PSL Max Privacy Policy

Effective Date: June 16, 2026Last Updated: June 16, 2026Company: AJX Studios L.L.C. (“PSL Max,” “we,” “us,” or “our”)Contact: finances@ajxstudios.com

This Privacy Policy explains how PSL Max collects, uses, stores, shares, and protects information when you use the PSL Max mobile application, websites, backend services, AI image-generation features, face-scan features, analytics, routine features, community features, support channels, paid features, and related services (collectively, the “Service”).

PSL Max is an AI-assisted appearance analysis, image generation, routine, analytics, and community app. Because the Service may process face images, head/face scan data, scan-derived appearance information, generated images, product interaction data, and public community content, this Policy is designed to explain our practices in plain language and in detail.

This Policy should be read together with our Terms of Service. If you do not agree with this Policy, do not use the Service.

Summary of Key Points

This summary highlights important parts of the Policy. The full Policy below controls.

What personal information do we process? Build 1.0 (5) is designed around the App Store Connect App Privacy categories disclosed for PSL Max: Sensitive Info, Photos or Videos, Other User Content, User ID, Purchase History, Product Interaction, and Head. Depending on the features you use, we may process face scan/photo data, head/face analysis data, scan-derived sensitive information, AI generation data, community content, pseudonymous user identifiers, purchase entitlement data, and product interaction data.

Do we process sensitive information? Yes, depending on the features you use. Face images, face scan data, TrueDepth-derived data, scan-derived appearance data, generated images, and certain community content may be sensitive. We do not use this information for third-party targeted advertising or data brokerage.

Do we use face data to identify you? PSL Max is designed for appearance analysis and image generation, not face identification. We do not use face images, facial geometry, AR/depth data, or scan-derived data to identify or authenticate you as a unique person, build a face-recognition database, or track you across apps or websites.

Do we share information with third parties? Yes, in limited ways needed to operate the Service. For example, we may share data with hosting providers, AI providers such as OpenAI, Apple payment systems, diagnostics providers, moderation/safety vendors, support providers, and professional advisors. We also disclose community content to other users when you post it publicly.

Do we use third-party AI? Yes. If you use AI image generation, PSL Max may send your selected or latest face scan image, generation settings, prompts, selected options, and related request metadata to PSL Max servers and OpenAI, a third-party AI service provider, to create your requested image. PSL Max requires Face Scan & AI Processing Consent before starting face scan processing or sending AI generation data to OpenAI.

Do we sell personal information? We do not sell your personal information for money. We do not sell or share face images, scan-derived facial data, generated images, or community content with data brokers.

Do we use tracking for advertising? PSL Max is not designed to track you across third-party apps and websites for targeted advertising. If this changes, we will update this Policy, update App Store disclosures, and obtain required consent.

How do we use information? We use information to provide and improve the Service, run scans, display results, generate images, personalize routines and analytics, operate community features, process entitlements, provide support, prevent abuse, secure the Service, comply with law, and enforce our Terms.

How long do we keep information? Retention depends on the feature and data type. On-device data generally remains until deleted by you, reset through the app, or removed by uninstalling the app. Server-side data is kept only as long as reasonably necessary for the disclosed purposes, subject to the retention table below.

What are your privacy choices? You can manage device permissions in iOS settings, decline or withdraw Face Scan & AI Processing Consent, delete local data where supported, manage community controls, unsubscribe from marketing where offered, and contact us to request access, deletion, correction, portability, restriction, objection, or consent withdrawal where applicable. If you decline or revoke Face Scan & AI Processing Consent, PSL Max will not begin new face scans or AI image generation requests that require this consent unless you consent again.

Is PSL Max for children? No. PSL Max is intended for users who are at least 17 years old, or older where local law requires. We do not knowingly collect personal information from children under 13.

