Privacy & face data

Your face photos

Never uploaded.The face scan runs inside your browser, on your own phone or computer. The photo is analysed there and kept only in that browser's storage so you can compare before and after. Delete it any time in Settings, or by clearing the site's data. Rhune's servers never receive it, and it is never used for advertising or anyone's training dataset. Before your first scan you are asked to agree to this face analysis; you can use everything else without it.

What we store with an account

• Email and a scrypt hash of your password (never the password itself), plus a sign-in session cookie.
• Your quiz answers and the routine settings derived from them (times, scan day).
• Your routine log — which steps you ticked off on which day.
• Scan scores — the numbers only: Skin Score, eleven zone scores, and the capture conditions (light, angle).
• Your shelf — product names and ingredient lists you add.
• Coach conversations. Your question plus your numbers (scores, streak, routine, shelf — no photo, no email) are sent to Anthropic's Claude API to write the answer. Anthropic does not train on this data.
• Label photos — if you photograph a product's ingredient list, that photo is sent to Anthropic's Claude API to transcribe the text, then discarded. Rhune doesn't keep it. Photograph the box, not yourself.
• Product usage events — which screens and steps were used, so we can tell whether Rhune is worth building further.

Without an account

• A random visitor id stored in your browser, so steps like "finished the quiz" can be counted once. It is not a fingerprint and is linked to an account only if you create one.
• A source tag — if you arrived through a link with a code (say, from a podcast), we record that code so we know which channels work.
• Visit statistics. Vercel Analytics counts visits without cookies. Google Analytics runs only after you allow it if you are in a region that requires consent — decline and it never loads.
• Waitlist email, if you joined it before accounts existed.

What we never collect

Face photos, payment details, advertising profiles. Nobody pays Rhune to recommend a product, and your data is never sold.

Where data lives

The database runs on Neon (Postgres, US region) through Vercel, which also hosts the site. Coach answers and label transcription come from Anthropic. Notifications reach us through Resend. Each processes data only to provide the service.

Your rights

Settings → Download my data gives you everything we store as one file. Settings → Delete everything removes your account and all of the above immediately. Without an account, or for a waitlist email, send one line to hello@rhune.app and we delete it, usually within a few days.