Deshincha

Deshincha

Deshincha Biometric Data Policy

Last updated: October 28, 2026 · Version: 2026-10-28

This is a translation of the Spanish original. If there is any conflict, the Spanish version prevails.

Your face is especially sensitive information. This policy explains, specifically, what biometric data Deshincha processes, for what purpose, how long we keep it and how we delete it. It is part of our Privacy Notice and is published to comply with, among others, Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, the Illinois Biometric Information Privacy Act (BIPA), the Texas biometric identifier law (CUBI) and the privacy laws of the states of Washington and Colorado.

The controller is Noles Technology Inc., 46 Avenue B, New York, NY 10009, United States. Contact: hola@deshincha.com

1. What biometric data we process

When you do a scan in Deshincha, we process:

  • Photos of your face taken inside the app.
  • Facial geometry: the position of reference points on your face (jawline, cheekbones, eye area and face contour) detected by Apple's vision technology on your phone.
  • Derived data: the proportions calculated from those points, your definition index, your zone scores and the quality of each scan.

We do not use your facial data to identify or recognize you. Deshincha has no facial recognition feature, does not compare your face with other people's faces and does not use your face to sign in.

2. What we use it for

Only to:

  1. Calculate your definition index and your zone scores.
  2. Show you your progress over time.
  3. Align your photos so the "before and after" comparison is fair.
  4. Choose suitable routines for your plan.
  5. Only if you turn it on separately: improve the accuracy of our scan with de-identified photos (see section 6).
  • Before the camera opens for the first time, we ask for your written, express consent, separate from any other, in which we tell you what data is processed, for what purpose and for how long. Without that consent, no scan is done.
  • We keep a record of your consent with the date, time and version of this policy.
  • You can withdraw it at any time from Profile > Settings or by writing to hola@deshincha.com. When you withdraw it, we stop doing scans and delete your biometric data within 30 days at most.

4. How we obtain it and where it is stored

  • The analysis of your face is done on your phone. Your photos do not leave your phone to calculate your index.
  • The points, proportions and results are stored in your account, on Supabase servers located in the United States, so you keep your progress.
  • Your photos are stored on your phone and are only backed up to the cloud if you turn on photo backup. In that case, they are stored in private storage that can only be accessed through temporary links.
  • Facial data is stored separately from your identification data (name and email).

5. What we never do with your biometric data

  • We do not sell, rent or trade it, or otherwise profit from it.
  • We do not use it for advertising, tracking, campaign attribution or advertising profiles.
  • We do not send it to analytics tools.
  • We do not disclose it to third parties, except: (a) to our infrastructure providers, which store it under our instructions and may not use it for anything else; (b) with your consent; or (c) when required by law, a court order or a competent authority.

6. Scan improvement (optional and off by default)

If you turn on the "Help improve Deshincha" option, we may use de-identified photos of you, separated from your name, email and account, to improve the accuracy of the scan.

  • The app works exactly the same if you don't turn it on.
  • We keep a record of which photos are in each training dataset.
  • If you withdraw this consent, we exclude your photos from any future training and delete them from our datasets.

7. How long we keep it (retention and destruction schedule)

We permanently delete your biometric data at the earliest of these times:

  1. 30 days after you delete your account.
  2. 30 days after you withdraw your biometric consent.
  3. After 12 months without activity on your account: we automatically delete your account and all your data.

In no case will we keep biometric data more than 3 years after your last interaction with Deshincha, or beyond the period allowed by applicable law. Backups that may contain this data are deleted in their normal rotation cycle.

If a court order or legal obligation requires us to keep it longer, we will keep it only for that purpose and delete it as soon as that obligation ends.

8. How we protect it

We protect your biometric data with the same or greater care than the rest of the confidential information we handle:

  • Encryption in transit and at rest.
  • Access rules that prevent one account from seeing another's data.
  • Private photo storage with temporary links.
  • Internal access restricted to those who need it to operate the service.

9. Your rights

You can, at any time:

  • Ask us for a copy of your biometric data, or export it from the app.
  • Ask us to correct or delete it.
  • Withdraw your biometric consent or your consent to improve the scan.
  • Delete your account from Profile > Settings.

Write to us at hola@deshincha.com with the subject "Biometric data". We respond within 20 business days at most.

10. Changes to this policy

If we change this policy, we will publish the new version at deshincha.com/biometricos with its date. If the change expands how we use your biometric data, we will ask for your new consent before applying it.