Scope
Information We Collect
Information Created or Inferred by PSL Max
Information We Receive From Third Parties
How We Use Information
Face Scan, AI Image Generation, and Third-Party AI Consent
Legal Bases for Processing
How and When We Share Information
Data We Do Not Sell or Use for Advertising
Cookies, SDKs, Tracking Technologies, and Do-Not-Track Signals
Data Retention
Your Choices and Controls
Regional Privacy Rights
California Notice at Collection and Privacy Rights
Children and Minors
Security
International Data Transfers
Third-Party Services
Changes to This Policy
Contact Us
How to Review, Update, or Delete Your Data

1. Scope

This Policy applies to information processed through:

The PSL Max iOS application;
PSL Max websites and landing pages that link to this Policy;
PSL Max servers, APIs, databases, and backend services;
Face scan, photo, and analysis features;
AI image generation features;
Routine, analytics, onboarding, and personalization features;
Community features, username systems, posts, comments, replies, votes, saves, reports, and blocks;
Support, email, feedback, and contact channels;
Paid features, subscriptions, in-app purchases, trials, and entitlement systems;
Security, diagnostics, logging, abuse-prevention, and moderation systems.

This Policy does not apply to third-party websites, apps, services, or platforms that we do not control. Third-party services may have their own privacy policies and terms.

2. Information We Collect

The information we collect depends on how you use PSL Max, what features are enabled, what information you choose to provide, and what device permissions you grant.

For Build 1.0 (5), PSL Max’s App Store Connect App Privacy responses disclose these categories: Sensitive Info, Photos or Videos, Other User Content, User ID, Purchase History, Product Interaction, and Head. The sections below describe how those categories may appear in the app.

App Privacy Category	Examples in PSL Max
Sensitive Info	Face scan data, scan-derived appearance information, generated images, and related consent or safety metadata
Photos or Videos	Face scan images, selected images, generated images, and app-created visual outputs
Other User Content	Community posts, comments, replies, reports, and support content you choose to submit
User ID	Community username, pseudonymous user ID, or account/community identifier
Purchase History	Subscription, trial, entitlement, restore, refund, or revocation status
Product Interaction	Feature use, onboarding progress, scan attempts, generation attempts, routine activity, and Community interactions
Head	Head/face scan information, facial geometry, landmark data, depth/TrueDepth-derived mapping data, and scan-derived appearance data

2.1 Information You Provide Directly

We may collect information you enter, choose, upload, or submit, including:

Community username or pseudonymous user ID;
Content you choose to submit in Community features, such as posts, comments, replies, reports, blocks, votes, saves, reactions, and moderation appeals;
Photos, videos, selected images, face scan images, and generated images you choose to use with supported app features;
Face Scan & AI Processing Consent status;
Purchase, subscription, trial, entitlement, restore, refund, or revocation information needed to provide paid features;
Product interaction data, such as feature use, onboarding progress, scan attempts, generation attempts, routine activity, and Community interactions;
Head/face-related scan data, including facial geometry, landmark data, depth/TrueDepth-derived mapping data, and scan-derived appearance data when you use face-scan features;
Medical disclaimer acknowledgment status;
Support messages, screenshots, attachments, or correspondence if you choose to contact us.

Please do not submit information you do not want PSL Max to process.

2.2 Camera, Face Scan, Photo, and Generated Image Data

Depending on the feature, PSL Max may process:

Camera frames or captures used for face-scan flows;
Front-facing and side-profile scan images;
Latest scan preview images;
Images selected or used for Generate;
Generated images created by AI image generation;
Face position, pose, alignment, crop, framing, lighting, quality, and capture metadata;
Facial landmark, geometry, mesh, depth, head-pose, TrueDepth-derived facial mapping data, and similar analysis data used by the app;
Scan-derived appearance measurements, category scores, PSL estimates, potential estimates, tier labels, and similar app-generated outputs;
Local file paths and lightweight metadata used to find images stored on your device.

