Privacy Policy

Last updated: 6 June 2026

This Privacy Policy explains how Wellington Web Co ("Forma", "we", "us") collects, uses and protects your information when you use the Forma website and app (the "Service").

1. Information we collect

Photos you submit. Images you upload or capture for facial analysis.
Analysis results. The scores, measurements and plans generated from your photos.
Account and contact data. Email address and any name or profile details you provide.
Purchase data. Records of single payments and subscriptions (handled by our payment processors; we do not store full card numbers).
Usage data. Device type, app interactions and diagnostics used to operate and improve the Service.

2. How we use your information

To generate and deliver your facial analysis and improvement plan.
To create and manage your account and deliver your report.
To process payments and provide customer support.
To maintain, secure and improve the Service.
To send you communications about the Service (and marketing only where you have consented; you can opt out at any time).

3. Your photos and third party AI processing

To produce your analysis, photos you submit are sent to third party AI providers, currently OpenAI (GPT-4o vision) and Google Cloud Vision, solely to compute your results. Photos are processed to generate your analysis and are not sold or used for advertising.

Unless you opt out, your photos are stored securely so our team can review your results before we email your report, and are deleted automatically once your report has been sent. We do not keep your photos longer than necessary to provide the Service.

4. Service providers we share data with

OpenAI, Google Cloud: facial analysis processing.
Stripe: web payments.
Apple App Store / Google Play / RevenueCat: in app subscriptions and purchases.
Hosting and analytics providers: to run and monitor the Service.

Each processes data only as needed to provide their function, under their own terms and privacy policies.

5. Your rights

Depending on where you live (including under UK GDPR and GDPR), you may have the right to access, correct, delete or export your data and to object to or restrict certain processing. To exercise these rights, contact us at contact@wellingtonwebco.com.

6. Data retention

We keep account and analysis data for as long as your account is active or as needed to provide the Service, then delete or anonymise it unless we are required to keep it for legal reasons.

7. Children

The Service is not directed to children under 18. We do not knowingly collect data from anyone under that age.

8. Security

We use reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure and we cannot guarantee absolute security.

9. Changes

We may update this policy from time to time. Material changes will be posted here with an updated date.

10. Contact

Wellington Web Co, Edinburgh, Scotland. Questions: contact@wellingtonwebco.com.

← Back to Forma