Legal
Privacy policy
Effective 13 November 2026.
Summary
- Your face data stays on your iPhone. Depth data, 3D models and measurements are processed and stored only on your device, and camera images are used during the scan without being saved. We never receive any of them. Exports leave your phone only if you share them yourself.
- No account. Symmetry has no sign-up, no login and no servers of its own that collect your data.
- Ads are served by Google AdMob. Google may collect device and usage information to show and measure ads. Where the law requires it, you are asked for consent first, and you can decline tracking.
- Your face data is never given to the advertising SDK and is never used for advertising or to identify you.
Who we are
This policy explains how Symmetry: 3D Face Scanner (“Symmetry”, “the app”) handles information. The app is developed and published by Quinston Pimenta, an individual developer (“we”, “us”). For the purposes of data protection law, Quinston Pimenta is the data controller for the limited processing described in this policy. Google is an independent controller for the data it collects through its advertising services, as described below.
Contact: mail@quinston.com
This policy covers the iOS app and this website (symmetry.quinston.com). The website is a static site: it does not use cookies, analytics or tracking scripts. Our hosting provider may keep standard server logs (such as IP address and pages requested) for security and reliability.
Face data stays on your device
Symmetry uses the TrueDepth (Face ID) camera to capture depth data and camera images of your face while you scan. This data is used only to build a 3D model of your face and to calculate measurements such as your symmetry score, regional differences, pupil distance, face shape and dimensions.
- All processing happens on your iPhone.
- Camera images are used during the scan to find facial landmarks (such as your eyes and mouth) and are not saved.
- Face scans, depth data, 3D meshes and measurements are stored only on your device, in the app’s private storage.
- They are never uploaded to us or to anyone else, never shared with the advertising SDK, never used for advertising and never used to identify you.
- Symmetry does not use Face ID authentication and cannot access your Face ID data, which is managed by iOS in the Secure Enclave.
- Like other app data, your scans may be included in your iPhone’s backups (for example iCloud Backup or a backup on your computer) if you have backups turned on. Those backups are controlled by you and Apple, and we have no access to them.
Camera access is requested by iOS the first time you scan. You can change it any time in iPhone Settings › Symmetry › Camera.
Exports you choose to share
You can export a PDF report, PNG share cards, 3D models (USDZ, PLY or STL) and an MP4 timelapse. Exports are created on your iPhone and go only where you send them using the iOS share sheet, for example to Photos, Files, Messages or another app. We do not receive a copy. Once you share an export, the privacy practices of the app or person you shared it with apply.
Advertising (Google AdMob)
Symmetry is free and shows banner and full-screen (interstitial) ads served by Google AdMob, using the Google Mobile Ads SDK and Google’s User Messaging Platform (UMP). These Google SDKs run inside the app and may collect the following, as declared in the app’s App Store privacy labels:
| Data | Examples | Purpose |
|---|---|---|
| Device ID | The advertising identifier (IDFA), only if you allow tracking; otherwise app-scoped identifiers | Third-party advertising, frequency capping, fraud prevention |
| Product interaction | App launches, ad views, taps and clicks | Third-party advertising and ad measurement |
| Advertising data | Ads you have seen and how you interacted with them | Third-party advertising |
| Coarse location | Approximate location derived from your IP address | Third-party advertising, legal compliance (e.g. showing the right consent message) |
| Diagnostics | Crash data, performance data and other technical diagnostics from the ad SDK | Analytics and keeping ads working reliably |
This data is not linked to your identity by us: we do not have accounts, names or email addresses, and we do not combine ad data with anything else. Device ID, product interaction, advertising data and coarse location may be used by Google for tracking (as Apple defines it) if you allow it. We receive only aggregated ad reports from Google (for example, how many ads were shown) that do not identify you.
None of your face data, measurements or scans is ever shared with Google or any other advertising partner.
Learn how Google uses information from apps that use its services: policies.google.com/technologies/partner-sites. Google’s privacy policy is at policies.google.com/privacy.
Consent and tracking choices
Consent for personalised ads (EEA, UK and Switzerland)
If you are in the European Economic Area, the United Kingdom or Switzerland, the app shows Google’s consent message before ads are personalised. You can consent, decline, or manage your choices by purpose and vendor. If you decline, Google may still show non-personalised or limited ads, which use less data. If consent cannot be gathered (for example when you are offline), ads stay off unless you have made a choice before. Where Google’s User Messaging Platform supports US state privacy messages, a similar message may be shown in the relevant states.
