LegitScopeScope and responsibility
This notice covers the marketing website and the associated mobile service. The data controller and contact details must be completed before public launch. Website browsing and uploading product photos in the app are different processing activities.
Information processed
The app may process account identifiers, sign-in details supplied by your provider, product photos, messages, assessment results, saved history, preferences and usage or security records. Guest use can still involve a device or session identifier and network data; it is not a promise of anonymous processing. The website does not include advertising analytics or a tracking pixel. Hosting may generate access and security logs.
Purposes and legal bases
Information is used to deliver requested assessments and account features, secure the service, manage usage limits and handle support or legal obligations. Depending on the activity and applicable law, processing may rely on contract necessity, legal obligations, legitimate interests or consent where required. A general acceptance of terms does not replace any legally required consent.
AI and service providers
Photos and relevant conversation context are sent by the backend to an AI service provider, currently Anthropic. Hosting, storage and sign-in providers may also process information needed for their functions. Authorised administrators may access scans and photos for service operation and support. Do not upload sensitive personal information or photos you lack permission to share.
International processing and retention
Provider locations, applicable transfer safeguards and the operational retention schedule must be verified before launch. Do not assume that all processing stays in your country or that a provider retains nothing. Retain data only as needed for the stated purpose and applicable obligations; account deletion is available subject to necessary exceptions.
Your rights
Depending on your jurisdiction, you may request access, correction, deletion, restriction, portability or objection, withdraw consent where applicable and complain to a competent authority. Requests require a working controller contact, published before launch. EU/UK and Turkish rights can differ. This notice will be updated when provider or service arrangements change.
Contact & controller
A verified operator identity and support channel will be published here before public launch. This preview website does not collect data requests or process account actions.