Some image data may remain only on your device. With Face Scan & AI Processing Consent, PSL Max may transmit face scan images, selected images, generated images, facial geometry, landmark data, depth information, TrueDepth-derived facial mapping data, scan-derived appearance data, and related metadata to PSL Max servers or service providers as described in this Policy for face-scan, backend scoring, AI image generation, support, debugging, abuse prevention, safety, moderation, and service-security features. If you decline or revoke Face Scan & AI Processing Consent, PSL Max will not begin new face scans or AI image generation requests that require this consent unless you consent again.

2.3 AI Image Generation Data

When you use AI image generation after accepting Face Scan & AI Processing Consent, PSL Max may send some or all of the following to our generation server and our AI provider:

Source image, selected image, or latest scan image;
Current PSL estimate;
Current potential estimate;
Target PSL, selected transformation target, or requested generation goal;
Tier label;
Generation mode;
Timestamp;
Category ID;
Option ID;
Prompt profile ID;
Option title;
Prompt and configuration metadata;
Request status, latency, error, and model metadata;
Safety, abuse-prevention, and diagnostic metadata.

We use this information to create the generated image you requested, operate the feature, troubleshoot errors, prevent abuse, enforce safety rules, maintain security, and improve reliability.

2.4 Community Data

If you use Community features, we may collect and process:

Permanent username and username claim status;
Posts, comments, replies, titles, text, media if media features are enabled, and other content you submit;
Upvotes, saves, reactions, reports, blocks, and moderation actions;
Pseudonymous user IDs, account identifiers, or community identifiers used to operate Community features;
Content status, visibility, timestamps, edit/delete status, and abuse-prevention metadata;
Moderator notes, takedown reasons, enforcement history, and safety records.

Community content may be visible to other users. Do not post private information, non-consensual images, images of minors, or content you do not have permission to share.

2.5 Usage, Product Interaction, and Safety Metadata

For Build 1.0 (5), PSL Max may collect product interaction data needed to operate and improve app functionality, including:

App interactions, screens viewed, buttons tapped, feature usage, onboarding progress, scan attempts, generation attempts, routine activity, and Community interactions;
Request status, timestamp, latency, error information, safety metadata, abuse-prevention metadata, and diagnostic metadata associated with scan processing, AI generation, support, safety, service security, and abuse prevention.

We do not use this data for third-party targeted advertising or cross-app tracking.

We do not use product interaction data for third-party targeted advertising unless we update this Policy, update platform disclosures, and obtain any required permission.

2.6 Purchase and Subscription Data

If PSL Max offers paid features, subscriptions, trials, consumables, non-consumables, or in-app purchases, purchases in the iOS app are generally processed through Apple. We may receive and store information needed to provide access to paid features, such as:

Product purchased;
Subscription status;
Trial status;
Renewal, expiration, cancellation, grace period, refund, or revocation status;
Transaction identifiers or receipt validation results;
Entitlement status;
Limited purchase analytics, if enabled.

We do not receive your full payment card number from Apple.

2.7 Device Permissions and Application Data

PSL Max may request iOS permissions such as Camera, Photos, Notifications, or other permissions depending on features.

Camera: used for face scans, capture guidance, latest scan previews, analysis, and related features.
Photos: used to select images for supported features or save generated images if you grant access.
Notifications: may be used for reminders, routine prompts, scan reminders, feature updates, service messages, or community notifications if enabled.

You can manage permissions through iOS settings. If you deny a permission, some features may not work.

3. Information Created or Inferred by PSL Max

PSL Max may create or infer information from your inputs and app activity, including:

PSL estimates and potential estimates;
Feature-level appearance categories, such as eyes, midface, lower third, upper third, skin, facial harmony, jawline, symmetry, or similar categories if offered;
Progress analytics, scan history, improvement estimates, and countdowns;
Routine recommendations and task priorities;
Generation prompts, prompt profiles, image-generation metadata, and AI outputs;
Community trust, safety, spam, abuse, and moderation signals;
Subscription entitlements and feature access status.

These outputs are estimates, generated content, or product personalization signals. They are not medical, dental, surgical, psychological, dating, employment, financial, legal, or professional advice.

