Privacy Policy

Last updated: October 4, 2026

The short version

Free face-analysis tools: On desktop, analysis runs in your browser. On mobile, your photo is processed in memory by our scan server and deleted immediately after the landmarks are measured — never written to disk. By default nothing is kept: no photo, no copy, nothing used to train anything. There are three exceptions and all three are your choice — you can save a scan photo to your own account, you can submit a photo to the community rating pool, and the paid Audit keeps a thumbnail so you can reopen your report. Each one is deletable, and deleting removes the file itself, not just the link to it.

On the looksmaxxing test: Before scoring, your photo is checked automatically for anything that should not be scanned. That check happens on our server and the photo is discarded straight after it. To run that check, our server sends the photo to outside AI services (OpenAI, and Anthropic as its backup, which may also confirm a face is present) that only return a verdict on it; the check itself keeps nothing. Section 2 has the details.

Paid audit tiers ($19.99 Premium Audit, $49 Pro Audit): server processing is required. We send a compressed thumbnail of each photo to our server and to our AI vendor (Anthropic Claude) so a written report can reference visible details. Thumbnails are deleted after the report is generated. We never sell or share your photos, and we don't train AI models on your data.

1. Who we are

RealSmile ("we," "us," "our") operates the website realsmile.online. We provide free and premium AI-powered facial analysis tools. This Privacy Policy explains how we handle your information when you use our website and services.

2. Free face-analysis tools (in-browser)

The free tools on RealSmile (looksmaxxing test, face score, face rating, golden ratio, symmetry test, FWHR calculator, canthal tilt test, face shape test, am-i-ugly test, attractiveness test, headshot ranker desktop, mog-your-friends, and similar) use face-api.js, an open-source AI library that runs in your web browser (client-side) on desktop. When you upload or capture a photo for any of these tools on desktop:

  • ✓ The face measurement is computed locally on your device
  • ✓ The measurement itself sends no image data to our servers or any third party (the looksmaxxing test also runs one safety check first, described below)
  • ✓ No facial data, landmarks, or analysis results are stored by us
  • ✓ When you close the page, all photo data is discarded from your browser's memory

You can verify this yourself by opening your browser's developer tools (Network tab) while using a free RealSmile tool on a desktop browser — the measurement makes no outbound request containing image data. On mobile, most of these tools, including the looksmaxxing test and the headshot ranker, use a server-side analysis path instead, because the on-device model is too slow on phones: the photo is processed in memory by our scan server and deleted immediately after the landmarks are measured — never written to disk.

One safety check on the looksmaxxing test. Before that scan runs, the photo you choose is sent once to our server for an automated safety check, on desktop as well as on mobile. Our scan server checks that it shows a face, and the photo is screened by OpenAI's moderation service for sexual, violent, self-harm or graphic content. If OpenAI's service is unavailable, Anthropic's Claude API does that screening instead, and it may also be used to confirm that a face is present. The check only returns a verdict: the photo is not kept by it and is discarded straight after, unless you are signed in and choose to save it to your account. OpenAI and Anthropic each state that, by default, they do not use data sent to their APIs to train their models.

3. Paid audit tiers and AI photo generation

Unlike the free tools, the Premium Audit and AI hairstyle-tryon previews require server processing. We are upfront about this so the disclosure here matches what actually happens on the wire:

  • • When you upload photos for any paid audit tier ($19.99 Premium Audit / $49 Pro Audit), your browser computes a 320-pixel JPEG thumbnail of each usable photo and sends those thumbnails to our server alongside your numeric metric scores.
  • • The thumbnails are forwarded to Anthropic (Claude API, our AI report writer) so the personalized report can reference visible details — lighting, crop, background, expression, wardrobe, grooming — instead of writing a generic numbers-only report. Anthropic does not train its models on API inputs by default and has its own privacy and data-handling policies (see Anthropic Privacy Policy).
  • • The AI hairstyle / beard try-on feature sends your selected photo to a third-party generative-AI vendor (FLUX / PuLID via Replicate) so an identity-preserving target image can be rendered. The output image is returned to you and stored against your audit so you can re-view it.
  • • We do not sell your photos. We do not display them publicly. We do not use them to train AI models. Thumbnails and uploaded images associated with a paid audit are retained only for the lifetime of the audit record so you can re-download your report; we will delete them on request (email hello@realsmile.online).
  • • Payment is processed by Stripe; we never see or store your card number.

If you want a face analysis with no server upload at all, use any of the free in-browser tools listed in section 2 from a desktop browser instead.

3a. Community photo contributions (opt-in only)

Separately from the free scans and paid audits above, you can volunteer a photo to be rated 1–10 by other RealSmile users ("community voting", at /contribute and /vote). Unlike free-scan photos — which are analyzed in your browser on desktop, or in memory on our scan server on mobile, and discarded after analysis — community-contributed photos ARE stored on our servers, and only with your explicit consent. Nothing is ever contributed automatically: a contribution happens only when you upload a photo yourself and affirmatively check the consent boxes.

