Trust, privacy and security
This center describes controls present in the deployed platform and shows whether optional production providers are configured. An unavailable provider causes the affected capability to stop honestly.
LIVE SERVICE BOUNDARY
Production configuration
Availability is checked server-side without exposing credentials.
Purpose-specific before processing
Adult, privacy, analysis and media-processing consent precede capture. Revocations append a new record instead of rewriting history.
No public photograph URLs
Originals, previews and reports use owner-scoped private object storage. Media access checks the signed-in owner or a valid expiring professional-share token.
Uncertainty causes withholding
Customer findings remain unavailable until evidence, confidence, recommendation, preview, plan and final-governor gates pass. Preview identity and edit-isolation validators fail closed.
Role-scoped and audited
Operations staff can monitor, reprocess failed stages, handle incidents, and support privacy requests. They cannot manually approve failed customer evidence or previews.
Export, revoke and delete
Customers can export their account record, revoke professional cards, deactivate referral codes and permanently delete their account with typed confirmation.
Allowlisted events only
Product telemetry is pseudonymous and excludes photographs, journal text, coach messages, support descriptions and other private free-form content. Analytics stays disabled without its provider key.
Browser protections
Production responses set MIME-sniffing, framing, referrer, cross-origin resource and device-permission policies. Private API responses additionally use no-store caching.
Presentation guidance, not diagnosis
LEVEL is 18+, reversible and non-surgical. It does not calculate attractiveness or human worth, diagnose medical conditions, or instruct structural appearance alteration.
Current launch boundary
Connected storage and authentication do not make provider-dependent analysis, previews, coaching, payments, delivery or monitoring available. Each remains withheld until its real credential, evaluation and release gate are present.
Open machine-readable platform status →