4. Information We Receive From Third Parties

We may receive information from third parties in limited circumstances, including:

Apple: purchase status, subscription status, transaction identifiers, receipt validation data, App Store download/refund-related signals, and limited platform information made available through Apple services;
AI providers: generated images, model response metadata, safety metadata, error metadata, or moderation signals related to a request you initiated;
Cloud, hosting, analytics, or security providers: product interaction data, request metadata, safety metadata, abuse-prevention metadata, service security alerts, or usage metrics;
Support providers: support ticket metadata or correspondence metadata if you contact us;
Community users: reports, moderation flags, block signals, or content involving your username or Community content;
Legal, safety, or compliance sources: information needed to investigate abuse, protect users, respond to legal requests, or enforce our Terms.

We do not currently require social media login. If PSL Max later offers social login, we will update this Policy and describe what profile information we receive from the relevant social platform.

5. How We Use Information

We process information to:

Provide, operate, maintain, and improve PSL Max;
Capture, process, and display face-scan results;
Estimate appearance-related scores, potential estimates, feature categories, and progress analytics;
Store and display scan previews, generated images, and local app content;
Generate AI images requested by you;
Personalize onboarding, routines, recommendations, insights, analytics, and feature access;
Operate Community features, including username claims, posts, comments, replies, upvotes, saves, reports, blocks, and moderation;
Filter, moderate, and enforce rules against harassment, bullying, impersonation, exploitation, objectification of real people, spam, scams, and other abuse;
Process purchases, subscriptions, trials, entitlements, restores, refunds, and billing support;
Provide customer support and respond to requests;
Send administrative notices, service messages, safety notices, policy updates, and support communications where available;
Send notifications if you enable them;
Debug errors, monitor performance, improve reliability, and maintain backend operations;
Secure our systems, prevent fraud, detect abuse, investigate incidents, and protect users;
Analyze aggregated or de-identified usage trends to improve the Service;
Comply with law, respond to lawful requests, enforce our Terms, and protect rights, safety, and security.

We do not use face images, facial mapping data, scan-derived facial data, or generated images for third-party advertising, targeted advertising, data brokerage, or use-based data mining.

PSL Max may process face scan images, facial geometry, facial landmark data, depth information, TrueDepth-derived mesh or facial mapping data, scan-derived appearance data, and related scan metadata to provide face scans, facial analysis, appearance measurements, scan processing, backend scoring, progress tracking, analytics, AI-powered features, support, debugging, abuse prevention, safety, moderation, service security, legal compliance, and related app functionality. PSL Max does not use this information to identify users, perform biometric identification, authenticate identity, build facial-recognition databases, or track users across apps, websites, or services.

PSL Max uses a Face Scan & AI Processing Consent flow before starting face scan processing or AI image generation features that require transmission of face scan data or AI generation data.

Before PSL Max begins a face scan or sends AI generation data to a third-party AI provider, PSL Max asks for your explicit consent. This consent is separate from device-level Camera or Photo permissions.

If you consent, PSL Max may collect and process your face scan/photo, facial geometry, landmark data, depth/TrueDepth-derived mapping data, scan-derived appearance information, and related scan metadata to analyze your results, provide facial analysis, support progress tracking, operate scan history, debug the Service, prevent abuse, maintain safety and security, and provide related app functionality.

If you use AI image generation, PSL Max may send your selected or latest face scan image, generation settings, prompts, selected options, and related request metadata to PSL Max servers and OpenAI, a third-party AI service provider, to generate the images you request.

Data that may be sent for AI image generation includes:

Face scan image or selected image;
Generation settings, prompts, selected options, and requested generation goals;
Current PSL estimate, potential estimate, tier label, category ID, option ID, prompt profile ID, and related configuration metadata;
Request status, timestamp, latency, error information, model metadata, safety metadata, abuse-prevention metadata, and diagnostic metadata.

PSL Max uses this information to create the generated image you requested, operate the feature, troubleshoot errors, prevent abuse, enforce safety rules, maintain security, and improve reliability.

