Privacy Policy

Last updated: February 2026

Umog (“we,” “our,” or “us”) respects your privacy. This policy explains what data we collect, how we use it, and how we protect it—including detailed information about face photos you upload in the app and the third-party services we use (such as Google Gemini, Railway, and fal.ai).

Data Collection, Use, and Third-Party AI (App Store Guidelines 5.1.1 & 5.1.2)

In line with Apple’s App Store requirements for data collection and use:

• What data we send: When you use face analysis, scoring, or photo-generation features, we send only the data necessary for that feature: your uploaded photo(s) (front/side face images, or full-body/reference images for generation), and optionally the gender you select. We do not send your name, email, or other identifiers to third-party AI services.
• Who we send it to: Your images and optional gender are sent to (1) our backend hosted on Railway; (2) Google Gemini (Google AI) for attractiveness/PSL-style scoring; and (3) fal.ai for AI image generation (e.g., “Chad” version, dating photos). Each is identified in Section 2 below with links to their privacy terms.
• Your permission: We obtain your permission before sharing your personal data with any third-party AI service. The first time you are about to use a feature that sends your photo (face rating, breakdown, or image generation), the app shows a clear notice that your photo will be sent to our servers and to third-party AI (Gemini and fal.ai), with a “Learn more” link to this policy. You must tap “Continue” to give permission; you can tap “Not now” to decline. We do not send your data until you have tapped “Continue.” You can decline by not continuing.
• Third-party protection: We require that any third party we share data with provides the same or equal protection for your data. Railway, Google (Gemini), and fal.ai each provide privacy policies and/or data processing terms that govern their handling of your data; we have linked them in this policy. We do not use your photos to train AI models; they are used only to fulfill your request and are not retained on third-party systems after processing.

1. Information We Collect

1.1 Information you provide

• Face photos and optional gender. We collect this data when you voluntarily use the face analysis or photo-generation features in the Umog app: you upload one or more photos (e.g., front and/or side facial images, or full-body/reference images for generation) and may optionally select gender. We collect it at the time you submit the photo(s) and tap to run analysis or generation. See Section 2 below for exactly what is sent, who receives it, and all uses.
• Support and contact. If you contact us (e.g., via the website contact form or email), we collect the information you provide (name, email, message).

1.2 Information collected automatically

• Device and app usage. We may collect device type, OS version, app version, and general usage (e.g., that a request was made) to operate and improve the service. We do not build a detailed profile of your browsing history.
• Website. Our marketing website may use cookies or similar technologies for basic analytics or functionality. You can control cookies through your browser settings.

1.3 Subscription and payment

Payment and subscription management are handled by Apple (App Store). We do not store your payment card details. We may receive limited transaction or subscription status information from Apple to provide access to paid features.

2. How We Use Face Photos and Related Data (Detailed)

This section describes in detail what happens when you upload face photos in the Umog app.

2.1 What is collected when you upload your face

• Images. For face analysis, the app sends a front and a side photo of your face (as JPEG images) to our servers. For optional features (e.g., “Chad” version or dating photo generation), you may upload additional photos (e.g., full-body or reference images).
• Optional gender. You may optionally provide gender (Male/Female). If you do not, our backend may infer it from the image for analysis purposes only.

2.2 Where your face data is sent and how it is used

When we ask for your permission: The first time you are about to use a feature that sends your photo (e.g. face rating or image generation), the app shows a one-time notice that your photo will be sent to our servers and to third-party AI (Gemini and fal.ai). You must tap “Continue” to give permission; if you tap “Not now,” we do not send your data. We do not send any personal data to third-party AI until you have given permission in this way.

Your photos are processed in real time to provide analysis and, if you use them, generative features. We do not use your face images for training our own or third-party AI models. All uses of your face data are: (1) to generate your attractiveness/PSL score and breakdown, (2) to generate optional “Chad”-style or dating profile images when you request them, and (3) to operate and improve our service (e.g., processing on our servers). The following parties receive or process your images, and each provides the same or equal protection for your data under their respective policies:

