ProfileMaxPrivacy Policy
This policy explains what information ProfileMax collects when you use our website and apps, MAX (on the web, in the app and in Telegram), the Photo Check, the Profile Makeover, the Dating Profile Blueprint, Photo Enhance and weekly tracking — and how that information is used, shared, kept and deleted, and what rights you have.
1. Who is responsible
ProfileMax is operated by Elgiv Ltd. (company no. 516471059), 4 Nissim Aloni St., Rosh HaAyin, Israel, which is responsible for your personal information ("we", "us"). For privacy questions or requests, email privacy@getprofilemax.com or .
2. Scope and eligibility
ProfileMax is intended only for adults aged 18 or older. By using the service you confirm that you are 18 or older.
3. Information we collect
- Account and sign-in: your email address and sign-in details (including Google or Facebook sign-in, if you use it: then also the name and profile picture of that account).
- About you (optional): what you choose to tell us in your account: the name MAX should use, how MAX should address you (as a man, as a woman or gender-neutral), who you want to meet, your year of birth and where you live. You can change or clear them anytime in Account settings.
- Photos: the photos you upload, any enhanced versions you create with Photo Enhance, and anyone else who appears in them. Before upload, the website and the app remove the information your camera stored in the file, such as where and when it was taken (the website can't remove it from HEIC files, which are uploaded as they are).
- Results: your Photo Check analyses, Profile Makeover results and Photo Enhance reviews.
- Dating Profile Blueprint: your answers (for example your work, interests and how you'd introduce yourself).
- Chats with MAX: your conversations on the web, in the app and in Telegram, including any messages from a match that you paste or type in, and the summaries MAX keeps of a long chat so he can remember it.
- Weekly tracking: the numbers and profile-change notes you enter.
- Payments: what you bought, purchase and subscription status, amounts, dates and the payment reference from PayPal, Apple or Google. We do not receive or store your card details.
- App and device: in the app, your phone's platform (iOS or Android), a notification token if you allow notifications, a random ID for usage analytics if you allow it, and your answer to the app's AI permission (with its date), kept on your account as a record of your choice.
- Usage and technical data: how the site and app are used (for example, which buttons are pressed and when a check or purchase is completed), recorded in our own product event records and, with your consent or after our notice depending on where you are, in Google Analytics and, on the website, Contentsquare (see Cookies and analytics); a count, with no account, ID or message text, of how often MAX shows crisis lines (see the MAX Safety Protocol); and the IP address, browser and request details our hosting providers log when you connect.
- Support and reports: what you send us when you contact support or report misuse, and the reports you make about an AI answer, result or photo (what you reported, the reason and your optional note).
- Purchase consent: when you buy on the website, the time you accepted the Terms and which version, as a record of your request for immediate access.
- Emails we send you: a record of which order confirmations and renewal notices we emailed, so we don't send them twice.
Sensitive information. Who you want to meet, how MAX should address you, and what you tell MAX may reveal your sexual orientation, your sex life or your health. All of it is optional. If you provide it, we use it only to give you the service you ask for, based on your explicit choice to provide it; you can clear or delete it at any time.
4. How we use information, and why
- To provide the service you asked for — the Photo Check, Profile Makeover, Blueprint, Photo Enhance, MAX, weekly tracking, notifications you turned on, and MAX in Telegram if you connect it (performing our contract with you).
- To process payments and subscriptions, and to answer support and refund requests (contract; and keeping accounting records the law requires).
- To keep the service secure, enforce our Terms and prevent abuse, for example limiting free checks and stopping bots (our legitimate interest in a safe service).
- To understand and improve the product from usage data (with your consent where the law requires it, otherwise our legitimate interest).
- To comply with the law and respond to lawful requests.
We do not sell your personal information, share it for advertising, use your photos, results or chats in marketing, or use them to train AI models. The AI's analyses help you decide what to do; they don't make decisions about you with legal or similarly significant effects.
5. AI processing
To generate analyses, makeovers, enhancements and MAX's replies, the relevant information is sent to our AI provider, currently Google, through its paid Gemini API service. Depending on the feature, that means your photos, your results, your about-you details, Blueprint answers and weekly tracking, and your chat with MAX, including any messages from others you paste in. Under Google's terms for its paid Gemini API service, Google does not use this content to improve its products, but may keep it for a limited period, for example to detect abuse. We do not claim zero retention by the AI provider. ProfileMax keeps its own copy as described in this policy.