If you decline Face Scan & AI Processing Consent, PSL Max will not begin the scan or AI image generation request that requires this consent. If you revoke consent later in Settings, PSL Max will require consent again before future scans or AI generation requests that require this consent.

We do not intentionally allow third-party AI providers to use your personal data for their own advertising or marketing. We do not intentionally opt in to allow OpenAI to use PSL Max API inputs or outputs to train or improve OpenAI models unless we first update this Policy and obtain any required consent.

AI-generated outputs may be inaccurate, unrealistic, incomplete, biased, or visually imperfect. They are not medical, psychological, dental, surgical, dating, or professional advice.

7. Legal Bases for Processing

This section applies where laws such as the GDPR, UK GDPR, Canadian privacy laws, or similar laws require us to identify a legal basis for processing personal information.

Depending on the context, we may process information based on:

Consent: for example, when you grant Camera or Photo permissions, enable Notifications, accept Face Scan & AI Processing Consent, submit optional information, or opt in to marketing.
Contract: to provide the Service you requested, operate your account or community identity, process purchases and entitlements, provide support, and enforce feature access.
Legitimate interests: to improve the Service, maintain security, prevent fraud and abuse, debug issues, analyze usage trends, protect users, moderate Community content, and enforce rules, where those interests are not overridden by your rights.
Legal obligations: to comply with law, tax/accounting obligations, lawful requests, platform requirements, consumer protection obligations, and safety obligations.
Vital interests or public interest: in rare cases, to protect someone’s life, safety, or security, or where required by applicable law.

Where we rely on consent, you may withdraw consent at any time, subject to limitations described in this Policy and applicable law. Withdrawal does not affect processing that occurred before withdrawal.

We may share information with the following categories of recipients.

8.1 Service Providers and Vendors

We may share information with vendors, contractors, and service providers that help us operate PSL Max, including:

Cloud hosting and backend infrastructure providers;
AI image generation providers, including OpenAI;
Database, storage, logging, and security providers;
Analytics or product interaction providers, if enabled;
Customer support providers, if you contact us;
Payment, receipt validation, subscription, and entitlement providers;
Moderation, anti-abuse, trust, and safety tooling providers;
Legal, accounting, compliance, and professional advisors.

These providers may access information only as needed to provide services to us, subject to contractual, technical, or policy restrictions where applicable.

PSL Max requires service providers that process user data, including OpenAI for AI image generation, to protect user data using the same or equal protections described in this Privacy Policy and required by the App Store Review Guidelines, including restrictions on unauthorized use, disclosure, advertising, profiling, data brokerage, and cross-app tracking.

8.2 Apple and App Store Services

If you download PSL Max through the Apple App Store or purchase paid features through Apple, Apple may process information under its own policies. We may receive purchase status and entitlement information from Apple to operate subscriptions or in-app purchases.

8.3 Community Visibility

Community content you submit may be visible to other users. This may include your username, posts, comments, replies, votes, saves, timestamps, profile-related information, and other information depending on the feature.

8.4 Safety, Legal, and Rights Protection

We may disclose information if we believe it is reasonably necessary to:

Comply with law, legal process, court orders, subpoenas, or government requests;
Enforce our Terms or Community rules;
Investigate security incidents, fraud, spam, abuse, harassment, exploitation, threats, or illegal conduct;
Protect the rights, property, or safety of PSL Max, users, or others;
Respond to intellectual property, privacy, safety, or moderation claims;
Prevent death, serious injury, self-harm, exploitation of minors, or other serious harm where permitted by law.

8.5 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to this Policy or another policy disclosed to you.

8.6 Aggregated or De-Identified Information

We may use and share aggregated or de-identified information that does not reasonably identify you for analytics, research, product improvement, reporting, or business purposes. We do not attempt to re-identify information that we maintain as de-identified except as permitted by law.

9. Data We Do Not Sell or Use for Advertising

We do not sell your personal information in the ordinary meaning of selling data for money.

We do not share your face images, generated images, facial mapping data, scan-derived facial data, or Community content with data brokers.

