ExpressionMax · Elfion Mobile · Effective August 20, 2026
ExpressionMax (iOS/Android package identifier mobi.elfion.expressionmax; store name ExpressionMax: Camera Gym) is a photo-coaching application published by Elfion Mobile (“we”, “us”, “our”). This Privacy Policy describes how we collect, use, store, share, and protect information when you use ExpressionMax (the “App”) and related services (including our API hosted on Cloudflare Workers, e.g. expressionmax-api.*.workers.dev or a production API domain such as api.getexpressionmax.com).
By downloading, accessing, or using ExpressionMax, you agree to this Policy. If you do not agree, do not use the App.
Important — not a medical product: ExpressionMax’s Camera Score, angles, drills, and pose coaching are entertainment and photo coaching. They are not a medical diagnosis, attractiveness rating of your worth, ethnicity or identity inference, disease detection, or clinical assessment. Face landmarks used for scoring are measured on your device and are not uploaded for scoring.
This Policy applies to personal data processed in connection with ExpressionMax on mobile devices and our backend infrastructure. It does not cover third-party websites, app stores (Apple App Store / Google Play), or services that we do not control, even if linked from the App.
Controller / publisher contact: Elfion Mobile · elfionmobi@gmail.com · product support also hello@getexpressionmax.com
| Category | Examples | Purpose |
|---|---|---|
| Account | Anonymous user ID (Supabase Auth); optional Apple / Google sign-in | Provide the service; sync scan history & Pro status |
| Onboarding / goals | Selected goal (e.g. photos, dating, content); language; theme | Personalize coaching copy & UX |
| Scores & training | Camera Score, metrics JSON, workout history, plans, streaks | Show progress, drills, and ranked poses |
| Camera (on-device) | MediaPipe face/pose landmarks for scoring & drills | Compute scores and guide capture — landmarks stay on device |
| Optional images | Temporary compressed frame for AI copy; opt-in progress photos | Interpretation text / progress gallery you choose |
| Subscriptions | Entitlement via Apple/Google + RevenueCat | Unlock ExpressionMax Pro; restore purchases |
| On-device only | Local prefs; gym reminder schedule; gallery saves you trigger | UX on your device |
| Diagnostics (optional) | Firebase Analytics / Crashlytics when enabled | Stability & product improvement |
If you subscribe to ExpressionMax Pro (weekly, monthly, or yearly), payment is processed by Apple or Google. We receive entitlement/status information through RevenueCat and/or store APIs so we can unlock Pro features. We do not receive or store your full payment card number.
When Firebase Analytics / Crashlytics is configured in a release build, we may process aggregated usage events, device model, OS version, app version, crash stacks, and instance identifiers as processed by Google under their terms. If those SDKs are not enabled, we do not send that analytics traffic.
We do not sell your personal information. We do not use your face imagery to train unrelated third-party foundation models unless we clearly disclose a change and obtain any consent required by law. We do not use App Tracking Transparency-style cross-app advertising tracking.
Where GDPR-style rules apply, we process data under one or more of: performance of a contract (providing the App you requested); legitimate interests (security, product improvement, fraud prevention—balanced against your rights); consent where required (e.g., camera or notification permission; opt-in progress photos); and legal obligation when we must retain or disclose information.
We share data with vendors who process it on our instructions to operate ExpressionMax:
These providers may process data in the United States or other countries. Where required, we rely on appropriate transfer mechanisms offered by those providers (such as Standard Contractual Clauses).
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (with notice where required).
Uninstalling the App removes local device data but does not automatically erase server-side records tied to your user ID. Contact us as described below / on our Account Deletion page.
Depending on where you live, you may have rights to access, correct, delete, restrict, or port personal data, to object to certain processing, and to withdraw consent. You may also lodge a complaint with a supervisory authority.
Camera: You can deny or revoke camera permission in system settings; scan, gym, and shoot features that need the camera will not work without it.
Notifications: You can deny or revoke notification permission; local gym reminders will not fire without it.
Marketing ads: We do not currently run third-party ad networks inside ExpressionMax.
ExpressionMax is not directed to children under 13 (or the higher age required in your region for digital consent). We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided data inappropriately, contact us and we will take reasonable steps to delete it.
We use HTTPS in transit, access controls for production systems, and least-privilege service credentials. No method of transmission or storage is 100% secure; we encourage you to use up-to-date devices and protect your store accounts.
If you use ExpressionMax from outside the country where our servers or providers operate, your information may be transferred across borders. By using the App you understand those transfers may occur as described in this Policy.
We may update this Privacy Policy from time to time. The “Last Updated” date will change when we do. Material changes may be highlighted in the App or store listing. Continued use after an update constitutes acceptance of the revised Policy where permitted by law.
Privacy questions, data-subject requests, or deletion requests:
Last Updated: August 20, 2026
Version: 1.0
Publisher: Elfion Mobile · Package mobi.elfion.expressionmax