You can change or withdraw your consent at any time: tap Privacy choices at the bottom of the app’s home screen to reopen the consent message. Your choice is stored only on your device, so we cannot change it for you. Whatever you chose, choosing “Ask App Not to Track” (below) stops your advertising identifier being shared.
Apple App Tracking Transparency
On first launch, iOS asks whether Symmetry may track you across apps and websites owned by other companies. If you choose “Ask App Not to Track”, the advertising identifier is not shared and ads are not based on tracking. You can change this at any time in iPhone Settings › Privacy & Security › Tracking. You can also reset or limit ad personalisation in Settings › Privacy & Security › Apple Advertising, and learn more from Apple.
Legal bases (EEA, UK and Switzerland)
- On-device face processing: the data never reaches us, so we do not process it as a controller. The app processes it locally at your request to provide the features you use.
- Personalised ads and storing or accessing information on your device for ads: your consent, which you can withdraw at any time as described in Consent and tracking choices.
- Non-personalised ads, fraud prevention and ad measurement: legitimate interests in funding a free app and keeping ads safe, or consent where required.
- Replying to your emails: legitimate interests in helping you, or taking steps you asked for.
Retention and deletion
- Scans and measurements stay on your device until you delete them. You can delete any scan in the app: on the home screen, touch and hold the scan, then choose Delete scan.
- Deleting the app deletes all of its data from your iPhone, though copies may remain in backups you made earlier until those backups are replaced or removed.
- Advertising data collected by Google is retained according to Google’s policies.
- Support emails you send us are kept only as long as needed to help you and for our records, and you can ask us to delete them.
Security
Your scans are stored in the app’s sandboxed storage on your iPhone, protected by iOS data protection and your device passcode. Because face data is never transmitted, there is no server copy that could be breached. Keep your iPhone protected with a passcode and up to date. No method of storage is perfectly secure, but we have designed Symmetry to keep the most sensitive data under your control.
International transfers
We do not transfer your face data anywhere. Data collected by Google for advertising may be processed in the United States and other countries where Google or its partners operate. Google relies on appropriate safeguards for such transfers, such as the EU–US Data Privacy Framework (and its UK and Swiss extensions) and Standard Contractual Clauses. If you email us, your message is handled by our email provider and may be stored outside your country.
Your rights (EEA, UK and Switzerland)
Under the GDPR, the UK GDPR and Swiss data protection law, you have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting earlier processing. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office).
Because your face data exists only on your device, you can access, export and delete it yourself in the app. We hold no other personal data about you, except emails you send us. For data collected by Google for advertising, you can also use Google’s tools described at Google’s partner-sites page. To make a request, email mail@quinston.com.
Your rights (California and other US states)
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another US state with a consumer privacy law, you may have the right to know what personal information is collected, to access and delete it, to correct it, and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. We will not discriminate against you for exercising these rights.
- Categories collected (by Google, through ads): identifiers (device IDs), internet or other electronic network activity (ad interactions), approximate geolocation, and diagnostics. We do not collect sensitive personal information such as biometric identifiers: face data stays on your device and is never used to identify you.
- Sale and sharing: we do not sell personal information for money. Allowing Google to use device identifiers for personalised ads may count as “sharing” for cross-context behavioural advertising under California law. You can opt out by choosing “Ask App Not to Track”, or by turning Symmetry off in Settings › Privacy & Security › Tracking (or turning off Allow Apps to Request to Track). This stops your advertising identifier being shared.
- Biometric privacy laws (such as those in Illinois, Texas and Washington): Symmetry does not collect, store or share biometric identifiers or templates on any server. Face geometry is processed only on your device to show you measurements and is never used to identify you.
To make a request, or to appeal a decision about a request, email mail@quinston.com. You may use an authorised agent. We may need to ask for information to verify your request.
Children
Symmetry is not directed to children under 13 (or the equivalent minimum age in your country) and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.
Not a medical device
Symmetry is for curiosity and personal information only. It does not diagnose, treat or monitor any medical condition. Some asymmetry is normal in every face. See the terms of use.
Changes to this policy
We may update this policy, for example if the app gains features or the law changes. The date at the top shows the latest version. If a change is significant, we will highlight it on this page.
Contact
Questions or requests about privacy: mail@quinston.com
Quinston Pimenta, developer of Symmetry: 3D Face Scanner