قيّم وجهي – Privacy Policy

Last updated: 11 October 2026 · العربية

The app "قيّم وجهي" (Rate My Face) is made by MASSALHA FZCO ("we"). This policy explains what the app collects, why, who processes it and how you can delete it.

What we collect and why

• Face photos (a front and a side photo for each scan, optional daily progress selfies) and the results we create from them (scores, face traits, daily routine, color analysis, AI-generated "You as a 10/10" images you buy). They are used to give you your analysis and features, and are saved in your private account so you can see your history on any device.
• Account details: when you sign in with Apple or Google we receive your account ID and, if you share it, your email and name. You can use the app before signing in; in that case we use an anonymous account ID instead.
• Your gender (if you choose it), so the analysis and advice fit you.
• Coach messages you write, to generate the coach's replies. Your chat history stays on your device.
• Purchase status (subscription and one-time purchases), to unlock what you paid for and to apply the weekly scan allowance.

We use this information only to run the app's features. We do not sell it, and we do not share your photos, results or messages with anyone except the service providers below. Advertising measurement is described separately below.

Who processes your data

• AI service provider (currently OpenAI) analyses photos, generates images and coach replies. Data sent through the OpenAI API is not used to train their models; OpenAI may keep it for up to 30 days to monitor for abuse, then deletes it.
• Supabase (servers in the EU) stores your account, scans and photos in a private, encrypted storage area that only your account can access.
• Expo (EAS Hosting) runs our server.
• RevenueCat manages purchases and receives your account ID and purchase status.
• Apple handles all payments. We never see your card details.

To protect the service from abuse, our server briefly uses your IP address and keeps simple usage counts (for example, how many scans or coach messages an account used today). These are not used for anything else.

Advertising measurement (Meta)

We use the Meta (Facebook) SDK to measure how well our ads work. The app asks for your permission first (the iOS "Allow tracking" prompt).

• If you allow tracking, Meta receives your device's advertising identifier and a few app events (app install, finishing the intro, creating an account, opening the subscription page, starting a purchase); RevenueCat also tells Meta when a purchase is completed. Meta may link this with information it has about you to measure and improve ads.
• If you don't allow tracking, no advertising identifier is shared and Meta only receives limited, non-identifying information about the app install and these events.

You can change your choice at any time in iPhone Settings → Privacy & Security → Tracking. We never share your photos, scan results or coach messages with Meta.

How long we keep it

We keep your photos and results until you delete them or delete your account. To prevent misuse of one-time purchases, we keep anonymous purchase transaction IDs (not linked to you) after an account is deleted.

Deleting your data

• Delete account (Settings → حذف الحساب): permanently deletes your account, photos, scans and results from our servers and from your device.
• Delete all data (Settings → حذف كل البيانات): removes the data stored on your device. If you never signed in, it also permanently deletes your anonymous account's photos and results from our servers.

Deleting your account does not cancel an App Store subscription; manage or cancel it in your Apple ID settings.

Age

The app is intended for adults (18+). We do not knowingly collect information from children, and the app refuses to analyse photos of children.

Changes and contact

If this policy changes, we will update the date above. Questions or deletion requests: support@massalhafzco.com.