0. Contact and personal data
For any question regarding your data or to exercise your rights, write to our dedicated data-protection address: privacy@phimetra.com
1. Data collected
Phimetra collects only the data required for aesthetic pre-consultation:
- Face photo (automatically deleted no later than 30 days after capture)
- A numerical face signature, computed for the analysis and deleted within the same period as the photo
- Name, e-mail, phone (if you provide them for a quote or an appointment)
- Results of the aesthetic analysis and simulation (kept for your history)
2. Data usage
Your data is used exclusively to:
- Generate your personalised aesthetic overview (indicative visualisation for illustrative purposes only · does not imply a guaranteed result)
- Create your indicative before/after visualisation (aesthetic simulation, no guaranteed outcome)
- Send your PDF pre-consultation report (if requested)
- Facilitate appointment booking (if requested)
3. Where your data is processed
The application and database are hosted at OVHcloud in Strasbourg (France). Photo analysis is performed by Scaleway in Paris. For a signed-in account, the visual simulation is produced by fal.ai (United States), unless the practitioner checks Medical privacy: the photo then stays in the European Union, that choice is recorded, and it is not sent to fal.ai. With a paid subscription in force, Germany is used if that engine answers; otherwise the calculation stays in France. Without that subscription, the calculation stays in France. The public path without an account is computed on the server in France. The link sent to the patient stays in the European Union, unless the clinic has allowed processing outside the EU and the patient has consented. Stored photos stay in France, for 30 days at most. Encrypted in transit and at rest.
Sub-processors involved in the service:
- OVHcloud — France (Strasbourg) — Hosting of the application server and database (VPS)
- Scaleway — Generative APIs — France (Paris) — Analysis of the photo by an AI model (Mistral Small 3.2; fallback Mistral Medium 3.5, same provider, same region)
- IONOS Cloud — AI Model Hub — Germany — Rendering of the visual simulation (FLUX.2 [klein] 4B model); the treated area is then recomposed onto the original photo on our server in France (being activated; until then, approximate preview computed on our server in France)
- fal.ai (comptes connectés) — United States (outside the EU) — Visual simulation for signed-in accounts, in the United States, when the practitioner does not check Medical privacy. That choice is recorded. If the box is checked, the photo is not sent to fal.ai and stays in the European Union: Germany when a paid subscription is in force and that engine answers, otherwise the server in France. The public path without an account stays in France. The link sent to the patient stays in the European Union unless the clinic has allowed it and the patient has consented.
- Scaleway — Transactional Email — France (Paris) — Delivery of transactional e-mails (confirmation, appointment, quote)
- Stripe — Ireland (EU) — Payment of the clinic's subscription
Detailed, versioned and dated list (entities, safeguards, history): /legal/security
Clinics and practitioners: data processing agreement (Art. 28 GDPR): /legal/dpa
4. Security
- Encryption in transit (TLS / HTTPS) between your browser, our server and each sub-processor.
- Encryption at rest: the database and temporary files are stored in an encrypted volume (LUKS2, AES-256) whose key is not stored on the server.
- Access log: every view, export, modification, deletion or sharing of a record through the application is recorded (without the IP address in clear) and kept for 12 months.
- Administrator access restricted to a single person (the publisher). No image of your face is ever sent by e-mail.
- Phimetra and its AI sub-processors never use your photos or results to train models.
5. Retention
- Face photos and derived signature: deleted no later than 30 days after capture.
- Temporary simulation files: erased as soon as the result has been read, and no later than 2 hours afterwards.
- Analyses, appointments, simulations, quotes and access log: deleted 12 months after creation.
6. Your rights (GDPR)
You have the right of access, rectification, erasure, restriction, portability and objection. To exercise them: privacy@phimetra.com
You may lodge a complaint with the CNIL (French data-protection authority): www.cnil.fr or with the data-protection authority of your country of residence (in Spain, the AEPD): www.aepd.es
7. E-mail correspondence
Messages sent to contact@phimetra.com and privacy@phimetra.com go through Cloudflare Email Routing and are read in a Google (Gmail) mailbox. This channel is not used to process photos: do not attach any photo.
8. Cookies and advertising pixel
On the pages of the patient journey, only essential cookies (session, consent) are used and the Meta advertising pixel never loads. On marketing pages, this pixel only loads after your consent.