Privacy Policy — KnuckleMax

• Data controller: Axiome — Hugues ROMAIN

• Contact / exercising your rights: huguesromaindev@gmail.com

• Application: KnuckleMax (com.axiome.knucklemax)

Account data: identifier, email where applicable, first name, language, declared age, and preferences (look, level).

Submitted media: photographs of your hands when you use the scan.

Aesthetic analysis data: computed metrics (Vein Index, Definition, Finish, Frame), Hand Score, rank, and scan history.

Protocol usage data: current week, checked care items, grip sessions, chosen look.

Subscription data and minimal technical data necessary for the operation of the Service.

• Provide the scan, Hand Score, and protocol — legal basis: performance of the contract.

• Analyze a hand photo to compute aesthetic metrics — legal basis: performance of the contract / consent when required.

• Manage reminders you enable — legal basis: performance of the contract.

• Manage subscriptions and purchases — legal basis: performance of the contract.

• Ensure security and proper operation — legal basis: legitimate interest.

• Your hand photos are used solely to compute a Hand Score and run the protocol within the App.

• They are not used for advertising or third-party profiling.

• They are never used to train AI models.

• Supabase — hosting of the database, authentication, and file storage where applicable.

• Artificial intelligence providers — image analysis required for the scan, only for the duration of processing.

• Superwall and Apple / Google — management and processing of subscriptions and in-app purchases.

Your data is never sold or shared for advertising purposes.

• Data is hosted through our processors with appropriate security measures (encryption in transit, access controls).

• Each user only accesses their own data.

• Account data, scans, and protocol data are retained for as long as the account remains active.

• Account deletion triggers deletion of associated data, without prejudice to any legal retention obligations.

• Other data is retained for as long as necessary to provide the Service, then deleted or anonymized.

In accordance with the GDPR, you have the following rights:

• access to your data;

• rectification of inaccurate data;

• erasure (“right to be forgotten”) — you can delete your account directly within the App;

• objection to and restriction of processing;

• portability of your data;

• complaint with the competent supervisory authority (in France, the CNIL).

To exercise these rights: huguesromaindev@gmail.com.

We implement appropriate technical and organizational measures: secure authentication, access isolation, encrypted transmission, and data minimization.

KnuckleMax is intended for people aged 18 or over. If you are under 18, you must not use the App.

We may update this policy. In the event of a material change, you will be informed by an appropriate means. The last updated date appears at the top of the document.

For any questions regarding your personal data:

• Email: huguesromaindev@gmail.com

• Data controller: Axiome — Hugues ROMAIN