On the website and in Telegram, these features send the information when you use them. In the ProfileMax app, we ask for your permission before your photos or messages are first sent to the AI provider. You can withdraw it at any time under Profile, AI processing; the app then asks again before the next use. Withdrawing it in the app doesn't affect the website or Telegram.
6. Who we share information with
We share information only with the service providers that run ProfileMax for us, each for its own task:
- Google (Gemini API) — AI processing of photos and text.
- Google (Analytics and sign-in) — usage measurement, according to your choice (see Cookies and analytics), and optional Google sign-in.
- Contentsquare — website usage measurement and anonymised recordings of how our public pages are used, according to your choice (see Cookies and analytics).
- Meta (Facebook sign-in) — only if you sign in with Facebook; we receive your name, email address and profile picture, and don't access your posts, photos or friends.
- Cloudflare (Turnstile) — a bot check when you run the Photo Check without an account; it sees your IP address and basic browser signals.
- PayPal — payments and subscriptions on the website.
- Apple and Google Play — purchases and subscriptions in the app, and delivery of app notifications.
- Expo — sending app notifications and delivering app updates.
- Telegram — only if you connect MAX to Telegram; your messages there pass through Telegram.
- Hosting, database, email and fonts — our hosting, database and storage providers (Render and Supabase) run the service and store your data; an email provider sends sign-in, password, order and renewal emails; our support mailbox is hosted by Google.
Each provider handles information under its own privacy policy and terms. Our staff don't look at your photos or MAX chats; when you report an AI output, they see what kind it was, the reason and your note, not the reported content. A small number of authorized staff, signed in with two-step verification, can see account and purchase details when needed for support, security or to investigate misuse; opening your account page and every action they take are logged.
We may also disclose information when the law requires it, to protect people's safety or our legal rights, or to a business that takes over ProfileMax, which must then respect this policy.
7. International transfers
ProfileMax is run from Israel, and our providers store and process information mainly in the United States and in other countries where they operate. When information from the European Union, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on our providers' safeguards, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
8. Cookies and analytics
ProfileMax uses a small number of cookies and similar browser storage. Some are essential to run the service and are always on; analytics cookies depend on where you are, as described below. We don't use advertising cookies.
- Essential (always on): your sign-in session, or a guest session when you run the Photo Check without an account (secure cookies starting with "sb-", kept until you sign out or the session expires; a guest session ends after 24 hours); after you open a password reset link, a marker that lets that session set your new password ("pm_recovery", one hour, deleted once the password is saved); Cloudflare Turnstile's bot check on the Photo Check page, when you have no account; your cookie choice ("pm_consent", one year); PayPal's own cookies on the checkout page, to process your payment; and short-lived browser storage the app needs, for example the photos you selected before signing in, kept only in your browser and deleted once they are restored or after 24 hours.
- Analytics: Google Analytics cookies ("_ga" and "_ga_…", up to two years) and, on the website, Contentsquare cookies (starting with "_cs_", up to 13 months), to understand how the service is used and improve it.
- Your choice: in the European Union and EEA, the United Kingdom, Turkey and Canada, or when we can't tell where you are from your device's time zone, the cookie banner asks first: nothing is sent to Google Analytics or Contentsquare, and no analytics cookie is set, unless you accept. Elsewhere, the banner tells you that we use analytics and lets you turn it off; if you carry on using the site, analytics is on, unless your browser sends a Global Privacy Control signal, which we treat as turning it off. You can change your choice at any time with "Cookie settings" at the bottom of the home page and our other public pages; declining removes the analytics cookies.
- In the app: the ProfileMax app follows the same rules on its first screens, with a random ID kept on your phone instead of a cookie. You can change your choice at any time under Profile, Usage analytics.
- Counting choices: when you answer the cookie banner or the app's analytics question, we count the answer (accepted, declined or carried on) with no ID and nothing stored on your device, so it is never linked to you. This shows us how often people say no.
- What we send: which pages and features are used, actions such as starting a Photo Check or a purchase, and your plan. When you are signed in, we send your account's ID number, never your email, name, photos or chat messages. Google Analytics keeps this data for at most 14 months.
- Contentsquare (website only): which pages are visited, how they are scrolled and clicked, and the same action names (for example, that a message was sent to MAX), without your account ID. On the home page and our public information pages it may also record how the page is used, as an anonymised replay; anything typed into a form and your photos are hidden before anything leaves your browser. MAX, the Photo Check, your results and photos, checkout, sign-in and your account are never recorded, and what you write to MAX is never sent.
- Without your browser: if analytics is on for you, events that happen elsewhere, such as a MAX Pro renewal or a message to MAX in Telegram, are also reported to Google Analytics with that account ID.
