Raw facial images are retained for 3 years from capture. They are securely deleted from primary storage, and cryptographic erasure is applied to backups within 90 days.
Derived biometric metrics (like skin scores and analysis data) are kept for up to 3 years from your last account activity, or until you delete your scan history or close your account. These are removed via logical deletion, index scrubbing, and purged from analytics systems.
If you withdraw consent or request deletion earlier, we’ll complete the process within 45 days (or 30 days for Illinois residents).