Privacy Policy
Effective 29 October 2026
ManMax ("we", "us") is a grooming, skincare and lifestyle app for men. This policy explains what we collect, why, who processes it for us, how long we keep it and how you can delete it. Questions: contact@nestedpie.com.
- Face photos you scan are deleted automatically after 30 days. Your results stay until you delete them.
- Photos are analysed by our AI provider only to produce your result. They are not used to train AI models.
- We never send your photos or scores to analytics or advertising partners.
- We don't sell your personal data.
- You can delete your photos or your whole account at any time in the app: Profile → Photos & data.
1. What we collect
| Data | Why |
|---|---|
| Account ID (anonymous by default; your email and name if you sign in with Google or Apple) | To keep your plan, scans and subscription on your account and across phones. |
| Birth year, goals and reminder times you choose in onboarding | Age check (AI scans are for adults 18+), to shape your plan and to send reminders at your times. |
| Face photos you choose to scan (front, left, right) and progress photos | To analyse your face shape, skin and grooming and to show your progress. On-device face-shape analysis never leaves your phone; AI scans upload the photos. |
| Scan results, plan, streaks and completed tasks | To show your results and personalised routine. |
| Messages with the AI coach and a short summary the coach remembers | To answer your questions with the context of your scan and plan. You can delete the chat at any time ("New chat"). |
| Purchase and subscription status | To unlock ManMax Pro. Payments are handled by Apple or Google; we never see your card details. |
| Support messages and the email you give us | To answer you. |
| Device and usage data: app version, device model, OS, country, time zone, app events (for example "scan completed"), crash reports, push notification token, advertising ID (only with your permission on iOS) | To fix bugs, understand which features are used, send the notifications you asked for, and measure which ads brought people to the app. |
2. Who processes data for us
We use these service providers. Each processes data only to provide its service to us.
| Provider | Purpose | Data |
|---|---|---|
| Google Firebase (Auth, Firestore, Cloud Functions, Analytics, Crashlytics, Cloud Messaging, App Check, Remote Config) | Accounts, database, server logic, analytics, crash reports, notifications, abuse prevention | Account ID, profile, results, plan, coach chats, usage events, crash reports, push token |
| Cloudflare R2 | Photo storage | Scan and progress photos |
| OpenAI | AI scan analysis and AI coach replies | Scan photos and the scan context; coach messages with your goals and plan. Not used to train models. |
| RevenueCat | Subscription management | Account ID, purchase history |
| AppsFlyer | Install attribution (which ad or link brought you) | Device and install data, advertising ID where allowed, account ID |
| Resend | Delivering support messages to our inbox | Your support message and email |
| Apple App Store / Google Play | Payments and app distribution | Governed by their own privacy policies |
Our servers are in Google Cloud (Mumbai, India region). Providers may process data in other countries, including the United States, under their standard data-protection terms.
3. How long we keep it
- Scan photos: deleted automatically 30 days after upload.
- Progress photos, results, plan and coach chats: until you delete them or your account.
- Support messages: until you delete your account.
- Analytics and crash data: kept by Firebase for up to 14 months.
- Subscription records: as long as needed for billing, tax and legal obligations.
4. Your choices and rights
- Delete photos: Profile → Photos & data → Delete all scan photos / progress photos.
- Delete your account: Profile → Photos & data → Delete account. This removes your profile, scans, photos, plan, coach chats and support messages right away. An App Store or Google Play subscription must be cancelled separately in your store settings. Can't open the app? Email us from the address on your account and we'll delete it.
- Notifications: turn reminders off in Profile → Reminders or in your phone settings.
- Tracking (iOS): you can refuse the tracking prompt or change it in Settings → Privacy → Tracking.
- Depending on where you live (for example the EU, UK or California) you may have the right to access, correct, export or delete your data, or object to some processing. Email us and we'll respond within 30 days.
5. Face data
ManMax does not use face photos to identify you, and does not create a face template for recognition. Photos are used only to produce the analysis you asked for, then deleted after 30 days. Where the law (for example Illinois BIPA or GDPR special categories) requires consent for processing facial images, we ask for it before your first AI scan and you can withdraw it by deleting your photos.
6. Children
ManMax is not for children under 13, and AI face scans are only for adults 18+. Younger users can read the Learn guides but cannot scan. If you believe a child has given us personal data, contact us and we will delete it.
7. Security
Data is encrypted in transit and at rest. Photos are private and only reachable through short-lived links for your own account. No method is perfectly secure, but we limit access to what's needed to run the service.
8. Changes
We'll update this page when our practices change and show the new effective date. For significant changes we'll also tell you in the app.