1. Introduction
The Ultimate Profile ("we", "us", or "our") respects your privacy. This policy explains which personal data we process when you use our website and our AI dating photo service, why we process it, and what rights you have. It applies under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP).
2. Data Controller
Nico Jaroszewski, The Ultimate Profile
Schlosstalstrasse 202
8408 Winterthur, Switzerland
Email: info@theultimateprofile.com
3. Data We Collect
We collect the following categories of personal data:
3.1 Account Information
- Name and email address
- Sign-in data, managed by Clerk (including Google sign-in if you use it)
- Account settings and preferences
- Your credits, purchases and the photo sets you own
3.2 Photos and Images
- Photos you upload for your Identity Card or in the dashboard
- AI-generated images created for you
- For the free photo: your selfie, your email address and the generated photo
- For the free photo score: the photos you submit, used only for the analysis and not stored by us
3.3 Payment Information
- Payments are processed by Stripe; we never receive or store your full card number
- We keep transaction records, credit balances and subscription status
- If you save a card for faster checkout, we store only its brand and last four digits, plus a one-way hashed card identifier from Stripe that cannot be turned back into your card number. We use it only to prevent abuse of sign-up, referral and card-saving bonuses (each card earns a bonus once). You can remove a saved card at any time in Billing
4. Traffic statistics and optional analytics
We use PostHog in the EU to measure website use and improve our service. Reports distinguish three tiers. “ALL” means eligible requests, excluding privacy objections and known bots; daily visitors are an estimate, not identified people.
Tier 0 – Server statistics
For HTML page requests, including visits without JavaScript or with an ad blocker, our server records the route and language, referral domain, campaign labels, country supplied by Cloudflare, broad device/browser/OS categories, response status and timing. No device storage or JavaScript is used. The IP address is processed transiently, truncated to /24 (IPv4) or /48 (IPv6), then combined with the user agent and host using HMAC-SHA256 and a secret that rotates at midnight UTC. Only the daily pseudonymous key leaves the collector. PostHog receives neither IP addresses nor raw user agents. Keys cannot link visits across days. Known bot requests are sampled at 10% and reported separately.
Tier 1 – Cookieless client statistics
Before a choice and after “Necessary only”, PostHog receives allowlisted aggregate page, consent-funnel and interaction events. Its SDK uses memory only: no analytics cookies, persistent device identifiers, person profiles, replay, heatmaps or feature flags. These counts cover only clients that run the collector. In the same cookieless way, without cookies or a profile, we receive technical error reports (error type, a scrubbed message and the code location, at most five per page view) so we can fix bugs.
Tier 2 – Analytics with consent
Under the regional model described below, we enable analytics cookies, persistent identifiers, account-linked product analytics, masked session replay, heatmaps, autocapture, web performance, feature flags and optional rating surveys. Photos, form contents and payment frames are blocked or masked. Copy contents are never captured.
Purpose, legal basis, retention and objection
Tiers 0 and 1 serve our legitimate interest in proportionate service measurement (GDPR Article 6(1)(f)); processing also follows the Swiss nFADP. Tier 2 relies on consent (Article 6(1)(a)) in opt-in regions, or legitimate interests (Article 6(1)(f)) under the regional information-and-opt-out model described below. Contract events, such as account creation, Identity Card saving, checkout, payment and render outcomes, are processed to perform the service (Article 6(1)(b)); they link to a PostHog person only with analytics consent.
Server and cookieless statistics are retained for 90 days; opt-in events for 14 months; replay for 30 days. Daily secrets are replaced at midnight UTC and never logged. Enable Global Privacy Control (GPC) or Do Not Track (DNT) to object to traffic collection. Both are honoured on the server and client. The existing cookie settings also let you withdraw analytics consent; withdrawal stops client statistics and sets a necessary objection preference for subsequent server requests. Refusing optional cookies does not itself disable aggregate statistics. Contact info@theultimateprofile.com to exercise your GDPR or Swiss data-protection rights.
