Privacy Policy
Last updated: 18 October 2026
Photoeval lets you test your photo: an instant AI analysis, then ratings from real people. This policy explains what data we collect, why, who can see what, how long we keep it, and the rights you have. It applies to the Photoeval website and every service offered on it.
1. Who is responsible for your data
The data controller is Photoeval (“Photoeval”, “we”). For any question about your data, or to exercise your rights, write to contact@photoeval.com.
2. In short
- Your photo is shown to other members so they can rate it. We never publish it anywhere else.
- Raters see only your photo, not your first name, age, country or email.
- When you rate a photo, its owner sees your first name. If they bought their results, they also see your age, your country, your rating style and a small thumbnail of your most recent photo (section 4).
- We do not use facial recognition, and your photos are not used to train AI models.
- We do not sell your data and use no advertising cookies. Audience measurement cookies are only set if you accept them.
- Deleting your account removes all your photos from our servers at once.
- Photoeval is for adults only (18+).
3. What we collect
Your photo and its analysis
The photo you upload, which we convert (orientation fixed, embedded metadata such as location and camera details removed) and store with a blurred copy.
Our AI analysis of the photo produces an overall score, a separate score for each of five criteria (expression; style and grooming; pose and body language; light and quality; setting), and one improvement tip for the weakest criterion. The analysis also records information about the photo that is used internally and never shown to you or to other members: the apparent age of the person shown, an estimate of how other members are likely to perceive the photo and, once your photo is in the rating queue, descriptive features of the photo (for example: framing, lighting, setting, outfit style, objects or animals shown), used to understand which kinds of photos get the best ratings. These features are fixed categories, never free text about you, and never describe your body.
Your photos are never used to train or fine-tune any AI model, whether ours or our providers’.
Age estimation
Our AI analysis estimates the apparent age of the person in a photo. This estimate does not identify anyone: we do not use facial recognition, and we do not create or keep facial templates or faceprints. We use it only for the purposes described in section 5. We do not use it for advertising and we do not sell it. We keep it as long as the photo is stored; after the photo is deleted, it remains only in anonymised, aggregated form (section 9).
Your account
Your email address; how you signed in (email code or Google: with Google we receive your email and your Google account identifier, plus your first name, which we use only to pre-fill the first name you give us); the first name you give when you start, which is shown to other members and which you can edit before continuing; and what you tell us when you start: gender, age and country. Also your rating preference: the gender of the people who rate your photos, and of those whose photos you rate.
Your activity
The ratings you give (score, the tags you tick, your optional comment), the photos you skip, the photos, comments and raters you report, the ratings your photos receive, and counters derived from them (ratings given and received, your rating style, your rating weight, your queue position).
Your rating style is a label (tough, balanced or generous rater) calculated automatically from how your ratings compare with other members’ ratings of the same photos.
Payments
When you buy, the payment is handled by Stripe. We never see or store your card details. We keep the purchase (product, photo, amount, currency, date, status) and the Stripe identifiers needed to find it.
Technical data
Like any website, our servers and hosting provider record technical logs (IP address, date, page requested, browser) to run the service, keep it secure and investigate abuse.
4. Who sees what
| Who | What they see |
|---|---|
| Raters (other members) | Your photo, unblurred, with nothing else about you. Your photo is never shown to you in your own queue. |
| You, as a photo owner | Your photo's overall AI score, its score for each of the four criteria and its improvement tip. From the human ratings: the number of ratings, your average score across all ratings received and the first name of each rater. With the paid results: each rating, its tags and comment, and, for each rater, the details listed in the next row. |
| Owners of the photos you rate | Without a purchase: your first name and a blurred thumbnail of your most recent photo. Your rating, tags and comment appear only in blurred form and cannot be read. If they bought their results: your rating, tags and comment, with your first name, age, country, rating style and a small thumbnail of your most recent photo. |
| Visitors | Nothing. Photos and profiles are never public or indexed by search engines. |
Your email is never shown to other members. You can change your first name in Profile at any time.
5. Why we use your data, and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Analyse your photo, show it to raters, show you your results, run your account and the rating queue | Performance of the contract (our Terms of Use) |
| Use your rating preference to build the rating queue | Performance of the contract |
| Show photo owners who rated their photo (first name; with paid results, also age, country, rating style and photo thumbnail) | Our legitimate interest, and that of photo owners, in giving context to ratings. You can object (section 11). |
| Calculate your rating style and rating weight | Our legitimate interest in fair and reliable results |
| Estimate apparent age to block photos of minors | Our legitimate interest in protecting minors and keeping the service for adults only |
| Use apparent age, in aggregated form, for statistics | Our legitimate interest in improving the service |
| Sell and deliver the paid results, invoicing and accounting | Contract; legal obligation (accounting) |
| Security, abuse prevention (limits on analyses, reports, moderation, rating weighting), technical logs | Our legitimate interest in a safe and fair service |
| Improve our AI scores by comparing them with human ratings, using the photo features, apparent age, and scores, in aggregated form (not the images, see section 9) | Our legitimate interest in improving the service. You can object (section 11). |
| Send you sign-in codes and other service emails, and inform you of important changes | Performance of the contract; legal obligation |
| Measure how the site is used with Google Analytics cookies, to improve it | Your consent, given or refused in the cookie banner |
| Measure how the site is used without cookies, when you refuse or haven't chosen (section 13) | Our legitimate interest in knowing how many people visit the site and how it performs |
Your rating preference is used only to choose who rates your photos and whose photos you see. We do not use it to infer anything else about you, and we do not use it for any other purpose.
