1. Introduction
The Ultimate Profile ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our AI dating photo generation service.
2. Data Controller
The Ultimate Profile
Schlosstalstrasse 202
8408 Winterthur, Switzerland
Email: [email protected]
3. Data We Collect
We collect the following categories of personal data:
3.1 Account Information
- Name and email address
- Authentication data via Clerk
- Account preferences
3.2 Photos and Images
- Photos you upload for AI processing
- AI-generated images created for you
- Temporary processing data
3.3 Payment Information
- Transaction records (processed via Stripe)
- Subscription status
- We do NOT store credit card details
4. Traffic statistics and optional analytics
We use PostHog in the EU to measure website use and improve our service. Reports distinguish three tiers. “ALL” means eligible requests, excluding privacy objections and known bots; daily visitors are an estimate, not identified people.
Tier 0 – Server statistics
For HTML page requests, including visits without JavaScript or with an ad blocker, our server records the route and language, referral domain, campaign labels, country supplied by Cloudflare, broad device/browser/OS categories, response status and timing. No device storage or JavaScript is used. The IP address is processed transiently, truncated to /24 (IPv4) or /48 (IPv6), then combined with the user agent and host using HMAC-SHA256 and a secret that rotates at midnight UTC. Only the daily pseudonymous key leaves the collector. PostHog receives neither IP addresses nor raw user agents. Keys cannot link visits across days. Known bot requests are sampled at 10% and reported separately.
Tier 1 – Cookieless client statistics
Before a choice and after “Necessary only”, PostHog receives allowlisted aggregate page, consent-funnel and interaction events. Its SDK uses memory only: no analytics cookies, persistent device identifiers, person profiles, replay, heatmaps or feature flags. These counts cover only clients that run the collector.
Tier 2 – Analytics with consent
Under the regional model described below, we enable analytics cookies, persistent identifiers, account-linked product analytics, masked session replay, heatmaps, autocapture, web performance, feature flags and optional rating surveys. Photos, form contents and payment frames are blocked or masked. Copy contents are never captured.
Purpose, legal basis, retention and objection
Tiers 0 and 1 serve our legitimate interest in proportionate service measurement (GDPR Article 6(1)(f)); processing also follows the Swiss nFADP. Tier 2 relies on consent (Article 6(1)(a)) in opt-in regions, or legitimate interests (Article 6(1)(f)) under the regional information-and-opt-out model described below. Contract events, such as account creation, Identity Card saving, checkout, payment and render outcomes, are processed to perform the service (Article 6(1)(b)); they link to a PostHog person only with analytics consent.
Server and cookieless statistics are retained for 90 days; opt-in events for 14 months; replay for 30 days. Daily secrets are replaced at midnight UTC and never logged. Enable Global Privacy Control (GPC) or Do Not Track (DNT) to object to traffic collection. Both are honoured on the server and client. The existing cookie settings also let you withdraw analytics consent; withdrawal stops client statistics and sets a necessary objection preference for subsequent server requests. Refusing optional cookies does not itself disable aggregate statistics. Contact [email protected] to exercise your GDPR or Swiss data-protection rights.
5. How We Use Your Data
- Provide AI photo generation services
- Process payments and manage subscriptions
- Improve our algorithms and service quality
- Communicate about your account and orders
- Analyze website usage (with consent)
- Comply with legal obligations
6. Legal Basis for Processing
- Contract: To provide our services
- Consent: For analytics and marketing
- Legitimate interest: For security and fraud prevention
- Legal obligation: For tax and regulatory compliance
7. Data Sharing
- Clerk: Authentication services
- Stripe: Payment processing
- Convex: Database hosting
- PostHog: Analytics hosted in the EU
- AI service providers: Image generation
We do NOT sell your personal data to third parties.
8. Data Security
- Encrypted data transmission (HTTPS/TLS)
- Secure cloud storage with access controls
- Regular security audits
- Employee access restrictions
9. Data Retention
- Account data: Retained while your account is active, plus 30 days after deletion
- Uploaded photos: Deleted within 30 days of generation completion
- Generated images: Stored for as long as you maintain your account
- Analytics: session replays are deleted after 30 days; analytics events are stored in PostHog (EU) only as long as needed for the purposes above and are deleted on request
- Payment records: 7 years (legal requirement)
10. Your Rights (GDPR)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Restriction: Limit how we use your data
- Portability: Receive your data in a portable format
- Objection: Object to certain processing activities
- Withdraw consent: Revoke previously given consent
To exercise these rights, contact us at [email protected]
11. Cookies
- Necessary cookies: Authentication and security
- Analytics cookies: Understanding site usage (consent required)
- Preference cookies: Remembering your settings
For details, see our Cookie Policy.
12. International Transfers
Your data may be processed in countries outside Switzerland/EU. We ensure appropriate safeguards through Standard Contractual Clauses.
13. Children's Privacy
Our services are not intended for persons under 18. We do not knowingly collect data from minors.
14. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via email or website notice.
15. Contact Us
For privacy inquiries or to exercise your rights:
Email: [email protected]
Address: Schlosstalstrasse 202, 8408 Winterthur, Switzerland
You may also lodge a complaint with your local data protection authority.
Regional analytics preferences
We use your country, supplied by Cloudflare, to choose the analytics default. Our uncached location endpoint returns only country, Canadian province when available, and the regional model. We do not put location-dependent content in cached pages. The result is reused for the browser session.
Opt-in model. In the EU/EEA, United Kingdom, Brazil, China, South Korea, India, Turkey, Japan and Quebec, optional full analytics starts only after your consent. Canada without a reliable province signal, and unknown locations, also use opt-in. Before a choice or after an initial rejection, only the device-free server statistics and cookieless aggregate client statistics described above apply, on legitimate interests.
Implied model. In Switzerland, the United States, Canada outside Quebec, Australia, New Zealand, Singapore, Mexico, the United Arab Emirates, Israel and other countries outside the opt-in list, full analytics is enabled by default under our regional information-and-opt-out model, on legitimate interests. This includes persistent analytics cookies, product analytics and masked session replay. Open “Privacy choices” in the footer and turn Analytics off to object. This stops both full and anonymous client analytics and request statistics for subsequent visits from that browser. Marketing remains disabled until explicitly enabled.
Your explicit saved choice takes precedence over regional defaults. GPC and Do Not Track always stop client analytics and request statistics, everywhere, even after an earlier acceptance. Contractual business records remain separate and are linked to an analytics profile only while full analytics is enabled. Event reports identify the collection tier, country, regional model and whether full analytics came from a user choice or the regional default. Missing business-event location is labelled unknown. Regional defaults are reconsidered in a new browser session; explicit objections remain saved. Retention periods and recipients are the same as described above.
Affiliate links
Some articles contain clearly disclosed affiliate links. We may receive a commission if you register or buy through them, without an extra charge to you. We do not set affiliate tracking cookies or load partner tracking scripts on our pages. When you click, our redirect may add an anonymous daily count by partner, article, language and placement; we store no IP address, account identifier or visitor history in this counter and honor Global Privacy Control and Do Not Track. The link includes only the article, language and placement, never your email or account details. After you leave our site, the affiliate network or partner may process your data and set its own cookies under its own privacy policy and consent rules. Please review those policies before registering.