5. How We Use Your Data
- Provide the service: create your Identity Card, generate and deliver your photos, and run the free tools
- Process payments, credits and subscriptions
- Send service emails, such as your free photo, order confirmations and account messages
- With your consent, send tips and offers by email; every email contains an unsubscribe link
- Keep the service secure and prevent abuse (bot protection, rate limits, fraud prevention)
- Measure and improve the website (see section 4)
- Meet legal obligations, such as accounting
We do not use your photos to train AI models. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
6. Legal Basis for Processing
- Contract (GDPR Article 6(1)(b)): to provide the service you order or request
- Consent (Article 6(1)(a)): for marketing emails and, in opt-in regions, full analytics; you can withdraw consent at any time
- Legitimate interests (Article 6(1)(f)): security, abuse prevention and the analytics described in section 4
- Legal obligation (Article 6(1)(c)): accounting and tax records
7. Data Sharing
- Clerk: sign-in and account management
- Stripe: payment processing
- Convex: database and file storage
- Hostinger: server hosting for our website and our mailbox (contact form and replies)
- Cloudflare: content delivery, security, bot protection (Turnstile) and request statistics
- Resend: sending emails
- PostHog: Analytics hosted in the EU
- Google (Google Analytics 4): website statistics as part of full analytics, see 7.2
- Google (Google Identity Services): the optional "Sign in with Google" prompt (One Tap) on articles and tools, see 7.3
- AI providers: Kie.ai and OpenRouter, see 7.1
We do NOT sell your personal data to third parties.
7.1 AI processing and providers
To create your photos and run our AI features, we send the data needed for each request to these providers:
- Kie.ai creates photo renders (shop sets and the free photo). It receives links to the photos needed for that render and the render instructions. Depending on the model you choose, the image is made by Google (Nano Banana 2.1, the default), OpenAI (GPT Image 2.5 Sunburst) or ByteDance (Seedream 5.0 Pro).
- OpenRouter forwards text and photo-analysis requests to AI models: by default DeepSeek V4.1 Flash for the free words tool, the photo score, the assistant, profile prompt answers and learning summaries, or another model you select in the assistant (from OpenAI, Anthropic or Moonshot AI). It also forwards image requests from the dashboard studio. For text and photo analysis we only allow providers that, according to OpenRouter, do not collect request data. Requests from the free words tool and the photo score go only to providers with zero data retention.
We send only the photos and text a feature needs, together with our instructions. We do not add your name, email address or payment details to AI requests. We use these providers to perform the service you request (GDPR Article 6(1)(b)); for the photo score, you also confirm before upload that you may submit the photos. Providers may process data outside Switzerland and the EU, for example in the United States (see section 12). AI results can be inaccurate, so check generated text and photos before you use them.
7.2 Google Analytics
As part of full analytics (Tier 2 in section 4) we also use Google Analytics 4, provided by Google Ireland Limited and Google LLC, to understand how visitors use the website. It follows the same regional model: in opt-in regions it loads only after your consent; elsewhere it is on by default until you turn Analytics off under "Privacy choices". Global Privacy Control and Do Not Track stop it, and it never loads on free-photo access pages. Google may process this data in the United States. Google Analytics data is kept for up to 14 months.
7.3 Sign in with Google (One Tap)
On blog articles, Hinge prompt pages, tools and guides we may show signed-out visitors Google's "Sign in with Google" prompt (Google One Tap), provided by Google Ireland Limited and Google LLC through Google Identity Services. In opt-in regions it loads only after you accept Marketing cookies; elsewhere it loads unless you turn Marketing off, and never with Global Privacy Control or Do Not Track. Once it loads, Google receives technical data such as your IP address, browser details and the page address, and can tell whether you are signed in to a Google account. If you choose an account, Google passes your name, email address and profile picture to Clerk, which creates your account or signs you in (GDPR Article 6(1)(b)). If you close the prompt, we do not show it again for 7 days. Google may process this data in the United States.
