Privacy Policy

• Nisbel keeps what you give it — your photos, your answers, your report and plan, and your chat — in your account, until you delete it or your membership has ended and the photos' time is up.
• To make your report, Nisbel sends your photos and answers to AI models through OpenRouter, only to companies that commit not to keep them or train AI on them. Your front photo also goes to WaveSpeed, which draws the pictures of your plan and your hairstyle suggestions.
• Nisbel has no human review: no person reads your photos or writes your report.
• We never sell your data, we show no ads, and we never use your photos, answers or report to train AI models.
• You can delete your account yourself at any time, in Settings, then Delete account.

This policy explains what Nisbel collects, why, who helps us run it, and what you can do about your data. It covers:

• The website at https://nisbel.com, where the membership and its add-ons are sold.
• The web app at https://app.nisbel.com, where you answer the questions, take your photos, and read your report, plan and chat.

Nisbel has no app for iPhone, iPad or Android: it runs in your browser.

Nisbel is run by Lucero Studio, Morlans, San Sebastián, Spain. We decide how your data is used, so we are responsible for it: the "controller" under the EU and UK GDPR.

Your data is yours. We use it only as this policy says.

Privacy questions and requests: support@nisbel.com. Help with Nisbel: support@nisbel.com.

Your account

• Sign-in: your email address. Nisbel sends you a short code by email each time you sign in and keeps no password. An account can be signed in on two devices at a time; signing in on a third ends the oldest session.
• Your first name: the name the checkout asks for, used to greet you in the app and in emails.
• Your language: English, Spanish or Arabic, so that your report, plan and emails are written in it.
• Your consent: when you agree to Nisbel measuring your face and using your health and ancestry answers, we keep a record of it: the version of the text you accepted, whether you also agreed to news and offers, and when. When you acknowledge the report's disclaimer, we keep its version and the time.
• Your signature: the name you type before your photos are sent, the time, and the version of the questions, as the record of your confirmation.

Your purchase

• What you bought: the membership, each add-on, the amount, the currency, the date, the renewal or end date, and whether an add-on was refunded.
• Your card: Stripe processes the payment and keeps your card. We never see or store its number.
• Billing details: what Stripe Tax needs for the invoice, such as your billing country and, for a business, a VAT number.
• Receipts and invoices: Stripe emails them to you and keeps them under its own policy.

Your photos

• What you send: seven required photos of your face and head, in the angles Nisbel asks for, and any optional photos you choose to add, such as an everyday look or a front photo with make-up.
• How they are kept: each photo is resized to 1536 pixels and re-encoded as a JPEG before it is uploaded, which also drops its hidden details, such as the place where it was taken.
• Landmark points: the positions of points on your face, such as the corners of your eyes and your chin, found on your own device or by the AI model, and kept with the photo so the measurements can be made and checked.

Your answers

The six short sections Nisbel asks about: about you, your lifestyle, your health, your goals, and your ancestry. Some of these answers are health information, and ancestry is sensitive information too. You give them only with your explicit consent, and Nisbel uses them only to make your analysis.

Your report, plan and progress

• Your report: the measurements of your face, the scores, the written findings and the plan.
• The pictures of your plan: the pictures Nisbel draws to illustrate a change, made from your front photo.
• Progress: what you sent, when, and how your measurements change from one analysis to the next.

Add-ons

• Surgical Recommendations: the four answers you give it, and the PDF it writes for you.
• Hairstyle Suggestions: the four answers you give it, your note, and the five designs drawn from your front photo.
• Express Delivery: that you bought it, and the date it moves your report to.

Your chat

• Messages and replies: what you write in the chat, the AI's answers, and the title of the chat.
• Check-ins: a short follow-up the chat can set for a few days later: its question, the day it is due, and your answer.
• What the chat reads: before it answers, Nisbel sends the AI model your newest released report and plan, so that it can talk about them. It does not send your photos, your answers or your email.

Nisbel writes no notes about you in the chat, and keeps no memory of it beyond the chat itself.

Your share link

When you share your report, Nisbel keeps the link, a password if you set one, when it ends, how many times it was opened, and which parts you chose to share (your plan, the costs, your photos). A visitor sees the report and, if you chose, the plan and the pictures; never your answers or your email.

Feedback

A week after your report opens, Nisbel can email you a private link to rate it and, if you like, leave a comment. We keep your score, your comment, whether you agreed that we may publish it, and whether you unsubscribed from those emails. The link works for 30 days and opens no account: it carries only a random token, which we keep hashed.

