Privacy Policy

Last updated: 19 September 2026

This policy explains what Topline does and doesn't do with your data, written to match how the app actually works. Topline is operated by Alex Saint, established in France; French law and jurisdiction apply.

The short version

• We never store your photos in Topline's database or file storage. When you scan, three photos are sent securely to Anthropic for analysis. Anthropic may retain API inputs for up to 30 days for safety and abuse monitoring, then deletes them. It does not use API inputs to train its models.
• A copy of each photo stays on your phone, in Topline's private storage, so you can see your own before and after. It is downscaled and stripped of metadata, including any location tag your camera recorded, before it is saved. Because it lives in the app's own storage, it is included in your device's iCloud backup if you have backups switched on. That backup is yours, encrypted under your Apple account, and we have no access to it.
• We keep your scores and results, tied to an anonymous account created on your device. No name, email, or login.
• You can delete any scan, or your whole account and all its data, anytime in the app's Settings. Deletion is immediate and permanent.

What we collect

• Hairline photos: sent to Anthropic in-flight for analysis. Never stored in Topline's database or file storage. Anthropic's standard API retention is up to 30 days; the local history copy remains on your device.
• Scores, stage, and scan results: stored under an anonymous ID so you can track change over time.
• An anonymous account ID: created on-device and held in your device keychain. No email or password.
• A consent record (version + date): used to honor privacy regulations.
• Onboarding answers (reason, focus area, change timeline, current routine, and tracking goal): used to tailor what the app shows you, and shared with Superwall (below) so the offer you see matches them.
• Product events (screens opened, scan started, purchase attempted): used to show us where the app is confusing or broken. These go to our own database; we do not use a third-party analytics SDK.
• A push token, only if you switch on rescan reminders.
• Subscription status (active, and when it expires): written from Apple's receipt, relayed to us by Superwall.

We do not collect your name, phone number, contacts, or precise location. We do not use your data for advertising and we do not sell it.

Email. The app never asks for an email address. Two things are exceptions, and both are things you actively choose. If you join the waitlist on this website, we store the address you type so we can tell you when we launch. Write to us and we'll delete it. And if you sign in with Apple or Google to keep your scans across devices, that provider gives us an email, which stays inside our authentication system and is never copied into your profile or used for marketing.

How photos are analyzed

To produce a score, your photos are transmitted securely to our AI provider (Anthropic) and analyzed in real time. Under Anthropic's standard API policy, inputs are not used to train its models and may be retained for up to 30 days for trust and safety before deletion, subject to the limited legal and policy exceptions Anthropic describes. Topline itself writes no image to its database or file storage, only the resulting numbers. See Anthropic's commercial data retention policy.

Face data

Topline analyzes images containing your face and scalp to compute a hairline score. This face data is used only for that app functionality. It is sent only to our AI processor for analysis and is not stored in Topline's database or file storage, not sold, and not used to track you across apps or services. Anthropic's retention window above applies to these API inputs.

Payments

Subscriptions are sold and billed by Apple through the App Store. We never see or store your payment details.

Superwall is the service that shows you the subscription screen and tells us when a subscription starts, renews or ends, so the app knows to unlock. What reaches it: your anonymous account ID, your language, your onboarding answers, and which screen the offer appeared on. No photos, no scores, and nothing that identifies you by name.

Your controls

• Delete a single scan: Settings → Your scans → delete.
• Delete your account and all data: Settings → Delete account. This removes every score and result from our database and wipes the photo library from your device. It cannot be undone.

Data retention

Scores and results are kept until you delete them or delete your account. Anthropic may retain analysis inputs for up to 30 days as described above. Photos persist on your device until you delete the scan, delete your account, or remove the app. If you have iCloud Backup switched on, a copy of them is also held in your own iCloud backup until that backup is replaced or deleted; you can manage that in iOS Settings under your Apple Account.

Children

Topline is not directed to children under 13 (or the minimum age in your region) and we do not knowingly collect their data.

Changes

If this policy changes materially, we will update the date above and, where appropriate, ask you to review the updated terms in the app.

Contact

Questions about your data: privacy@gettopline.app