Privacy Policy

This Privacy Policy explains how Zebrafish (“we”, “our”, or “us”) collects, uses, stores, and protects your information when you use our services. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

• Account information: name, email, and authentication details to create and manage your account.
• Uploaded content: facial images or photos you voluntarily upload for generating AI-based aesthetic symmetry or proportionality analyses (“Predictions”).
• Technical information: browser type, device, and usage metrics collected automatically to improve performance and security.
• Payment information: processed by third-party providers (e.g., Stripe); we do not store credit card data.

2. How We Use Your Information

• To provide, personalise, and improve the Zebrafish Service.
• To generate your requested Predictions and display them in your account history.
• To process transactions, manage credits, and provide customer support.
• To maintain security, detect fraud, and comply with legal obligations.
• To conduct research or statistical analysis in anonymised or aggregated form.

3. Facial Data & Biometric Information

• Facial images you upload may be considered biometric information under Australian law.
• By using Zebrafish, you provide explicit consent for us to process your images for analytical purposes as described here.
• Images are used solely to generate Predictions and enable you to view past results; they are not used for model training or third-party analytics.
• You may delete your images or account at any time to remove stored content from our systems.

4. Data Storage & Security

• We take reasonable steps, consistent with industry standards, to protect your personal data using encryption, access controls, and secure storage.
• Despite these safeguards, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
• Data is stored on secure servers located in Australia or trusted cloud regions (such as Google Cloud Storage).

5. Data Retention

• Images and results are retained while your account remains active, so you can revisit previous Predictions.
• If you delete your account or request removal, all associated personal data and images are permanently deleted from active systems within 30 days.
• We may retain minimal records as required by law (e.g., transaction logs for tax purposes).

6. Sharing & Disclosure

• We do not sell, rent, or trade your personal data.
• We may share limited information with trusted service providers who assist us in operating the Service (e.g., hosting, payment processing, or analytics).
• All such providers are bound by confidentiality and data protection obligations consistent with this policy.
• We may disclose information if required by law, regulation, or court order.

7. International Data Transfers

If we use cloud providers outside Australia, we take reasonable steps to ensure that any overseas recipient protects your information in accordance with the Australian Privacy Principles.

8. Your Rights

• You may access, correct, or delete your personal data at any time via your account settings or by contacting us.
• You may withdraw consent for image processing, but this will prevent us from providing further Predictions.
• You may request a copy of the personal data we hold about you, subject to verification.

9. Cookies & Analytics

We may use cookies or similar technologies to remember preferences and analyse usage. These do not collect personal data and can be disabled through your browser settings.

10. Children

Zebrafish is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has used the Service, please contact us for removal.

11. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be announced in the app or on this page. Continued use of Zebrafish after updates constitutes acceptance of the new Policy.

12. Contact Us

For privacy enquiries, data access requests, or complaints, contact our Privacy Officer at: privacy@zebrafish.io.