What we collect automatically

• Country, language and time zone: the country your browser or device is set to, your app language and your time zone, so that your report is written in your language and the dates make sense where you are. Nisbel does not use your location.
• Sessions and security logs: your sign-in session, your IP address and your browser and device information, which our database provider keeps in its sessions and security logs.
• Checks that calls come from the web app: to stop abuse, each call to our server functions carries a short-lived pass. To get it, the web app runs a Cloudflare Turnstile check in your browser. It sees browser and device signals, never your photos or answers.
• Crash reports: when Nisbel crashes or hits an error, what went wrong, the app version, and the browser and system version, with performance measurements and error logs. Reports carry your account's random identifier. We do not put your photos, answers, email or name in them.
• Usage data: how Nisbel is used. See "Usage data" below.

What is stored on your device or in your browser

• Sign-in and settings: the web app keeps your sign-in session and your settings, such as your language and whether usage data is shared, in your browser's storage. They are needed for Nisbel to work.
• Drafts: your answers save to your account as you go. A hairstyle set you have started is kept in your browser's storage until you send it, and the photos you take stay in the page until you submit them.
• Usage data: while Share usage data is on, PostHog keeps an analytics identifier and the usage events waiting to be sent in your browser's storage.

Nisbel uses no advertising identifiers and no advertising or cross-tracking tools. The web app sets no cookies of its own. The marketing website at https://nisbel.com uses no cookies either (see "This website" below).

While Share usage data is on, Nisbel sends usage events to PostHog: which screens you open, when the app is opened, and events such as these:

• the checkout, the membership bought, an add-on bought or refused, and a renewal;
• the consent given, the questions answered (which section, never the answer), the photos sent (how many, never the photo), and the report submitted;
• the report opened, a plan page opened, the report downloaded or printed, and the share link made or revoked;
• a chat started, a message sent (how many, never its text), a check-in answered, and a rating or feedback sent (the score, never the comment).

These events carry your account's random identifier, your app language, the app version, and the browser and system version. They never carry your photos, your answers, your report's words, your messages, your email or your name. But they show that you use a face-analysis service, and some of them say something about how.

PostHog also gets your IP address with them, and discards it: it does not store IP addresses. Before discarding it, PostHog may work out an approximate location (such as the country and city) from it, and keeps only that.

Usage data is on unless you turn it off: in Settings, turn off Share usage data, and the app records and sends no more usage events from that browser.

• To make your analysis (your explicit consent, and our contract with you): your photos, your answers and your front photo, to measure your face, write your report and plan, draw its pictures, and make the add-ons you buy. Your health and ancestry answers are special categories of data under the GDPR, so we use them only with your explicit consent (Article 9(2)(a)), which you give before your first analysis.
• To provide Nisbel (our contract with you): your account and sign-in, your membership, its limits, your chat and your share link.
• To take your money and keep the books (our contract with you, and our legal duties): payments, receipts, invoices, refunds, and the tax and accounting records the law requires.
• To answer your messages (our contract with you, or our legitimate interest in helping you): your emails and requests.
• To keep Nisbel working and safe (our legitimate interests): crash reports, fixing errors, checking that calls come from the real app, preventing fraud and abuse, the chat's limits, and reading the feedback you send.
• To improve Nisbel (our legitimate interest in learning how Nisbel is used, with an easy way to say no): usage data. It is on from the start, and you can turn it off at any time in Settings.
• To meet legal duties: for example keeping tax and accounting records, and answering lawful requests from authorities.
• To tell you about Nisbel: important changes to Nisbel, these terms or this policy, by email or in the app.
• If Nisbel changes hands: in a merger, sale or reorganisation, the data passes to the new owner, who must keep this policy.

We do not sell your data. Nisbel shows no ads, and we never use your photos, answers or report for advertising, for marketing or to train AI models. We do not make decisions about you that have legal or similarly significant effects by automated means: your report is information for you to discuss with a professional.

If you ticked the optional box at checkout, we may email you news and offers. Every such email says how to stop, and you can also write to support@nisbel.com to withdraw that consent. It is never tied to your analysis.

Withdrawing your consent

You can withdraw your consent to the measurement of your face at any time. Without it, Nisbel cannot make your report. To withdraw, delete your account (Settings, then Delete account), which deletes your photos, answers, report and plan, or write to support@nisbel.com from the email address of your account, and we delete them and confirm it to you. Withdrawing does not make what we did before it unlawful.