We do not use data gathered from depth or facial mapping tools, Camera APIs, ARKit, or Photo APIs for advertising, marketing, or use-based data mining, including by third parties.

We do not use sensitive data such as face images, scan-derived appearance data, generated images, or TrueDepth-derived data for targeted advertising.

We do not use face images, facial geometry, TrueDepth-derived data, scan-derived appearance information, or generated images for facial recognition, biometric identification, authentication, targeted advertising, advertising measurement, data brokerage, cross-app tracking, or cross-site tracking.

If we ever introduce advertising, tracking, cross-context behavioral advertising, or data-sharing practices that require additional notice or consent, we will update this Policy and obtain any required permission before doing so.

10. Cookies, SDKs, Tracking Technologies, and Do-Not-Track Signals

The PSL Max app and websites may use cookies, local storage, SDKs, pseudonymous user IDs, product interaction data, or similar technologies for necessary functionality, security, analytics, entitlement management, support, abuse prevention, and service improvement.

We do not currently use these technologies to track you across third-party apps or websites for targeted advertising unless otherwise disclosed and consented to where required.

Some web browsers offer “Do Not Track” signals. Because there is no uniform industry standard for responding to such signals, our websites may not respond to Do Not Track signals unless required by applicable law. Where legally required, we will honor recognized opt-out preference signals, such as Global Privacy Control, in the manner required by law.

You may be able to control cookies through your browser settings and app permissions through iOS settings.

11. Data Retention

We keep information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, maintain security, comply with law, resolve disputes, enforce agreements, support users, and operate backups.

Actual retention depends on the data type and feature:

Data Type	Typical Retention
On-device onboarding preferences, profile inputs, cooldowns, scan history, local image paths, and routine data	Until you delete/reset it in the app, uninstall the app, or the data is otherwise removed according to app behavior
Local scan images and generated images stored on your device	Until you delete them, clear app data, uninstall the app, or use an in-app deletion/reset feature where available
Face scan images, facial geometry, depth information, TrueDepth-derived mesh or facial mapping data, scan-derived appearance data, and related scan metadata stored by PSL Max servers	Retained for up to 30 days to provide face scans, scan history, analytics, support, abuse prevention, debugging, safety, moderation, service security, and related app functionality. After this period, the data is deleted or anonymized unless longer retention is required by law, security, fraud prevention, dispute resolution, or active support requests.
Generation request source images and generated outputs processed by PSL Max servers	Retained for up to 30 days to create the requested generated image, operate the feature, support users, investigate abuse, maintain safety and security, troubleshoot technical issues, and satisfy legal obligations. After this period, the data is deleted or anonymized unless longer retention is required by law, security, fraud prevention, dispute resolution, or active support requests.
AI provider processing records	Subject to provider retention, abuse-monitoring, security, legal, and account settings. PSL Max requires AI service providers that process user data, including OpenAI, to process user data only as needed to provide services to PSL Max and to provide the same or equal protections described in this Privacy Policy.
Community username and Community content	Until deleted, removed, or disabled, subject to moderation, backup, audit, legal, safety, and abuse-prevention retention
Reports, blocks, moderation records, and abuse-prevention data	As long as reasonably necessary to protect the Service and users
Support emails and correspondence	As long as reasonably necessary to handle the request, maintain records, and comply with legal obligations
Purchase and entitlement records	As long as needed to provide access, comply with tax/accounting/legal requirements, and resolve disputes
Product interaction, safety, support, and service security records	Typically retained for a limited period needed for security, debugging, analytics, support, and service operation, unless longer retention is needed for safety, legal, or fraud-prevention purposes
Backups	Retained for a limited backup lifecycle and deleted according to backup rotation schedules

When we no longer need information, we may delete it, anonymize it, aggregate it, or securely retain it in backups until deletion is possible according to backup cycles.

12. Your Choices and Controls

Depending on your location and the features you use, you may have the following choices.

12.1 Device Permissions

You can manage Camera, Photos, Notifications, and other device permissions through iOS settings. If you deny a permission, some features may not work.

