Privacy policy

Who is responsible

The data controller is Kontur Studio, —, 0000 København, Danmark · CVR — · kontakt@konturstudio.app.

If you have questions about your data, write to the address above. You can also complain to the Danish Data Protection Agency, datatilsynet.dk.

What we process

• Your photo. You upload it yourself and you choose which one.
• The 40 measurements we compute from it, and the 468 points they rest on.
• The report text and recommendations.
• Your email address and a hashed version of your password.
• Your purchases: what you paid for, and how many reports you have left.

A photo of a face is a special category

A face photo can identify you, and skin measurements can say something about your health. We therefore treat the photo under the rules that apply to sensitive data.

The basis is your consent, given when you upload. You can withdraw it at any time — see “What you can ask us for”.

We do not do face recognition. We measure distances and angles on the photo you sent, and we do not compare your face with anyone else’s or with any database.

Where the measurement happens

Measurement happens on our own server in the EU. The photo does not leave the server to be measured, and it is not sent to a language model. The report text is written from the numbers alone.

If you want an “after” image, we send the photo to an image service outside the EU (fal.ai, USA). That only happens if you tick the box, and we ask every time. Decline and you still get the full report — just without the “after” image.

The transfer uses the European Commission’s standard contractual clauses. The photo sits with the service briefly, and we pull the result down to our own server immediately. We cannot guarantee that US authority access matches EU standards — which is why the box is optional.

How long we keep it

Photos and measurements are kept for 3 years, after which the photos are deleted automatically. We keep them that long so you can track your own change: two measurements a year apart are only worth something if both photos still exist.

Deletion is not a cleanup someone has to remember. Every report carries an expiry date in the database, and a background process checks it continuously.

Your account and purchase records are kept while you have an account. Danish bookkeeping law requires us to keep the receipt itself for five years.

Who can see your photo

One person from our team reviews every report before you get it. That is the whole point of the product: a machine should not send you recommendations about your face without a human having looked at them.

That person sees your photo, the measurements and the text. What is changed, and by whom, is logged.

Beyond that: nobody. We do not sell data, and we do not use your photos to train models.

Processors

• fal.ai (USA) — only if you asked for an “after” image.
• Stripe — payment. We never see your card number.
• Our EU hosting provider — the server everything else runs on.

What you can ask us for

Write to kontakt@konturstudio.app. We answer within a month.

• To see everything we hold about you.
• To have your photos deleted. You can do this yourself in the app, and it happens within minutes. The measurements remain unless you ask otherwise.
• To have your entire account deleted.
• To withdraw your consent. This applies going forward.
• To receive your data in a machine-readable format.

This is not a medical assessment

We describe what is in the photo, not what is wrong with you. A skin condition, or any other health concern, belongs with a doctor. Nothing in the report replaces medical advice.