Who looks at your data

People who work on Nisbel can reach the stored data only to keep Nisbel working and safe, when you ask us for help, or when the law requires it. Nobody reads your photos or your report as part of making it: the analysis is automatic. We read the feedback you send, to check it and improve Nisbel.

Every report, plan and set of pictures is made by AI models and software; no person writes or checks them. For each analysis, Nisbel sends:

• To Google's Gemini, through OpenRouter: your photos, to place points on your profile photos and to read your skin, apparent age, hair and face shape. The points for your other photos are found on your own device.
• To Anthropic's Claude, through OpenRouter: your measurements and your answers, to write your report and plan. This request goes through OpenRouter's batch service, which can take up to a day to answer.
• To WaveSpeed: your front photo, to draw the pictures of your plan and, if you buy them, your hairstyle suggestions.

The chat works differently. Before it answers, Nisbel sends the model, through OpenRouter, your newest released report and plan as text, and the messages of the chat. Today the model is DeepSeek V4.1 Flash, with another DeepSeek model in reserve for when it is unavailable.

How it gets there:

• Nisbel's server sends each request to OpenRouter, which passes it to a company that runs the model. For the report and the chat, these are companies that OpenRouter lists, on the basis of their own policies, as keeping no data at all (zero data retention): they commit not to store the request or the answer, and not to train AI on them. OpenRouter chooses the company for each request, from a list that changes, and these companies are in several countries, inside and outside the United States.
• WaveSpeed draws the pictures. It receives your front photo and the instructions for the picture, and nothing else of your account.
• No one at the AI providers sees your account details: requests carry no email and no account identifier, but they do carry the photos, answers or report text listed above.

We share data only with the companies below, who process it for us to run Nisbel, and only what each needs:

• Hosting, database and storage: Supabase, in Frankfurt, Germany; and Cloudflare, which hosts this website and the web app.
• Payments and tax: Stripe.
• AI models: OpenRouter, the companies that run the model behind it, and WaveSpeed for pictures.
• Crash reports and usage data: Sentry and PostHog.
• Checks that calls come from the web app: Cloudflare.
• Email: Cloudflare, which sends the sign-in codes and the emails about your analysis.

The full list, with what each does and its privacy policy, is under "The services we use" below.

We may also share data when the law requires it, to protect people's safety or our rights, or with a new owner if Nisbel is sold.

Nisbel and this website link to other services, such as Stripe's payment pages and the websites of clinics or professionals. This policy does not cover them.

• Supabase (Supabase, Inc.): our database, file storage, sign-in and server functions, in its Frankfurt region (Germany). It holds your account, sessions, photos, answers, report, plan, chat and the content of the emails we send. Privacy policy
• Cloudflare (Cloudflare, Inc.): hosts this website and the web app, runs the Turnstile check in the web app, and sends our emails. It handles your IP address to deliver the pages and protect them. Privacy policy
• Stripe (Stripe, Inc. and its affiliates): processes and bills the membership and the add-ons, calculates tax, keeps the invoices and sends the receipts. Privacy policy
• OpenRouter (OpenRouter, Inc., United States): connects Nisbel to the AI models named under "AI processing". Data collection is off in our OpenRouter account, so OpenRouter does not store the photos, answers, reports or replies sent through it. Privacy policy
• Google (Google LLC): runs Gemini, which places points on the profile photos and reads skin, apparent age, hair and face shape, through OpenRouter. Privacy policy
• Anthropic (Anthropic, PBC): runs Claude, which writes the report and the plan, through OpenRouter. Privacy policy
• WaveSpeed (WaveSpeedAI): draws the pictures of your plan and your hairstyle suggestions from your front photo. Privacy policy
• Sentry (Functional Software, Inc.): crash and error reports, stored in its EU region. Privacy policy
• PostHog (PostHog, Inc.): usage data from the web app while Share usage data is on, and visit counts for this website, stored in its US region. It discards IP addresses. Privacy policy

Your account, photos, answers and report are stored in the European Union (Frankfurt, Germany). Some of our providers process data outside your country, including in the United States, and the companies that run the AI models may be in other countries too. When data leaves the EU, the UK or Switzerland, we rely on safeguards the law accepts, such as the European Commission's standard contractual clauses or an adequacy decision.

We keep data only as long as we need it for the purposes above.