• Our backend (Railway). Our analysis and image-generation APIs are hosted on Railway (railway.app). When you run a face analysis or use a photo-based feature, your images are sent over HTTPS to our backend on Railway. The backend performs processing (e.g., face detection, geometric measurements) and may forward images to the services below as needed. Railway acts as our infrastructure provider; their processing is under our instructions. Data in transit is encrypted. We do not permanently store your face photos on Railway after the request is completed; they are processed and then discarded from server memory. Railway’s terms and privacy practices apply: railway.app/legal.
• Google Gemini (Google AI). To provide our attractiveness/PSL-style scoring, we use Google’s Gemini API (e.g., Gemini 2.0 Flash). Your front face image is sent to Google’s servers so the model can analyze it and return a numeric score. Google processes the image according to their Privacy Policy and Gemini API terms. We do not use Gemini to train Google’s models on your photos; usage is for real-time inference only. If the Gemini API is unavailable, we may use an alternative on-device or server-based scoring method (e.g., ONNX-based model) that does not send your image to Google.
• fal.ai. For features such as “Chad” version generation or dating profile photo generation, we use fal.ai (fal.ai) and their FLUX-based image models. Your uploaded images are temporarily sent to fal.ai (including via their storage/upload APIs) so they can generate the requested image. fal.ai processes data according to their privacy policy and data processing terms. We do not retain your photos on fal.ai after the request is complete.

2.3 Other processing on our backend

Our backend may use open-source or licensed components for face detection, landmark detection, or gender inference (e.g., MediaPipe, DeepFace, or similar) that run on our Railway servers. These process your images on our infrastructure and do not send them to third parties except as described above (Gemini, fal.ai).

2.4 Retention of face data

We do not keep your face photos in long-term storage. They are processed to produce your results (scores, advice, or generated images) and then discarded from our servers. Results (scores, text, generated images) may be returned to the app and stored locally on your device (e.g., in app history); we do not maintain a permanent server-side history of your face images.

3. Other Third-Party Services and Data Protection

We share personal data only with third parties that provide the same or equal protection for your data under their published privacy and/or data processing terms. The following third parties may receive data as described:

• Railway. Cloud infrastructure and hosting for our backend APIs. Your face images are sent to Railway only to process your request; they are not stored long-term. Railway’s legal and privacy terms apply.
• Google (Gemini). AI scoring of your front face image as described in Section 2.2. Google’s Privacy Policy and Gemini API terms apply; we do not allow use of your data to train their models.
• fal.ai. AI image generation (Chad version, dating photos) as described in Section 2.2. fal.ai’s privacy policy and data processing terms apply.
• Apple. App distribution, in-app purchases, and subscription management. Subject to Apple’s privacy policy and App Store terms.
• Analytics / hosting. Our website may use analytics or hosting providers (e.g., Vercel). These typically receive only standard web data (IP, user agent, pages visited), not your face photos.

4. How We Use Your Information (All Uses)

We use the information we collect only for the following purposes:

• To provide the service: To perform face analysis, attractiveness/PSL scoring, and AI-generated breakdowns and images (e.g., Chad version, dating photos). This includes sending your uploaded photos to our backend (Railway) and, when required for the feature, to Google Gemini (scoring) and/or fal.ai (image generation), as described in Section 2.
• To operate and improve the app and website: To maintain, debug, and improve the Umog app and website; we do not use your face photos for marketing or advertising.
• Support and legal: To respond to support requests, communicate with you, comply with law, and protect our rights and users’ safety.

We do not sell your personal data. We do not use your face images to train AI models. We do not use your data for purposes other than those listed above without your consent.

5. Data Retention and Security

We do not retain your face photos on our servers after processing. Other data (e.g., support emails) is kept only as long as needed for support or legal purposes. We use HTTPS and industry-standard measures to protect data in transit and on our systems. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, or to object to or restrict certain processing. To exercise these rights or ask questions about your data, contact us at the email below. You can also stop using the app and delete it; we do not retain your face images. For Apple-related data, use Apple’s privacy tools and settings.

7. Children

Our service is not directed at children under 13 (or higher age where required). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us so we can delete it.

8. International Transfers

Our backend and the third parties we use (e.g., Railway, Google, fal.ai) may be located outside your country. By using Umog, you consent to the transfer and processing of your data in those jurisdictions, subject to applicable law.

9. Changes to This Policy

We may update this privacy policy from time to time. We will post the updated policy on this page and update the “Last updated” date. Continued use of the app or website after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions, requests, or complaints, contact us at Contact or via the support email listed on our website or in the app.