You may decline or withdraw Face Scan & AI Processing Consent for face scan processing and AI image generation features that require transmission of face scan data or AI generation data.

If you decline consent, PSL Max will not begin the scan or AI generation request that requires this consent. If you withdraw consent later in Settings, future face scans and AI generation requests that require this consent will stop working unless and until you consent again.

Withdrawing consent will stop future processing that requires consent. It may not delete information that has already been processed where retention is required or permitted for security, legal, billing, support, abuse-prevention, provider-retention, backup, or record-retention reasons.

12.3 Local Data Deletion

Where available, you may delete local scan images, generated images, routine data, preferences, and other local app data through in-app controls. You may also delete the app from your device, though deleting the app may not delete information already transmitted to our servers or third-party providers.

12.4 Community Controls

Where available, you may delete or edit your content, report content, block users, and request moderation assistance. Some information may remain in backups, moderation logs, safety records, or legal records.

12.5 Marketing Communications

If we send marketing emails, you may opt out by following the unsubscribe instructions or contacting us. We may still send service, safety, legal, purchase, or account-related messages.

12.6 Privacy Requests

You may contact us to request access, deletion, correction, portability, restriction, objection, or withdrawal of consent where applicable. We may need to verify your request and may retain certain information where permitted or required by law.

Contact: finances@ajxstudios.com

Users may request deletion of stored face scan images, scan-derived facial data, TrueDepth-derived data, generated images, and associated account data by contacting finances@ajxstudios.com. Verified deletion requests will be processed within a reasonable period, subject to legal, security, fraud-prevention, backup, dispute-resolution, active support, and record-retention requirements.

13. Regional Privacy Rights

Depending on where you live, privacy laws may provide additional rights. These may include the right to:

Know what personal information we collect, use, disclose, sell, or share;
Access a copy of your personal information;
Correct inaccurate personal information;
Delete personal information;
Receive a portable copy of personal information;
Object to or restrict certain processing;
Withdraw consent;
Opt out of certain sales, sharing, targeted advertising, or profiling where applicable;
Limit certain uses or disclosures of sensitive personal information where applicable;
Appeal a denied privacy request where required by law;
Lodge a complaint with a privacy authority.

To exercise rights, contact finances@ajxstudios.com. We may ask you to provide information needed to verify your identity and process your request. If you use an authorized agent, we may require proof of authorization where permitted by law.

We will not discriminate against you for exercising privacy rights, though some features may not work if we cannot process information needed to provide them.

EEA, UK, and Switzerland

If you are located in the EEA, UK, or Switzerland, you may have rights to access, correct, delete, restrict, object, transfer your information, and complain to a data protection authority. Where we rely on consent, you may withdraw consent at any time.

Canada

If you are located in Canada, you may have rights to access, correct, and withdraw consent to certain processing, subject to legal exceptions. We may rely on express or implied consent depending on the context and applicable law.

Other Regions

Users in other regions may have similar rights under local privacy laws. Contact us and we will respond in accordance with applicable law.

14. California Notice at Collection and Privacy Rights

This section applies to California residents and is intended to supplement the rest of this Policy.

14.1 Categories of Personal Information We May Collect

Category	Examples in PSL Max	Collected?
Identifiers	Community username, pseudonymous user ID, account identifier, or community identifier	Yes
Customer records information	Purchase entitlement records and support correspondence if you contact us	Yes, if applicable
Protected classification characteristics	Not collected in the current Build 1.0 (5) app flow	No
Commercial information	Subscription or in-app purchase entitlement status	Yes, if paid features are used
Internet or network activity	Product interaction data, feature interactions, scan attempts, generation attempts, and Community interactions	Yes
Geolocation	Not collected in the current Build 1.0 (5) app flow	No
Audio, electronic, visual, or similar information	Face scan images, selected photos, generated images, and support attachments you choose to submit	Yes
Biometric information	Face-related geometry, TrueDepth-derived facial mapping data, facial landmark data, or scan-derived face data, if collected and considered biometric under applicable law. PSL Max does not use this data for biometric identification, facial recognition, or authentication.	Yes, if face-scan features are used
Health or body-related information	Head/face scan information and scan-derived appearance information when treated as health-adjacent or sensitive under applicable law	Yes, if face-scan features are used
Inferences	PSL estimates, potential estimates, routine personalization, generated insights	Yes
Sensitive personal information	Face images, face scan data, TrueDepth-derived data, scan-derived appearance data, generated images, and related consent or safety metadata	Yes, depending on features used