  • • Use 1 — community rating (required consent): your photo is shown to other users, who rate it 1–10 (numbers only; commenting is not possible anywhere in the system). The average is shown to you as your "Human Score" — it is simply how those people rated the photo, not a validated measure of anything.
  • • Use 2 — model training (separate, optional consent): if — and only if — you also check the second box, your photo and its ratings may be used to train future RealSmile scoring models. Declining this has no effect on being rated.
  • • 18+ only: contributions require an attestation that you are 18 or older and that the photo is of you.
  • • Moderation: every photo is screened before entering the rating pool — an automated content and apparent-age check, with anything it flags held for human review. The apparent-age estimate runs in your browser before upload. On our side, our scan server checks that the photo shows a face, and OpenAI's moderation service screens it for sexual, violent, self-harm or graphic content; if that service is unavailable, Anthropic's Claude API does the screening instead, and it may also be used to confirm that a face is present. Anthropic's Claude API also gives each contributed photo a second automated look, at apparent age and at things the first screen does not cover: nudity, hate symbols, obscene gestures, contact details or slurs written in the photo, more than one person, and screenshots or photos of a screen. For now that second look is recorded for our reviewers and does not decide anything on its own. These services receive the photo only to return a verdict, and each states that, by default, it does not use data sent to its API to train its models. A photo the automated check rejects is not stored. Rejected photos have their image data erased immediately.
  • • Deletion rights: you can delete your contribution at any time on /contribute (enter your email, click Delete). The image bytes and all votes on it are erased immediately — no waiting period. You can also email hello@realsmile.online.
  • • Raters stay anonymous: we do not store raters' IP addresses; votes are keyed to a one-way hash used only to prevent duplicate votes.

We never sell community photos, never show them outside the rating pool, and never use them for training without the separate training consent.

4. Information we do collect

We collect limited, standard information to operate the website:

Analytics

We use Google Analytics to understand how visitors use our site (pages visited, time on site, device type, general location at the country/city level). This data is aggregated and does not include photos, facial data, or personally identifiable information. You can opt out using browser extensions like Google Analytics Opt-out.

Payment information

If you purchase a premium report, payment is processed by Stripe. We do not store your credit card number, CVV, or full payment details. Stripe handles all payment processing in compliance with PCI DSS standards. We receive only a transaction confirmation, your email (if provided), and payment amount. See Stripe's Privacy Policy for details.

Cookies

We use essential cookies for website functionality, analytics cookies (Google Analytics), and advertising cookies (described in the next section). On the pages where ads are served, our advertising partner Mediavine operates a consent management platform, and visitors in the EEA, the UK, Switzerland, Norway and Quebec are shown its consent prompt for advertising cookies, and visitors from US states with privacy laws can opt out through the ‘Do Not Sell or Share My Personal Information’ link on those pages. Ads are not served on checkout, pricing, or account pages, so that prompt does not appear there. You can block or clear cookies at any time through your browser settings, and the opt-out links in the next section let you opt out of interest-based advertising independently of any prompt.

Third-party advertising

RealSmile displays advertisements on certain pages (free tools and article content) to fund the free tools. Ads are not shown on checkout, pricing, or account pages, and RealSmile Pro members browse ad-free. We do not share your photos, facial analysis data, or paid-audit thumbnails with any advertising partner. Our advertising is managed by Mediavine, and the disclosure below describes that programme.

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The "help" feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

  • • IP Address
  • • Operating System type
  • • Operating System version
  • • Device Type
  • • Language of the website
  • • Web browser type
  • • Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance’s AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

5. Affiliate links

Some pages contain affiliate links to Amazon and other retailers. When you click these links, the retailer may set their own cookies to track the referral. We earn a small commission on qualifying purchases at no extra cost to you. We do not share any of your personal information or facial analysis data with affiliate partners.

6. Data sharing

We never sell or rent your photos, your facial-analysis results or your email address. On free-tool and article pages, our advertising partner Mediavine and its partners use cookies and similar technologies to show ads; some US state privacy laws (for example California’s) can treat that kind of ad targeting as ‘selling’ or ‘sharing’ personal information. You can opt out with the ‘Do Not Sell or Share My Personal Information’ link at the bottom of those pages. We share limited data only with: Stripe (payment processing), Google Analytics (anonymous usage statistics), Mediavine and its advertising partners (advertising on free-tool and article pages only — see section 4), Resend (email delivery for opt-in subscribers), Vercel (website hosting), Railway (hosting for our scan server), OpenAI (automated content screening of photos contributed to the community rating pool, and of the photo checked before a looksmaxxing-test scan — see sections 2 and 3a), Anthropic (Claude API: the AI report writer for the paid Premium Audit, a second automated check of every photo contributed to the community rating pool, and the backup content screen and face check for contributed photos and the pre-scan check — see sections 2 and 3a), and Replicate / FLUX-PuLID (the generative-AI vendor that renders paid AI hairstyle previews). For the free face-analysis tools, the only parties that receive your photo are the screening services named for the looksmaxxing test's pre-scan safety check in section 2, which only return a verdict; none of the others receive your photos or facial analysis data. For the paid Premium Audit and paid AI photo features, the relevant AI vendor receives the thumbnail or photo as described in section 3 above.

