What we collect and why
| Category | Examples | Purpose and use |
|---|---|---|
| Biometric data | Your front photo and, for a $59 or $119 report, your 90° side photo; the 478 landmark points measured on them | Measuring your facial proportions for the report and renders you order; if you tick the separate "Improving CEVO" box, testing and training CEVO's own measurement models, using only data uploaded for a paid report (it stays on CEVO's servers; free-scan photos are never used for this) |
| Bodily measurements | Facial ratios and angles; your body-fat estimate (a slider from 8% to 30%), if you give one; the soft-tissue estimate in millimetres worked out from it | Comparing your proportions with reference ranges; estimating the soft tissue over your facial bones for your analysis; if you tick the separate "Improving CEVO" box, testing and training CEVO's own measurement models, using only data uploaded for a paid report (it stays on CEVO's servers; free-scan photos are never used for this) |
| Inferences | The facial balance breakdown (in every tier), report findings, Layer 1 non-surgical and Layer 2 structural and surgical simulations with the Vector Shift Map, and, in the $59 and $119 reports, the Biological Facial Age Index | Writing your report and making the simulations and renders you ordered |
| Service use | That you unlocked your free readout (with the goal and report tier you picked), signed up, started a scan or bought a report, with the amount and currency; where visit measurement is on (in the United States unless you switch it off or send Global Privacy Control), the steps of the site you reached and where your visits came from, recorded with a visitor ID and linked to your email once you unlock your free readout or sign in | Running your account and orders; seeing how visitors move through the site and which ads, links and partners bring them, on CEVO's own server only; if you came from a Google ad and have not switched Google Ads measurement off, telling Google Ads that you unlocked your free readout and, if you pay for a report, the amount. We treat these as consumer health data because they can show that you sought CEVO's analysis |
If you choose Continue on your phone, your answers are sent to your phone and the photo you take there is sent back to your computer through CEVO's server, end-to-end encrypted so CEVO cannot see them, held in memory only and deleted once delivered or after 30 minutes. Once the photo arrives, your computer keeps a private copy of it with CEVO for up to 90 days, like every scan photo.
Where it comes from
- From you: your photos, your questionnaire answers (saved on CEVO's server as you give them, also if you stop before the end, and kept up to 25 months) and the email you give.
- From Apple or Google, when you choose to sign in with them: your verified email address and, from Google, your name if present.
- From CEVO's own processing: landmarks, measurements and report findings calculated from what you gave us.
- From your use of CEVO: our own records of your sign-up, scans and purchases, and where visit measurement is on, of the steps you reached and the links you arrived from.
Who we share it with
We share consumer health data only with the recipients below. Hetzner, Cloudflare, Stripe, Resend, Anthropic and fal.ai are processors, working under contract only to provide what you ordered, and the reviewer is part of CEVO's own team; sending your measurements to the report writer has its own consent box, and your photos go to fal.ai only to make the renders in a $59 or $119 report, under your face-geometry consent. Google is a separate company that uses the conversions it receives for its own ad measurement. Meta advertising tools (the Meta pixel and Conversions API) are not in use yet. Before we turn them on, we will update this policy.
| Recipient | Categories shared | Why |
|---|---|---|
| Hetzner Online GmbH, Helsinki, Finland | All four categories | Hosting and storage |
| Cloudflare, Inc. (US and global; R2 storage in Western Europe) | Your IP address and the pages you request. In its R2 storage, encrypted copies of your paid photos, their landmark records and renders and of our database backups, which it cannot read: they are encrypted on CEVO's server before upload and the keys stay there | Delivering the site, blocking automated traffic and storing encrypted files |
| Stripe (US and Ireland) | Service use only: that you bought a report or add-on, the amount, your name, email and card details. Never photos, face geometry, measurements, answers or report contents | Taking payment |
| Resend (US) | Service use only: your email address, the emails we send you (sign-in, receipts, report ready), and your address, with your name if Google provided it, as a contact in our scan-leads list. Never photos, face geometry, measurements, answers or report contents | Sending the emails you need, and product email only if you opted in |
| Anthropic, PBC | Bodily measurements and inferences. No photos, name or email. Anthropic deletes what it receives within 30 days, except content its safety systems flag, which it may keep for up to 2 years, and may not train on it | Writing your report text |
| Features & Labels, Inc. (fal.ai) | Your front photo, and side photo if a render needs it, and a short description of each style; never your name or email. It uses them only to make the images, may not train on them, and deletes them under its data processing terms | Making the renders in your $59 or $119 report |
| A trained CEVO team member bound by a confidentiality agreement | Reports, photos and renders (renders with no name or email), inside CEVO's own tool | Checking your report and renders before you see them |
| Google LLC (Google Ads) | Service use only, and only if you came from a Google ad: that you unlocked your free readout, sent once as a sign-up with the ad's click ID (gclid, gbraid or wbraid), the time, a fixed value of 5.00 USD and a random transaction ID; if you pay for a report, one more with the click ID, the amount paid in USD, the time and a transaction ID. Never your email, name, photos, face geometry, measurements, answers, goal, tier or report contents | Measuring our ads, unless you switch it off in Cookie settings or send a Global Privacy Control signal |
If you choose Sign in with Apple or Continue with Google, you sign in in their own window, so Apple or Google learns that you signed in to CEVO. We send them nothing else.
Fideo LLC has no affiliated companies, so no affiliate receives this data. We never sell consumer health data.
Under Washington's My Health My Data Act, telling Google Ads that you unlocked your free readout or paid for a report after clicking one of its ads counts as sharing consumer health data. Visitors in the United States see no cookie banner: this measurement is on until you switch off "Measure Google ads" in Cookie settings, in the footer of the homepage and the scan page and at the top of the questionnaire, and a Global Privacy Control signal switches it off automatically. If you switch it off, send Global Privacy Control, or did not come from a Google ad, Google receives nothing about you. Switching it off cancels a conversion not yet sent, and nothing is sent from then on.
Your rights
- Confirm and access. Ask whether we hold your consumer health data, get a copy, and get a list of every third party and affiliate we shared it with, with their contact details.
- Withdraw consent. Stop collection or sharing at any time by emailing privacy@cevolab.com.
- Delete. Have it deleted. We delete it from live systems and from our providers, including fal.ai, within 30 days. Copies in our encrypted database backups are gone within 30 days, when those backups expire.
Email privacy@cevolab.com to get a copy of your data or have it deleted, visit records linked to your email included. We do it within 30 days. We confirm it is you through your sign-in or a code to your email. We answer within 30 days. If we need more time, we tell you within those 30 days and take at most 45 more. We do not charge for requests and do not treat you differently for making one.
Appeals
If we refuse a request, reply to our answer with the word "Appeal", or email privacy@cevolab.com. Someone who did not make the first decision reviews it, and we answer within 45 days with our reasons. If we still refuse, you can complain to the Washington Attorney General.
Contact
- Company
- Fideo LLC, a Wyoming limited liability company, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA
- privacy@cevolab.com