Privacy Policy.

Every photo you upload is stored privately and is only ever visible to:

• You.
• The Maximum care team members assigned to your account.
• Authorized administrators acting on a documented support request.

Photos are never public. Photos are never sold, rented, or shared with third parties for advertising. Access is enforced by row-level security at the database layer and by short-lived signed URLs that expire within an hour.

Your photos and your scan results are not used to train, fine-tune, or improve any AI or machine-learning model — ours or anyone else's. Photos sent to third-party AI providers for analysis are sent under zero-retention terms: the provider processes the request and discards the image. We do not grant any provider the right to retain, learn from, or reuse your photos.

If you opt in to Contribute anonymized data to improve scoring models in Settings, only numeric, de-identified scores (never raw photos) may be used to calibrate our internal scoring. This is off by default and can be turned off at any time.

• Account data — email, name, password hash, and authentication tokens.
• Profile data — date of birth, biological sex, ethnicity, concerns, and goals (optional, used to personalize analysis).
• Scan data — photos you upload and the scores, measurements, and recommendations generated from them.
• Messages — conversations with your care team.
• Operational data — limited logs needed to keep the service running and secure.

• Encrypted in transit (TLS 1.2+) and at rest.
• Row-level security on every database table.
• Photos served via short-lived signed URLs only.
• Care team and admin access is audited.

You can export every piece of data we hold about you at any time from Settings → Your data → Download. You can permanently delete your account, all photos, scans, analyses, recommendations, and messages from Settings → Delete account. Deletion is irreversible and removes your data from active systems within 24 hours and from backups within 30 days.

Questions about privacy? Email privacy@maximum.app.