Privacy Policy

Last updated: August 28, 2026

NeckScore is built to know as little about you as possible. There are no accounts and no sign-ups. This page lists everything the app collects, how it is collected, what it is used for, and every third party involved.

No accounts, no identity

NeckScore does not require or offer account creation. We do not collect your name, email address, or any contact information through the app. Nothing described below is linked to your identity.

What the app collects, how, and why

• Scan photos — collected when you take a scan with the in-app camera or choose a photo from your library. Stored only on your device, inside the app's private container. When a scan is scored, the photo is transmitted once, over an encrypted connection, to our scoring service and on to Anthropic (see below) — solely to produce your score. The app asks for your explicit permission before your first scan; if you decline, no photo is ever sent (and no scan can be scored).
• Measurements and scores — the neck-to-jaw ratio measured on your device, your scores, training history, and any tape measurements you type in. Stored locally on your device; used to compute your score, pick your program, and chart your progress. We keep no server copy. Deleting the app, or Settings → Delete All My Data, removes them permanently.
• Anonymous usage events — sent by the app while you use it (for example "onboarding step viewed", "scan completed", "purchase made"). Events are tied to a random identifier generated on first launch — never to your identity — and never contain photos. Scan events include the numeric measurement ratio and score (numbers only) so we can calibrate the scoring bands. Used only to understand and improve the product.
• A device token — a random UUID generated on first launch and sent with each scan request. Used solely to enforce the daily scan limit. It expires from our rate-limit store within about 25 hours of each use and is never joined to any other data.
• Purchase state — whether a subscription is active, provided by Apple. We never see your payment details.
• Install-attribution signals — aggregate, Apple-mediated SKAdNetwork conversion signals (install and purchase events) so we can tell which ads work. No advertising identifier (IDFA) is accessed and the app never requests cross-app tracking permission.

Third parties we share data with

We share data with the four service providers below — no one else, and never for sale. Each provides privacy and security protections equal to or stronger than this policy, under its own published terms linked here.

• Anthropic (AI scoring) — receives the scan photo and measured ratio, with no identifiers attached, solely to grade neck muscle development. Anthropic processes API inputs transiently and does not use them to train its models (Anthropic privacy policy). Our own scoring relay (hosted on Cloudflare) never stores or logs the photo — it exists server-side only for the seconds needed to produce the score, then it is gone.
• PostHog (analytics, EU-hosted) — receives the anonymous usage events described above, processed for us as described in the PostHog privacy policy.
• AppsFlyer (install attribution) — receives aggregate SKAdNetwork conversion signals, processed under the AppsFlyer privacy policy.
• Apple (purchases) — subscriptions are processed entirely by Apple through the App Store under Apple's privacy policy. Manage or cancel in Settings → your Apple ID → Subscriptions.

Our scoring relay runs on Cloudflare infrastructure, which processes requests transiently to deliver the service (Cloudflare privacy policy).

Retention

• Photos, scores, measurements, history: on your device only, until you delete them or the app.
• Photos server-side: seconds — never stored, never logged, never used to train AI.
• Rate-limit counter: ~25 hours, a number only.
• Anonymous analytics events: retained in PostHog under our account until deleted.

Your choices

• Scanning is opt-in: the app explains what is sent and to whom, and asks your permission before your first scan.
• Every other feature works without any data leaving your device.
• Settings → Delete All My Data erases everything the app stores. There is no server copy to delete — that's the point.

Notifications

Reminders are scheduled locally on your device. We run no push-notification servers.

Age

NeckScore scores adults only. The scoring system refuses to score anyone who appears to be a minor, and the app is not directed at children under 13.

Changes

If this policy changes, the updated version will be posted at this address with a new date.

Contact

Questions about privacy: support@neckscoreapp.com