Privacy Policy | Debloat Face
How Debloat Face handles plan inputs, optional selfies, payments, private reports, email delivery, browser storage, and analytics.
Last updated: 2026-07-15
Overview
Debloat Face is a wellness planning tool for mild, temporary facial puffiness. This policy explains what the free plan and optional paid Personalized 7-Day Plan process and the choices available to you.
Plan Inputs and Outputs
To create a free plan, you choose a time frame and safety status. You may also provide optional context, select context chips, or add a selfie. Free-text context is checked for fixed safety signals and used for the current result.
Do not enter private medical details. Debloat Face is not a medical record system.
Photos
A selfie is optional. Before upload, the browser redraws, resizes, and compresses the image to remove ordinary file metadata. The processed copy stays in secure temporary storage only long enough for limited photo-quality and visible-focus AI analysis, then it is deleted. Scheduled cleanup removes temporary copies left by an interrupted request.
The raw selfie is not intentionally stored in the plan database, paid report data, Web report, PDF, email, analytics, or support logs. Deletion from Debloat Face temporary storage does not control separate processing by the AI analysis service and its service partners. You can skip the selfie and still receive a complete plan or report.
Browser Storage
The free plan, completion checkboxes, selected time frame, safety choice, and optional context may be stored in your browser using localStorage so progress can be restored. If you start a paid report, the browser also stores its private access token so PayPal can return you to the report on the same device. You can clear this data through your browser settings. The emailed private link is the recovery path when browser storage is unavailable.
Analytics and Technical Data
We may use privacy-aware site analytics to understand page visits, device and browser categories, referrers, and controlled product events. Selfie URLs, image contents, report tokens, email addresses, free text, questionnaire details, and report contents are not intentionally sent to analytics. Private report routes do not load the product analytics runtime. Hosting and security providers may still process ordinary request metadata such as IP address, user agent, timestamps, and error information.
Paid Plan, PayPal, and Delivery Email
The Personalized 7-Day Plan is a $9.99 USD one-time purchase. PayPal hosts checkout and processes payment details. Debloat Face receives the verified payer email for report delivery but does not intentionally receive full card details. A completed PayPal capture verified server-side, not the browser return page alone, unlocks report generation.
After payment, Debloat Face stores the normalized questionnaire, limited photo-analysis result when used, payment and fulfillment references, generated report, PDF location, delivery email, and delivery status. The private report link and PDF are sent through an email delivery service.
Sharing and Retention
We do not sell personal information. Limited data may be processed by hosting, AI analysis, PayPal, analytics, email delivery, and security services as needed to operate the product. Free-plan browser progress remains until you clear it. Temporary selfie copies are deleted after analysis, with scheduled cleanup as a backup. No-account report content, questionnaire data, delivery email, and private PDF are retained for 30 days by default, then purged while a minimal payment audit may remain for accounting, fraud, refunds, and support. A confirmed full refund locks report access and queues early removal of the private report data and PDF. Operational logs follow each service’s retention settings.
Security and Your Choices
We use encrypted transport, private storage, high-entropy access tokens, token hashing, bounded retention, and access controls, but no internet service can guarantee perfect security. You may skip optional context and selfies, avoid the paid plan, clear browser storage, and contact us to request access, correction, or deletion where applicable.
Contact
Questions about this policy can be sent to [email protected].