Privacy Policy

At sign-up we require your email address, a password or social sign-in identifier, and your name. Your IP address, browser information, and access time are collected automatically.

While using the Service we collect face photos and reference photos you upload; facial measurements derived from them (section 3); generated simulations, videos, guideline drawings, and reports; project and node structure; share links and their view records; assistant conversations.

At checkout we collect payment records and credit usage. Card details are handled by Stripe and are not stored by us.

When you contact us we collect your message and the contact details needed to reply.

Where you arrive through a creator or partner link, we collect the referral code and campaign parameters in that link so the referral can be credited.

We process the face photos you upload and the facial measurements derived from them: the geometric coordinates of the eyelid, nose, and contour, and the millimetre values computed from those coordinates.

We use them only to generate a simulation for that photo, to measure and verify the result, and to display and store the result for you.

We do not use them to verify identity, to match one photo against another, or to search for a person by face. We do not use them for advertising or profiling, and we do not sell them.

Because these may constitute sensitive personal information, we ask for consent separately from account sign-up, at the moment you upload. You can withdraw that consent at any time, and we then delete the photo and everything derived from it without undue delay.

Facial measurements are deleted together with the photo they came from. Retention is covered in section 9.

Use for model training is governed separately by section 5.

Where consent is the basis, you may decline and still use the rest of the Service.

We do not use the face photos you upload, or data derived from them, to train AI models. This applies to material from personal accounts and from clinic and business accounts alike.

Uploaded photos are used only for the purposes set out in section 2: generating a simulation for that photo and measuring the result.

We do not sell or disclose personal information to third parties for training purposes.

If we ever want to use data for training, we will amend this policy with 30 days’ notice and ask for separate consent. Declining would leave every feature of the Service available to you.

We engage the following providers to operate the Service, under contracts that require them to protect personal information.

We transfer personal information outside your country as set out below. You may decline; if you do, the corresponding feature is unavailable.

Where a clinic or business ("organization") account processes photos of that organization’s clients, the organization is the controller of that personal information and we process it on the organization’s instructions.

Requests to access, correct, or delete such information should therefore be made to that organization first. If you send the request to us, we pass it on to them.

Before uploading a client’s face photo, the organization must obtain that client’s consent covering capture, upload, and simulation. That responsibility sits with the organization. So that it can build its own consent process, we specify the items and purposes we process in the annex to the data processing agreement.

The terms of our processing for an organization are set out in a separate data processing agreement.

For personal accounts, deleted projects are purged within 30 days; drafts and abandoned uploads within 7 days; share links expire after 7 days by default and 30 days at most, with expired ones cleared 7 days later; a deleted account is fully removed after a 30-day grace period.

Access logs are kept to prevent abuse and to diagnose faults, and are destroyed without undue delay once that purpose is met. Payment and transaction records are kept for 5 years as required by law.

For organization accounts, the retention period follows the region the organization selects: 3 years in Korea, Japan, Taiwan, and Singapore, and 6 years in the United States, with a 10-year ceiling. If a paid plan ends we give 90 days’ notice before deletion. The organization decides its region; we hold the data on its instructions (section 7).

Electronic files are deleted by means that prevent recovery.

The locale cookie remembers the language you chose. It is kept for one year.

The session cookie keeps you signed in. It is removed at sign-out or expiry.

The ref cookie remembers which creator or partner link you arrived through, so the referral can be credited. It is kept for 30 days. It stays on our own domain and is not shared with anyone.

We do not use third-party advertising or tracking cookies, and we do not embed advertising or attribution tags from other companies. You can refuse cookies in your browser, but you will not stay signed in.

You may ask to access, correct, delete, or export your personal information, to stop its processing, or to withdraw consent.

Send requests to contact@gangnamx.com or through the Support page. We respond with a result or a status within 10 days. A legal representative or an authorised agent may make the request, in which case we verify the authorisation. We may need to verify your identity before acting.

For material processed in an organization account, see section 7.

In Korea you may also seek help from the Personal Information Dispute Mediation Committee (1833-6972) or the Privacy Infringement Report Centre (118).

We do not accept sign-ups from anyone under the age of 14, and we check age at sign-up.

If we learn that an account belongs to someone under 14, we delete the account and any uploaded photos without undue delay.

Where an organization uploads a photo of a minor client, obtaining the guardian’s consent is that organization’s responsibility.

We do not make automated decisions that produce legal effects or similarly significant effects for you. A simulation is a visual reference, not a diagnosis, prescription, or treatment plan.

We encrypt data in transit and at rest, keep access rights minimal and logged, maintain a tamper-evident record for consultation history, and operate deletion, incident-response, and vendor-review procedures. The Security page describes this in more detail.

If we learn that personal information has been exposed, we tell the affected users without undue delay what was exposed, when and how, what we are doing about it, and what they can do. We notify the supervisory authority where the law requires it.

Questions, complaints, and remedy requests about how we handle personal information can be sent to the contact below.

We give 7 days’ notice before a change takes effect. For changes that disadvantage you or are otherwise material, such as new categories collected, a new purpose, or a new processor or transfer destination, we give 30 days’ notice and, where needed, ask for consent again.