7. Data retention

Free face-analysis tools: photos and facial analysis results are not retained (processed and discarded in your browser on desktop, or in memory on our scan server on mobile). Paid Premium Audit: thumbnails and uploaded photos are retained against your audit record so you can re-download your report; we will delete them on request. AI hairstyle preview: the generated output image is retained against your audit record on the same basis. Analytics data: retained by Google Analytics per their standard retention policy (14 months by default). Payment records: retained as required by law for tax and accounting purposes.

8. Your rights

For free in-browser tools, we don't collect or store your photos, so there is nothing on our side to delete. For paid Premium Audit data (thumbnails, uploaded photos, generated output images, audit report) and any other data (analytics, payment records), you can email us at hello@realsmile.online and we will delete the record. If you are a resident of California (CCPA), the EU (GDPR), or another jurisdiction with data protection laws, you have the right to request access to, correction of, or deletion of your personal data.

8a. How to request data deletion

Three self-serve options. All three satisfy GDPR Article 17 (right to erasure) and CCPA § 1798.105:

  • 1. Sign in and use the privacy panel. Visit /account/privacy, click Delete my account, type DELETE to confirm. Immediate, no email round-trip. You can also choose "Hold for 30 days" for a recoverable soft-delete (see section 8b).
  • 2. Signed in, from your data page. Visit /account/data while signed in and choose Delete my account; we email a confirmation link to your address, and the deletion runs once you open it and confirm. Lost access to that inbox? Use option 3.
  • 3. Email us. hello@realsmile.online. Manual processing within 30 days, free of charge.

To download a copy of every record we hold on you (GDPR Article 15), use the same /account/privacy panel and click "Download my data". Limit: one export per 24h.

8b. What data we retain after deletion (and why)

When you delete your account, every record tied to your email is erased except for the items below. We anonymize rather than delete these because the underlying records are legally required to be retained, but the personal binding (your email) is severed:

  • • Refund records (RefundLog). Required for 7 years by US tax/accounting law (IRC § 6001). Your email is replaced with a one-way hash; the SKU + amount + reason text is retained for our books. We cannot reverse the hash.
  • • Purchase rows (Entitlement). Same treatment — email anonymized, SKU + purchase timestamp retained for revenue reconciliation against Stripe.
  • • Email-suppression record (EmailUnsubscribe). If you unsubscribed before deleting, we keep your address on a one-way suppression list. CAN-SPAM 15 U.S.C. § 7704(a)(4) requires us to honor opt-outs indefinitely — wiping the suppression row would let a future signup with the same address restart emails to you. The suppression list is regulatory-protected data the user wants us to remember.
  • • Stripe invoice / tax history. Stripe retains its own copy under its own retention schedule (typically 7+ years). To request deletion of Stripe-side records, contact Stripe directly via your billing portal — we do not have the ability to delete records on Stripe's servers.
  • • Deletion audit log (AccountDeletion). A new row is written for each completed deletion, containing only a one-way SHA-256 hash of your email, the timestamp, and counts of affected tables. This is our compliance evidence that the request was processed; it contains no recoverable personal data.

30-day grace period. If you choose "Hold for 30 days" instead of immediate deletion, your account enters a suspended state — emails are paused, sign-in is blocked, but no rows are erased yet. You can recover by signing back in within the window. After 30 days, an automated cron at /api/cron/grace-period-deletion runs the same hard-delete pipeline described above.

9. Minors

RealSmile is not intended for children under 13, and we do not knowingly collect personal information from anyone under 13. The face scan is available from 13 up, and under-18s should use it with a parent or guardian's awareness.

The community rating pool is 18+ only, and we do not knowingly publish a photo of a minor. Contributing requires confirming you are 18 or older and that the photo is of you. Every submitted photo is also run through an automated apparent-age estimate: one that reads as clearly under 18 is rejected and the image is deleted rather than stored, and one near the line is reviewed by a person before it becomes visible. The estimate can be wrong in both directions, so it errs toward caution.

If you believe a child has used RealSmile, or that a photo of someone under 18 has been submitted, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of RealSmile after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or concerns, contact us at hello@realsmile.online.