scans and photos can be deleted in the app at any time, and deleting your account removes everything.
Our legal basis is simple: we process your data to provide the service you signed up for, and with your consent where we ask for it, such as progress photos.
Deleting your data
You can delete individual scans and progress photos in the app, from your scan history. You can delete your account and everything in it from the app's Settings, or contact us and we will do it for you.
Your rights
Under UK GDPR you can:
- Ask for a copy of the data we hold about you
- Ask us to correct it
- Ask us to erase it
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk
Email us and we will act on any of these.
Contact
Questions, requests, complaints: hello@aeviam.com. We read everything.
Changes to this policy
If this policy changes, we will update this page and the effective date at the top.