14.2 Sources

We collect personal information from you, your device, your use of the Service, Apple, service providers, AI providers, community users, and security/support systems.

14.3 Purposes

We collect and use personal information for the purposes described in Sections 5 and 6, including app functionality, product personalization, security, fraud prevention, analytics, support, legal compliance, and service improvement.

14.4 Disclosure

We may disclose personal information to the categories of recipients described in Section 8.

We do not sell personal information for money. We do not knowingly sell or share personal information of users under 16. We do not use sensitive data for targeted advertising. If our practices change, we will update this Policy and provide required opt-out rights.

14.6 Retention

We retain personal information as described in Section 11.

14.7 California Rights

California residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit certain sensitive personal information uses, and not be discriminated against for exercising rights. Contact finances@ajxstudios.com to exercise these rights.

15. Children and Minors

PSL Max is not intended for children. You must be at least 17 years old to use PSL Max, or older if required by local law.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without required consent, we will take reasonable steps to delete it.

Users may not upload, generate, post, or share images of minors through Community or AI generation features unless expressly permitted by the app and lawful guardian consent has been obtained. Sexual, exploitative, humiliating, harassing, or objectifying content involving minors is strictly prohibited.

Parents or guardians may contact us at finances@ajxstudios.com regarding privacy concerns.

16. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. These may include encryption in transit, access controls, provider controls, logging, monitoring, data minimization, and security review practices.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk. You are responsible for protecting your device, credentials, and account access.

17. International Data Transfers

We may process and store information in the United States and other countries where we or our service providers operate. These countries may have data protection laws different from those in your jurisdiction.

Where required, we use appropriate safeguards for international transfers, such as contractual protections or other legally recognized transfer mechanisms.

18. Third-Party Services

PSL Max may rely on third-party services for hosting, AI generation, analytics, diagnostics, payments, moderation, support, infrastructure, and security. Third-party services may process information according to their own policies and our agreements with them.

Where third-party service providers process user data on PSL Max’s behalf, PSL Max requires them to provide the same or equal protections described in this Privacy Policy and required by applicable platform rules, including limitations on unauthorized use, disclosure, advertising, profiling, data brokerage, and cross-app or cross-site tracking.

We are not responsible for third-party websites, apps, platforms, or services that are not controlled by PSL Max.

19. Changes to This Policy

We may update this Policy from time to time. The updated version will be indicated by an updated “Last Updated” date and will be effective when posted or when otherwise stated.

If we make material changes, we may notify you in the app, by email, through the App Store, or by other reasonable means. If a change materially affects how we share personal data with third-party AI providers or how we use sensitive data, we will request additional consent where required.

We encourage you to review this Policy regularly.

20. Contact Us

For privacy questions, requests, or complaints, contact:

AJX Studios L.L.C. Email: finances@ajxstudios.com

21. How to Review, Update, or Delete Your Data

You may review, update, or delete certain data directly in the app where controls are available. You may also contact us at finances@ajxstudios.com to request help reviewing, updating, deleting, or exporting information.

When you make a request, include enough information for us to identify your data, such as your Community username, pseudonymous app user ID if available, and a description of the request. Do not send unnecessary sensitive information in your request.

We may need to verify your identity before fulfilling a request. We will respond in accordance with applicable law. Some information may be retained where required or permitted for security, legal, billing, tax, accounting, dispute-resolution, safety, moderation, backup, or abuse-prevention reasons.