8. Data Security
- Encrypted connections (HTTPS/TLS)
- Access-controlled database and file storage
- Bot protection and rate limits on public forms and AI tools
- Card details entered directly in Stripe's payment form, never on our servers
- Access to personal data limited to what is needed to run the service
9. Data Retention
- Account data: kept while your account exists. When you delete your account in Settings, we immediately delete your account, your photos and Identity Card, your generated images, your free photo and your history, and then your Clerk login
- Identity Card and uploaded photos: kept so you can create new photos, until you delete them or your account
- Generated images: kept while you have your account, so you can download them again
- Free photo: your selfie is deleted 30 days after upload; the generated photo is kept so you can download it again, until you delete your account or ask us to delete it
- Free photo score and words tool: your photos and text are not stored by us
- Analytics: session replays are deleted after 30 days; analytics events are stored in PostHog (EU) only as long as needed for the purposes above and are deleted on request
- Emails: marketing emails until you unsubscribe or withdraw consent. We keep proof of your consent, a record of emails sent and, after you unsubscribe or delete your account, your email address on a do-not-email list so we never email you again
- Payment and accounting records: 10 years, as required by Swiss law (Code of Obligations, Article 958f); payment records are also kept by Stripe
10. Your Rights
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Restriction: Limit how we use your data
- Portability: Receive your data in a portable format
- Objection: Object to processing based on legitimate interests, including analytics
- Withdraw consent: Revoke a consent at any time, with effect for the future
You can delete your account yourself under Settings. To exercise any other right, contact us at info@theultimateprofile.com
11. Cookies
- Necessary cookies: Authentication and security
- Analytics cookies: Understanding site usage (consent required)
- Preference cookies: Remembering your settings
For details, see our Cookie Policy.
12. International Transfers
Some providers process data outside Switzerland and the EU, in particular in the United States. Where a country does not offer an adequate level of data protection, the transfer relies on the safeguards in the provider's data processing terms, such as the Standard Contractual Clauses, or on the provider's certification under the EU-U.S. and Swiss-U.S. Data Privacy Framework.
13. Children's Privacy
Our services are not intended for persons under 18. We do not knowingly collect data from minors.
14. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via email or website notice.
15. Contact Us
For privacy inquiries or to exercise your rights:
Email: info@theultimateprofile.com
Address: Schlosstalstrasse 202, 8408 Winterthur, Switzerland
You may also lodge a complaint with your local data protection authority.
Regional analytics preferences
We use your country, supplied by Cloudflare, to choose the analytics default. Our uncached location endpoint returns only country, Canadian province when available, and the regional model. We do not put location-dependent content in cached pages. The result is reused for the browser session.
Opt-in model. In the EU/EEA, United Kingdom, Brazil, China, South Korea, India, Turkey, Japan and Quebec, optional full analytics starts only after your consent. Canada without a reliable province signal, and unknown locations, also use opt-in. Before a choice or after an initial rejection, only the device-free server statistics and cookieless aggregate client statistics described above apply, on legitimate interests.
Implied model. In Switzerland, the United States, Canada outside Quebec, Australia, New Zealand, Singapore, Mexico, the United Arab Emirates, Israel and other countries outside the opt-in list, full analytics is enabled by default under our regional information-and-opt-out model, on legitimate interests. This includes persistent analytics cookies, product analytics and masked session replay. Open “Privacy choices” in the footer and turn Analytics off to object. This stops both full and anonymous client analytics and request statistics for subsequent visits from that browser. Marketing remains disabled until explicitly enabled.
Your explicit saved choice takes precedence over regional defaults. GPC and Do Not Track always stop client analytics and request statistics, everywhere, even after an earlier acceptance. Contractual business records remain separate and are linked to an analytics profile only while full analytics is enabled. Event reports identify the collection tier, country, regional model and whether full analytics came from a user choice or the regional default. Missing business-event location is labelled unknown. Regional defaults are reconsidered in a new browser session; explicit objections remain saved. Retention periods and recipients are the same as described above.
Affiliate links
Some articles contain clearly disclosed affiliate links. We may receive a commission if you register or buy through them, without an extra charge to you. We do not set affiliate tracking cookies or load partner tracking scripts on our pages. When you click, our redirect may add an anonymous daily count by partner, article, language and placement; we store no IP address, account identifier or visitor history in this counter and honor Global Privacy Control and Do Not Track. The link includes only the article, language and placement, never your email or account details. After you leave our site, the affiliate network or partner may process your data and set its own cookies under its own privacy policy and consent rules. Please review those policies before registering.
