Privacy

ALBATROS (Jordan) operates this service. For data protection purposes we are the controller. Contact: privacy@albatros.jo.

1. It is resized in your browser first. The full-resolution original never leaves your device — only a downscaled copy is sent.
2. It is sent to our server over an encrypted connection, held in memory, and forwarded to our analysis providers.
3. It is never written to disk or to any storage bucket by us. There is no database row containing it, no file, and no log line containing image data.
4. It is discarded when the request ends, typically within 30 seconds.

There is no account, so there is no profile to accumulate and nothing tying a scan to your identity.

A photograph of your skin can constitute health-related data and, in some jurisdictions, biometric data. We treat it as sensitive regardless of which label applies in your country.

Our lawful basis is your explicit consent, given on the consent screen before any image is uploaded. You may withdraw consent at any time by not using the service; because nothing is retained, there is nothing left to delete afterwards.

We do not perform facial recognition. We do not extract or store a face template, and we make no attempt to identify who is in an image.

Your image is sent to the following third parties purely to perform the analysis:

• Anthropic (Claude API) — vision analysis and report writing. Anthropic states that API inputs are not used to train its models.
• Google (Gemini API) — second-opinion vision analysis. Data handling is governed by Google's paid-tier API terms.
• Vercel — hosting and request routing.

These providers may retain data briefly for abuse monitoring under their own terms. We have no control over that retention and we do not have access to it. Please read their policies if that matters to you.

This means your image is transferred outside Jordan and outside the EEA. Transfers rely on the providers' standard contractual clauses.

• Aggregate, non-identifying counts — how many analyses ran, how long they took, error rates. No image data, no observation content.
• A short-lived rate-limit counter keyed to a hash of your IP address, held in memory for up to one hour, so the endpoint can't be abused.
• Your language preference, stored in your own browser. It never reaches our servers.

Your report exists in your browser tab and nowhere else. If you close or refresh the page, it is gone and cannot be recovered — not by you and not by us. Save or print it if you want to keep it.

Depending on where you live you may have rights of access, rectification, erasure, restriction, portability and objection. In practice, because we retain no personal data from a scan, an access or erasure request will find nothing to act on. We will confirm that in writing if you ask.

Requests: privacy@albatros.jo. You also have the right to complain to your local data protection authority.

This service is not directed at anyone under 18 and we do not knowingly process images of minors. Our models are instructed to abort the analysis and return nothing if there is any indication the subject may be a minor.

If we ever change this in a way that means images are retained, we will say so on this page and on the consent screen before the change takes effect. It will never happen silently.