1. Controller
The data controller responsible for this app privacy policy is:
Yasu Labs Zingg
DUNS 481041120
Handelsregister Eintrag: CHE-287.810.568
Switzerland
info@yasulabs.com
2. What the iOS App Collects
- Portrait photos: standardized front and profile photos captured with the device camera.
- Clean photo records: background-removed visual records created from the captured photos.
- Subject identifiers: a name or pseudonym entered by the authorized clinic user.
- Account data: the staff account and clinic workspace used to sign in.
- Usage data: timestamps and record status needed to provide the service and maintain security.
2.1 Face Data
The iOS app collects face data only as portrait photographs and clean photo records for professional documentation by authorized clinic staff.
What face data we collect
- Portrait photographs of the face captured through the guided camera flow.
- Clean photo records generated from those photographs.
- We do not use face data for facial recognition, identity verification, advertising, or sale to data brokers.
How we use face data
- To create standardized photo records for the signed-in clinic workspace.
- To store records so authorized clinic users can open them later.
- To support before/after visual documentation inside the same clinic workspace.
- The iOS app does not provide measurements, ratings, advice, decisions, automated categories, or clinical decision support.
Sharing and storage
- Face data is not sold and is not shared with advertisers.
- Stored in Supabase private database and file storage with encrypted transport.
- Processed by RunPod temporarily to prepare clean photo records; RunPod does not retain images after processing completes.
- Hosted pages and app infrastructure are served through Vercel.
Retention
Records are retained while the clinic account remains active. Clinics may delete records. When an account is deleted in the iOS app, associated app data is deleted within 30 days.
3. Legal Basis
- Contract performance - to provide the private photo documentation service.
- Legitimate interests - to secure accounts, prevent abuse, and maintain audit logs.
- Clinic responsibility - the clinic is responsible for obtaining any required subject permission before capture.
4. Your Rights
Under applicable privacy laws, you may request access, correction, deletion, restriction, objection, or portability. Contact info@yasulabs.com.
5. Contact & Complaints
For privacy questions contact info@yasulabs.com. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.