Scored — Privacy Policy

1. Introduction

Scored ("we", "us", "our") is committed to protecting your privacy and handling your personal data with transparency, integrity, and respect. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data when you use the Scored App ("App").

This Policy applies to all users of the Scored App globally. Where regional privacy laws apply (such as the GDPR in the European Economic Area, CCPA in California, or PDPA in applicable Asian jurisdictions), we honour those additional rights and obligations.

By using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, please discontinue use of the App.

2. Information We Collect

2.1 Information You Provide

Account Information: Your email address, collected at the time of registration for the purpose of authentication via OTP;
Photos: Photographs you voluntarily upload to the App for analysis;
Usage Context: Your selected context for photo use (Business, Dating, or Social), which directly informs our analysis algorithm;
Payment Information: Billing details required to process your subscription. Payment transactions are processed by third-party payment processors; we do not store full payment card data.

2.2 Information Collected Automatically

Device and Technical Data: Device type, operating system, app version, IP address, and unique device identifiers;
Usage Data: Features accessed, frequency and duration of use, interaction patterns within the App;
Log Data: Server logs including timestamps, error reports, and crash diagnostics;
Analytics Data: Aggregated and anonymised data collected through analytics tools to understand user behaviour and improve the App.

2.3 Sensitive Data

Photos uploaded to Scored may contain or reveal sensitive information, including biometric data and physical characteristics. We process this data solely to deliver the analysis service you requested. We do not use uploaded photos for facial recognition, identity verification, or any purpose beyond the score and recommendation outputs described in our Terms of Use.

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To process your uploaded photos, generate scores and recommendations, and present analysis results within the App;
Authentication: To verify your identity via OTP during login;
Subscription Management: To process payments, manage your subscription, and send billing-related communications;
App Improvement: To analyse usage patterns, diagnose technical issues, and improve the performance and features of the App;
Communications: To send transactional emails (OTPs, subscription confirmations, policy updates) and, where you have opted in, promotional communications;
Legal Compliance: To comply with applicable laws, regulations, and legal processes;
Safety and Security: To detect, prevent, and address fraud, abuse, and security incidents.

We do not use your photos or analysis results for advertising purposes, nor do we sell your personal data to third parties.

4. Legal Basis for Processing

For users in jurisdictions requiring a legal basis for data processing (including the EEA and UK), we process your data under the following bases:

Contractual Necessity: Processing required to deliver the App services you have subscribed to;
Legitimate Interests: Improving App performance, ensuring security, and preventing abuse;
Consent: Where you have opted in to marketing communications or where processing of sensitive data requires explicit consent;
Legal Obligation: Where we are required to process data to comply with applicable laws.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:

5.1 Service Providers

We engage trusted third-party service providers to support our operations, including cloud hosting providers, payment processors, email delivery services, and analytics platforms. These providers are bound by contractual obligations to process your data only as instructed by us and in accordance with applicable privacy laws.

5.2 Legal Requirements

We may disclose your information where required to do so by law, court order, or governmental authority, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Scored, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of our business, your personal data may be transferred as part of that transaction. We will notify affected users and provide options where required by law.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

Account Data (email address): Retained for the duration of your account and for up to 12 months following account deletion, for legal and audit purposes;
Uploaded Photos: Retained for a maximum of 30 days following analysis, after which they are permanently deleted from our servers unless you have saved them in your account history;
Analysis Results and Scores: Retained within your account for the duration of your subscription;
Payment Records: Retained for up to 7 years as required by financial and tax regulations;
Log and Diagnostic Data: Retained for up to 90 days.

You may request earlier deletion of your data at any time, subject to legal retention obligations (see Section 8).

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit using TLS (Transport Layer Security);
Encryption of stored photos and sensitive data at rest;
Access controls restricting data access to authorised personnel only;
Regular security audits and vulnerability assessments;
OTP-based authentication to prevent unauthorised account access.

No method of transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you;
Right to Rectification: Request correction of inaccurate or incomplete data;
Right to Erasure: Request deletion of your personal data (subject to legal retention obligations);
Right to Restrict Processing: Request that we limit how we use your data in certain circumstances;
Right to Data Portability: Receive your personal data in a structured, machine-readable format;
Right to Object: Object to processing based on legitimate interests or for direct marketing;
Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing;
Right to Lodge a Complaint: File a complaint with your local data protection authority.

How to Revoke Consent: You may withdraw your consent to data processing at any time using any of the following methods: (a) Setting in App; (b) by emailing support@goscored.com with the subject line "Withdraw Consent" and specifying the processing activity you wish to withdraw consent from; or (c) by deleting your account (see Section 10 of our Terms of Use for the account deletion process). Upon receipt of a valid withdrawal request, we will cease the relevant processing as soon as reasonably practicable and notify you of the actions taken. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at: support@goscored.com. We will respond to all verifiable requests within 30 days (or within the timeframe required by applicable law).

9. Cookies and Tracking Technologies

The Scored App may use cookies and similar tracking technologies to enhance user experience, remember preferences, and gather analytics data. You may control cookie preferences through your device or browser settings. Disabling certain cookies may affect App functionality. We do not use tracking technologies for cross-site advertising.

10. International Data Transfers

Scored operates globally. Your data may be transferred to and processed in countries other than your country of residence, where data protection laws may differ. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by relevant authorities, or other legally recognised transfer mechanisms.

11. Children's Privacy

Scored is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a person under 18, we will promptly delete such data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or in-App notification at least 14 days prior to the changes taking effect. The updated Policy will display the revised effective date. Your continued use of the App after changes take effect constitutes your acceptance of the revised Policy.

13. AI Processing and Automated Decision-Making

Scored's core functionality relies on artificial intelligence and machine learning models to analyse photographs and generate scores and recommendations. This section explains how your data is processed in the context of AI analysis and what rights you have in relation to automated processing.

13.1 How AI Processes Your Photo

When you upload a photograph to Scored, it is transmitted securely to our processing servers where our AI models perform an automated analysis. The AI evaluates visual attributes within the photo — such as composition, lighting, facial characteristics, and contextual suitability — against trained parameters and generates scores across multiple dimensions. The context you select (Business, Dating, or Social) is used to weight and calibrate the analysis output accordingly. No human reviewer examines your individual photo during this process.

13.2 Third-Party AI Services and Explicit Consent

Where Scored utilises third-party artificial intelligence or machine learning services to assist in photo analysis. Third-party AI service providers engaged by Scored are bound by data processing agreements that restrict their use of your data to the provision of the requested service only. They are not permitted to retain, sell, or use your photographs for their own model training or any other purpose without your separate, explicit consent.

13.3 Data Used for AI Training

We may use anonymised and aggregated analytical outputs (not your original photos or any personally identifiable information) to improve and retrain our AI models over time. We will not use your identifiable photos to train our AI models without your explicit, separate consent. Where required by applicable law, we will provide you with the ability to opt out of any such use.

13.4 Limitations of AI Analysis

AI-generated scores and recommendations are probabilistic outputs based on pattern recognition and statistical modelling. They do not constitute objective measurements of a person's appearance, character, ability, or value. Scored's AI models may reflect biases present in training data. We are committed to ongoing model evaluation to mitigate such biases. Results should be interpreted as one data point and not as a definitive or authoritative assessment.

13.5 Your Rights Regarding Automated Processing

Where applicable law grants you rights in relation to automated decision-making (including under the GDPR), you have the right to request a human review of any automated analysis, to object to solely automated processing that produces legal or similarly significant effects, and to obtain an explanation of the logic involved in our AI scoring.

14. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact our Privacy team: