Purpose-specific before processing
Adult, privacy, analysis and media-processing consent precede capture. Revocations append a new record instead of rewriting history.
Is LEVEL safe? Trust, privacy and security
LEVEL keeps your photos in private storage in Paris, never uses them to train AI, names every company that processes them, and deletes them after 365 days without use or immediately when you delete your account. It is for adults 18 and over, and it never scores faces.
Your photos stay private, are never used to train a model, and can be deleted by you at any time. This page shows the controls behind that, and which outside services are switched on right now; if one is off, the feature that needs it stops rather than guessing.
Updated · About LEVEL
LEVEL handles photos under five rules that are enforced in its code. Photos are stored in private storage in Paris and are never given a public web address. They are never used to train any model, by LEVEL or by the companies that process them, and every one of those companies is named in the privacy policy: OpenAI for analysis and previews, Modal for the checks that a preview still looks like you, Supabase for storage and Vercel for hosting. Photos are deleted automatically after 365 days without a new photo or completed mission, and you can delete your account and everything in it at any time. Staff access is limited by role and logged. LEVEL is for adults, confirmed by a recorded date of birth, and it asks for consent and where you live before any photo is taken.
LIVE SERVICE BOUNDARY
What is connected right now
Read from the deployed configuration on every request, without exposing a credential. A provider that is not connected makes its capability stop rather than pretend.
- Private databaseconnected
- Private media storageconnected
- AI analysis and coachconnected
- Identity validatorconnected
- Segmentation validatorconnected
- Paymentsconnected
- Email deliveryconnected
- Funnel counting (first-party, cookieless)connected
- Error monitoringconnected
- PostHog copy of the funnel (optional)not yet connected
No public photograph URLs
Originals, previews and reports use owner-scoped private object storage. Media access checks the signed-in owner or a valid expiring professional-share token.
Uncertainty causes withholding
Customer findings remain unavailable until evidence, confidence, recommendation, preview, plan and final-governor gates pass. Preview identity and edit-isolation validators fail closed.
Role-scoped and audited
Operations staff can monitor, reprocess failed stages, handle incidents, and support privacy requests. They cannot manually approve failed customer evidence or previews.
Export, revoke and delete
Customers can export their account record, revoke professional cards, deactivate referral codes and permanently delete their account with typed confirmation.
Allowlisted events only
Product telemetry is pseudonymous and excludes photographs, journal text, coach messages, support descriptions and other private free-form content. Funnel steps are counted first-party, without cookies, against a per-tab or pseudonymous id; a copy goes to PostHog only when its key is set.
Browser protections
Production responses set MIME-sniffing, framing, referrer, cross-origin resource and device-permission policies. Private API responses additionally use no-store caching.
Presentation guidance, not diagnosis
LEVEL is 18+, reversible and non-surgical. It does not calculate attractiveness or human worth, diagnose medical conditions, or instruct structural appearance alteration.
Current launch boundary
Connected storage and authentication do not make provider-dependent analysis, previews, coaching, payments, delivery or monitoring available. Each remains withheld until its real credential, evaluation and release gate are present.
Open machine-readable platform status →Quick answers
- Are my photos used to train AI?
- No. Your photos are never used to train any model, by LEVEL or by the services it uses.
- How long are my photos kept?
- They are deleted automatically after 365 days without a new photo or completed mission, and you can delete everything at any time from your account.
- Who can see my photos?
- Only you, in your account. Staff access is restricted and logged, and every company that processes photos is named in the privacy policy.
THE PRODUCT BEHIND THIS PAGE
LEVEL turns seven private photographs into a plan, not a score.
A confidence-aware presentation profile, a preview of your best look and a twelve-week plan. No rating, no ranking, nothing surgical. Photographs are destroyed after twelve months and never train a model.