Last updated: August 2026
This policy explains how VAIA Longevity handles the facial images you submit through Face Scan, and the results we derive from them. It sits alongside our Privacy Policy and Terms of Service. Face Scan is optional. If you never use it, nothing in this policy applies to you.
When you use Face Scan, we collect the facial image you choose to upload or capture. From that image we derive a visual age estimate, a skin score, a hydration score, an eye area score, and a short written summary.
We do not create or store a faceprint, face template, face geometry map, or mathematical embedding of your face. We do not use Face Scan to identify you, to match you against any other image, or to verify who you are. We do not measure biological age, diagnose any condition, or provide medical advice.
We process your Face Scan image and derived results to provide the Face Scan feature. This includes giving you an estimate of how old your skin appears, educational guidance about visible skin features, and personalising the wellness protocol we prepare for you. Your Face Scan results form part of the information VAIA uses when generating and updating that protocol.
We do not use your image or its results for advertising. We do not sell them. We do not share them with other members unless you choose to share a result yourself.
We ask for your separate, explicit Face Scan consent before your first image is analysed. That consent is not bundled into our Terms of Service and is not implied by using the platform. You can decline and continue to use everything else VAIA offers.
We keep a record of each time you give or withdraw consent, including the date and the version of this policy you were shown.
| What | How long |
|---|---|
| The uploaded facial image | A maximum of 12 months from the date of that scan, then deleted automatically. The period runs per scan and does not restart when you log in. |
| The copy submitted to OpenAI for analysis | OpenAI may retain API content in abuse monitoring logs for up to 30 days, unless longer retention is required by law or is necessary to protect its services or third parties from harm. |
| Derived results, including visual age, scores and summary | Until you delete the scan, withdraw your Face Scan consent, or delete your account. |
| The consent record | While your Face Scan consent remains active. After withdrawal or account deletion, we retain the minimum consent and deletion record for six years, then delete it. |
When you withdraw your Face Scan consent, VAIA immediately stops using your Face Scan data. We delete your uploaded images and all results derived from them. This includes your visual age estimate, skin, hydration and eye area scores, AI summaries and Face Scan trends. We remove those results from AI context and regenerate your current protocol without Face Scan data.
Deletion removes the data from our live systems. Copies already present in routine provider backups remain protected and are removed when those backups are overwritten. We do not restore deleted Face Scan data to active use. OpenAI API content remains subject to the limited abuse monitoring retention described above.
We retain only the consent and deletion record required to demonstrate compliance.
Your image is stored by Cloudinary and analysed by OpenAI.
OpenAI does not use data submitted through its API to train or improve its models unless VAIA expressly opts in to share that data. VAIA does not opt in.
Your image is not stored in a publicly accessible location: it is held privately and can only be displayed to you, through a signed link, while you are signed in to your account.
You can ask us for a copy of your Face Scan data, ask us to correct it, ask us to delete it, or withdraw your consent, at any time. Write to support@vaialongevity.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
If we materially change the purpose of Face Scan, the categories of data processed, or increase the retention period, we will tell you and ask for fresh consent before any further processing. We keep earlier versions of this policy so that we can identify the version shown when consent was given.