• Account, answers, report and plan: until you delete them or your account. The answers and the written report are kept after your membership ends, so they open again when you renew.
• Photos and the points on them: deleted 30 days after your membership ends, or when you delete your account. The pictures of your plan and your hairstyle sets go with them, because they are made from your photo. A renewal before those 30 days pass keeps them.
• Chat: until you delete the chat or your account. You can press and hold the chat to delete it.
• Check-ins: until they are answered or cancelled, and with your account.
• Share links: until they end, you revoke them, your membership ends, or you delete your account.
• Feedback: until you delete your account. The token in the email stops working after 30 days.
• Backups: our database provider keeps daily backups of the database for 7 days, so deleted data leaves them within 7 days. Photos and generated pictures are not in these backups.
• Crash reports: Sentry deletes them after at most 90 days (Sentry's retention periods).
• Usage data: PostHog keeps usage events for the retention period of our PostHog plan (PostHog's retention periods), then deletes them. They carry your account's random identifier, never your email or name.
• Purchase records: Stripe's record is deleted with your account, except what tax and accounting law requires us to keep, for as long as it requires.
• Emails to us: as long as we need them to help you, and as the law requires.

We protect your data with encryption in transit and on our database provider's servers, private storage for your photos that only your account can read, rules in the database that let each account read only its own data, and access limited to what each part of Nisbel needs. Your photos are resized and their hidden details are removed before they are uploaded. No system is completely secure, so we cannot promise that your data will never be accessed without permission. If a breach puts your data at risk, we tell you and the authorities as the law requires.

Wherever you live, you can ask us to:

• See the data we hold about you, and get a copy, with the list of the companies that received it.
• Correct it if it is wrong. You can edit your answers yourself before you send them. A report that has been made from wrong answers can be reviewed: write to us.
• Delete it. You can delete your account yourself at any time.
• Withdraw your consent to the measurement of your face (see "Withdrawing your consent").
• Stop usage data: turn off Share usage data in Settings.

Write to support@nisbel.com from the email address of your account, so we know the request is yours. We answer within one month (45 days where a US state law gives that time), and it is free unless a request is clearly unfounded or excessive.

In the EU and the UK

Under the GDPR you also have the right to:

• Restrict our use of your data.
• Object to uses based on our legitimate interests.
• Receive your data in a portable format, or have it sent to another company.
• Complain to the data protection authority where you live or work, or where we are established. We would like to hear from you first.

In California

Under the CCPA you have the right to know what personal information we collect, use and disclose, and why; to get a copy of it in a portable format; to correct it; to delete it; and to limit our use of sensitive personal information, such as your photos and health answers, to what is needed to provide Nisbel. You can ask twice in 12 months. We do not sell your personal information or share it for cross-context behavioral advertising. We will not treat you differently, charge you more or give you a worse service for using these rights. You can ask through someone you authorise, and we may need to confirm who you are and that they may act for you.

In other US states

If you live in a US state with a consumer privacy law, you have the rights it gives you, such as to see, correct, delete and get a copy of your data, and to opt out of its sale, targeted advertising and profiling (we do none of these). If we refuse a request, you can appeal by replying to our answer, and we answer the appeal within the time the law sets.

Your answers can include health information, and the pictures and report can show your face and skin. We use all of it only to make your analysis, as this policy says, and only with your explicit consent. We do not sell it, we do not use it for advertising, and we do not use it to train AI models.

Nisbel is not for anyone under 18, and we do not knowingly collect data from them. If you believe a child has an account, write to support@nisbel.com and we will delete it.

The pictures in your plan and your hairstyle suggestions are made with AI, and Nisbel labels them as generated. On this website, the pictures of before-and-after changes are illustrations made with AI, and the footer of every page says so. They do not show a real person's result.

This website does not use cookies. It counts visits with PostHog without cookies and without storing anything in your browser; PostHog gets your IP address and discards it, as described under "Usage data" above. We use the counts only to see which pages people read and which buttons open the app. Cloudflare, which hosts the website, handles your IP address to deliver the pages. Do not send photos, answers or health information through this website: it has no forms for them.

We may update this policy. The date at the top shows the latest version. If a change matters to you, we tell you by email or in Nisbel before it applies. If a change means we would use your photos or answers in a new way, we ask for your consent again first.

• Privacy questions and requests: support@nisbel.com.
• Help with Nisbel: support@nisbel.com.
• By post: Lucero Studio, Morlans, San Sebastián, Spain.