Privacy Policy | Anti Aging Care

This policy covers both the Anti Aging Care website and the Cera: Skin Age & Routine mobile app. The section immediately below explains how the Cera app handles your photos and face data; the remaining sections cover our website and general practices.

Cera App — TrueDepth API, Face Data & AI Analysis

The Cera app estimates visible skin characteristics (your “skin age” and cosmetic concern scores) from three guided photos: front, left cheek, and right cheek. We want to be completely clear about how this works.

Information collected using the TrueDepth API

On supported devices, Cera uses Apple's public ARKit face tracking, which uses the TrueDepth camera. During the guided capture session, ARKit temporarily provides (1) a coarse three-dimensional face mesh and (2) head-pose measurements: yaw, pitch, roll, and horizontal position. Cera also obtains the camera image to create the three ordinary color photographs you choose to capture. Apple's Vision framework checks only whether a sufficiently visible face is present in each photo. Cera does not access Face ID enrollment or authentication data, facial identity, or a stored Face ID template. It does not derive or create a faceprint, facial-recognition template, or persistent biometric identifier.

Purpose and use

The temporary mesh and pose values are used only on the device and in real time to draw the alignment guide, confirm that the face is centered, distinguish the front and two opposite cheek angles, and trigger each requested photo. They are not used to identify or authenticate anyone, profile a user, track a user, or for advertising. Nothing is captured in the background.

After you explicitly agree, the three captured photos and your quiz answers (such as age, skin type, and skincare concerns) are used only to estimate cosmetic skin characteristics and generate the requested skincare routine. The TrueDepth mesh and pose values are not part of the analysis request.

Sharing and processing locations

The TrueDepth mesh and pose measurements remain on the user's Apple device and are never disclosed to us or any third party. To generate the requested analysis, the three photos and quiz answers travel over an encrypted connection through our authenticated Supabase Edge Function, which validates the signed-in user, enforces request limits, and forwards the request without writing the photos to a database, file store, or application log. The request is then processed by OpenAI, L.L.C. in the United States solely to return the skin estimate.

OpenAI does not use API data to train its models by default. Under OpenAI's API data controls, request content may be retained for up to 30 days for abuse and misuse monitoring and is then deleted, unless law requires longer retention. Apart from this requested processing by Supabase and OpenAI, Cera does not share face photos or face data. We never sell them, use them for advertising, or provide them to data brokers.

Storage, retention, and deletion

The TrueDepth mesh and pose values exist only temporarily in memory during the active capture session. Cera does not write them to disk, persist them after the session, upload them, sync them to an account, or retain them on a server.

The three full-size photos are held in the app's process memory for the current scan and are cleared when the analysis request finishes, whether it succeeds or fails. Supabase forwards them transiently and does not store them. Cera stores only the resulting numeric skin estimates and routine in the user's private account and on the device until the user chooses “Start over” or deletes the account.

One optional exception is controlled separately by the user: if the user enables progress-photo thumbnails for a Home Screen widget, Cera saves a metadata-stripped front-photo thumbnail (maximum 480 pixels) only in Apple's protected local App Group container. These thumbnails are never uploaded, are excluded from device backup, are limited to six, and are automatically deleted after 90 days. The user can delete them at any time from Cera's Profile screen or disable this sharing for future scans.

Your consent and choices

Guided capture and AI analysis are optional. Before the first analysis, Cera identifies OpenAI by name, explains exactly what will be sent, and requires an affirmative tap on “Agree.” A user can decline and no photo is sent. AI consent and optional local progress thumbnails have separate controls. The Profile screen provides controls to delete local thumbnails, start over, or permanently delete the cloud account. Questions or deletion requests may also be sent to support@antiagingcare.org.

Cera Optional Device-Local Features

Environmental context: With permission, Cera requests a one-time approximate location to retrieve UV, humidity, sunrise/sunset, and available air-quality context. Exact coordinates are discarded and never synced to your account.
Cycle context: Manually entered cycle dates and notes stay in protected storage on your device and are not sent to AI, analytics, advertising providers, or your cloud account. Cycle guidance is an estimate and is not intended for contraception, fertility planning, diagnosis, or treatment.
Product and restock tracking: Opened dates, expected product lifetime, and reminders are used to provide approximate restock notices. Cera does not infer purchases, process payments, or guarantee depletion dates.
Widgets:Widgets receive only the minimum display-ready information through Apple's local App Group. Photo-comparison and cycle widgets are Home Screen-only; Lock Screen variants remain redacted.

1. Information We Collect

We collect minimal information to provide and improve our services:

Usage Data: Pages visited, time spent, referral source, browser type, and device information — collected automatically through analytics tools.
Email Address: Only if you voluntarily subscribe to our newsletter.
Cookies: Small text files stored on your device to remember preferences and analyze site traffic.

2. How We Use Your Information

To operate, maintain, and improve the website.
To send newsletters you have opted into (you may unsubscribe at any time).
To analyze aggregate usage trends and optimize content.
To detect and prevent technical issues or abuse.

3. Third-Party Services

We may use the following third-party services that collect data on our behalf:

OpenAI — processes the selfie and quiz answers you submit in the Cera app, only after your explicit consent, to generate your skin analysis (see the Cera App section above).
Microsoft Clarity — session recording and heatmaps to understand how users interact with our site and, only after mobile analytics consent, the Cera app. Sensitive health, photo, cycle, location, and inventory content is masked and is not added to analytics events.
Supabase — provides authentication, private account sync, account deletion, and the authenticated proxy used for requested AI analysis.
Superwall and Apple — display subscription offers and process purchase status through the App Store.
Apple Weather — provides weather context after location permission. Required Apple Weather attribution appears in the app.
Newsletter Providers — to manage email subscriptions and deliver newsletters.

These providers have their own privacy policies governing how they handle your data. We do not sell your personal information to third parties.

4. Cookies

Our site uses cookies for analytics and functionality. You can control cookies through your browser settings. Disabling cookies may affect your experience on the site.

5. Data Retention

We retain usage data in anonymized/aggregated form. If you subscribe to our newsletter, we retain your email address until you unsubscribe. You may request deletion of your data at any time by contacting us.

6. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Request correction or deletion of your data.
Opt out of marketing communications.
Object to certain types of data processing.

7. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

8. Security

We take reasonable measures to protect information collected through our site. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with a revised “last updated” date. Continued use of the site constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy or your data, please reach out to us through the contact information on our About page.