6. Automated processing
The AI score and improvement tip are an automated estimate of a photo, offered as advice. They have no legal or similarly significant effect on you.
A photo may be rejected automatically at upload if it shows no face, no clear main subject (such as a group photo), nudity, or a main subject who appears to be under 18; its image is deleted 30 minutes after upload. A photo reported by several raters is taken out of the rating queue until we review it. You can contact us to ask for a human review of any automatic rejection (send us the photo again with your request) or removal.
7. Reporting and moderation
Comments. Comments must follow the rules in our Terms of Use. If you see an offensive or inappropriate comment, report it by writing to us at contact@photoeval.com. We review every report and take the measures needed, such as removing the comment or suspending the account.
Reporting. You can report a photo using the “Report” button. We review reports and can remove content or suspend accounts that break our Terms of Use. A photo reported by several raters is taken out of the rating queue until we review it.
8. Emails we send
We send you the emails needed to provide the service, such as sign-in codes, and may send notifications about your photos and results, for example when you receive new ratings, when your results are ready or when they are still waiting for you, and other service emails. We may also inform you of important changes to Photoeval, our Terms of Use or this policy.
We do not currently send newsletters or promotional emails. If we start doing so, it will be only with your consent or where the law allows it, and every such email will include a way to unsubscribe.
9. How long we keep your data
| Data | Kept |
|---|---|
| A photo uploaded without continuing to an account | Image deleted 24 hours after upload |
| A photo rejected by the automatic analysis | Image deleted 30 minutes after upload |
| Your photos (image files) | Until you delete the photo or your account, then removed at once |
| Your account | Until you delete it |
| Sign-in codes | A few minutes; only a keyed hash of the code is stored |
| Purchase records | Payment and invoice records are kept by Stripe, our payment provider, for as long as the law requires |
| Technical logs | 30 days |
| Audience measurement (Google Analytics) | 14 months, then deleted by Google |
| Your cookie choice | 6 months, then we ask again |
What remains after deletion
When you delete a photo or your account, the image files (original and blurred copy) are removed from our servers immediately, and your email, first name and sign-in identifiers are erased.
What we keep is anonymised: the ratings given and received (other members’ scores depend on them), the AI scores and photo features (no image), and purchase records. This anonymised data can no longer be linked to you and may be used to improve our scores. We never keep an image after you delete it.
If you delete your account, the ratings and comments you gave remain visible to the photo owners, without your first name or photo.
10. Service providers and transfers
We share data only with the providers needed to run Photoeval, each bound by a data processing agreement. We do not sell your data.
| Provider | Role |
|---|---|
| Amazon Web Services (United States) | Hosting, database and photo storage |
| OpenAI (United States) | AI analysis of the photo, including face detection and apparent age. Data sent through OpenAI's API is not used to train their models by default. |
| Stripe | Payments and receipts. Stripe processes your card details as an independent controller for some purposes. |
| Brevo (France) | Sending sign-in codes and other service emails |
| Sign in with Google, if you choose it | |
| Google Analytics (Google, United States) | Audience measurement (section 13) |
| Cloudflare (United States) | Protection against automated uploads (Turnstile): receives your IP address and technical signals from your browser |
Your data is stored in the United States, and several of these providers process it there. These transfers outside the European Union rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s standard contractual clauses.
We may also disclose data where the law requires it, for example to answer a valid request from a court or public authority.
11. Your rights
Under the GDPR you can:
- access your data and receive a copy;
- correct it, most of it directly in Profile;
- delete it: a photo in My photos, or your whole account in Profile;
- receive the data you provided in a portable format;
- object to processing based on our legitimate interest, or ask us to restrict it;
- withdraw your consent at any time, for example to audience measurement cookies, without affecting processing that took place before;
- give instructions on what happens to your data after your death.
Write to contact@photoeval.com. We answer within one month and may ask you to prove it is your account.
12. Additional information for US residents
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising or use it for targeted advertising.
- The categories of personal information we collect, their sources and the purposes we use them for are described in sections 3 and 5. We disclose them only to the service providers listed in section 10.
- Whatever state you live in, you can ask to access, correct or delete your personal information by writing to us. We will not discriminate against you for exercising these rights.
- We do not use facial recognition, and we do not create or keep facial templates or faceprints (section 3).
- Photoeval is not directed to children, and we do not knowingly collect personal information from anyone under 18 (section 15).
14. Security
Connections are encrypted (HTTPS), sign-in uses one-time codes or Google (we hold no passwords), access to data is restricted, and photos are stored in private storage under random names.
15. Minors
Photoeval is reserved for people aged 18 or over. Photos of minors are forbidden. If our analysis detects that the main person in a photo appears to be a minor, the photo is rejected and its image deleted within the hour. This detection is not perfect, so we may also review photos ourselves and delete them. If we learn that an account belongs to a minor, we delete it.
16. Changes
We may update this policy. The “Last updated” date at the top of this policy shows the latest version. If a change matters, we will tell you in the app or by email before it applies. See also our Terms of Use.