Privacy Policy

1. Who we are

The data controller is dimix.it di Dimitri Giani, Largo Riviera 7, Tirrenia, Pisa (Italy), VAT IT02381200506 (“we”, “us”).

You can reach us at dimix@dimix.it or, by certified email, at dimitri.giani@pec.it. We have not appointed a Data Protection Officer, as we are not required to.

This policy covers the JustSame — Look Alike iOS app and this website.

2. What we process, and why

Data	Why	Legal basis
The two photos you choose, and the facial measurements the app derives from them on your device	To run the comparison and return your similarity score and its breakdown. This is the whole point of the app.	Your consent (Art. 6(1)(a) GDPR), given by choosing the photos and tapping Match. You can withdraw it at any time by not running further comparisons.
Purchases (which JustCoin pack you bought, and when)	To credit your balance and provide the service you paid for. Apple handles the payment; we never see your card or your Apple ID.	Performance of a contract (Art. 6(1)(b) GDPR)
Technical and usage data: device model, OS version, app version, language, country, crash reports, in-app events	To keep the app working, fix crashes and understand which features are used.	Legitimate interest in a functioning app (Art. 6(1)(f) GDPR), and your consent where tracking requires it under Apple's ATT prompt.
Push notification token, if you allow notifications	To send you service or product messages. You choose whether to allow this, and can turn it off in iOS Settings at any time.	Your consent (Art. 6(1)(a) GDPR)
What you write to support	To answer you.	Legitimate interest in replying to you (Art. 6(1)(f) GDPR)

We do not ask you to create an account, and we do not ask for your name, address or date of birth. We do not sell your data, and we do not use it for advertising profiling — the app shows no third-party ads.

3. What happens to your photos, step by step

1. You pick two photos from your library or take them with the camera. The app reads them on your device.
2. The app sends both photos, and the facial measurements it computed from them, to our server over an encrypted connection (HTTPS).
3. Our server forwards them to our AI provider, Anthropic, which analyses the two faces and returns the score and the five-area breakdown.
4. We pass the result back to your app. The photos are not written to disk on our server: they exist only in the temporary memory of the request, and the operating system discards them when the request ends.

Only send photos you are entitled to use. If a photo shows someone else, you are responsible for having their agreement before comparing it.

4. Who else processes your data

We rely on a small number of providers, each acting as a data processor on our instructions:

Provider	What they do	Where
Anthropic PBC	Runs the AI comparison on the two photos and returns the result. Under our agreement, the images are processed only to produce that result and are not used to train models.	United States
Apple Inc.	Distributes the app and processes all purchases. Your payment details go to Apple, never to us.	EU / United States
Google Ireland Ltd. (Firebase)	Crash reporting, app analytics and push notifications.	EU / United States
Our hosting provider	Runs the server that receives the comparison request.	European Union

Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses, together with the supplementary measures required by Art. 46 GDPR.

We may also disclose data where the law requires it — for example to comply with a binding order from a public authority.

5. How long we keep things

• Photos and facial measurements: not retained. They live only for the seconds the comparison takes. Your results stay on your device, and deleting the app deletes them.
• Server error logs, which may record that a request failed and why, are kept for up to 30 days for security and debugging, then overwritten.
• Analytics and crash data are kept by Firebase for the retention period set in that service, up to 14 months.
• Purchase records are kept by Apple; any record we hold is kept for as long as tax law requires (10 years in Italy).
• Support emails are kept for up to 24 months after the exchange ends.

6. Your rights

Under Articles 15 to 22 GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or hand it over in a portable format. Where processing rests on your consent, you can withdraw that consent at any time, without affecting what was done before.

Write to dimix@dimix.it and we will answer within one month. Note that, because we do not retain your photos and do not hold an account in your name, there is usually very little for us to retrieve or erase.

If you think we have handled your data badly, you can complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali) or to the authority where you live.

7. Children

JustSame is not intended for anyone under 14, the age of digital consent in Italy, and we do not knowingly process the data of younger children. If you believe a child has used the app and sent us data, write to us and we will delete whatever we hold.

8. Security

Traffic between the app, our server and our providers travels over TLS. Access to the server is restricted and the API requires an application key. No system is perfectly secure, but not storing your photos removes the risk that matters most.

9. Changes to this policy

If we change how we handle your data we will update this page and change the date at the top. When a change is significant, we will also tell you in the app.

10. Contact

dimix.it di Dimitri Giani — Largo Riviera 7, Tirrenia, Pisa (Italy)
Email: dimix@dimix.it — PEC: dimitri.giani@pec.it

See also our Cookie Policy and Terms & Conditions.