9. Photo privacy and storage
Uploaded and enhanced photos are kept in private storage that only your own signed-in account can access. They are not published or given public links, and they are sent outside ProfileMax only to our AI provider, as described in AI processing. Photo Enhance never overwrites your original photo.
Before you create an account. You can run the Free Photo Check without an account. Your photos and result are then kept the same way, in private storage under a temporary guest session that only your browser or app holds. If you create an account or sign in within 24 hours, they move into your account. If you don't, they are deleted automatically, together with the guest session, by a daily cleanup after the 24 hours. To limit free checks without an account, we keep a keyed one-way hash of your IP address (never the address itself) for up to three days. The same kind of hash, kept for a day, limits how often anyone can call the parts of the service that work without signing in.
10. Your rights and choices
- See and correct: you can see and edit your about-you details, Blueprint and tracking in the service. Download a copy of your data (a JSON file, with links to your photos) with Download my data in Account settings. For anything else, ask us.
- Delete: delete a single Photo Check (with everything made from it) in My Profile, delete individual MAX chats, delete your account at any time (see below), or ask us to delete particular information.
- Object, restrict or withdraw consent: turn analytics off with Cookie settings or in the app (we also honour your browser's Global Privacy Control signal), withdraw the app's AI permission, clear optional details, or ask us to stop or limit a particular use.
- Complain: you can complain to your data-protection authority — for example in the EU or UK your local supervisory authority, or in Israel the Privacy Protection Authority. We'd appreciate the chance to help first.
Depending on where you live (for example the EU, UK, Israel, Brazil or a US state such as California), these rights are guaranteed by law. Send requests to privacy@getprofilemax.com from the email address of your account, so we can confirm it's you. We answer within one month, or sooner where the law requires, and we never treat you differently for using your rights.
11. Deleting your account
You can delete your account at any time in Account settings, on the website or in the app. Deleting your account permanently removes everything you created:
- your photos (originals and enhanced versions);
- your Photo Check analyses and results, Profile Makeovers and Dating Profile Blueprint;
- your chats with MAX, on the web, in the app and in Telegram, their summaries, and your Telegram connection;
- your weekly tracking entries and app notification settings;
- your profile, including the about-you details, and your sign-in account.
If you have MAX Pro bought on the website or in Google Play, its renewal is cancelled first (at PayPal or Google Play), so you are not charged again. A subscription bought in the App Store is managed by Apple, and we can't cancel it for you: cancel it in your App Store subscription settings, because deleting your account or the app does not cancel it. The app and the website remind you of this before you delete your account. Messages in your Telegram app stay there until you delete them in Telegram.
We keep only: the record of each payment you made (product, amount, date and payment reference), which we need for accounting; a log of any actions our staff took on your account (for example a refund), with your email address and the reason, which we keep to protect our legal rights; and usage statistics that are no longer linked to you. Deleted data can remain in our providers' backups for a short period until they are overwritten.
12. How long we keep information
- Photo Checks you didn't turn into a paid or completed Profile Makeover are deleted automatically after 90 days, together with their photos, analyses and results.
- A Photo Check run without an account is deleted after 24 hours unless you create an account or sign in by then (see Photo privacy and storage).
- Everything else you create is kept until you delete it or your account.
- Payment records are kept for as long as accounting and tax law requires (in Israel, generally seven years).
- Support messages are kept as long as needed to handle the request and any related claim.
- Information already sent to Google, Meta, PayPal, Apple, Google Play or Telegram is kept according to their own policies.
13. Security
Connections to ProfileMax use HTTPS, your photos and records are protected so that only your own account can access them, and staff access is limited to what support and security need. Card payments are handled by PayPal, Apple or Google. No online service can guarantee absolute security. If a breach affects your personal information, we will tell you and the authorities as the law requires.
14. Children's privacy
ProfileMax is not for anyone under 18, and we don't knowingly collect information from minors. Photos of minors must not be uploaded. Our AI checks the photos in a Photo Check for anyone who may be under 18; if it finds one, the check stops and those photos are deleted. If we learn that a minor has used the service or appears in uploaded content, we delete it. If you believe this has happened, . We report child sexual abuse material to the authorities.
15. Reporting misuse
If someone has uploaded your photos, MAX produced something harmful, or you see content that breaks our rules, .
16. Changes to this policy
We may update this policy as the service changes. The date at the top shows when it was last updated. If a change materially affects how we use your information, we tell you in the service or by email before it takes effect.
17. Contact
For privacy questions or data requests, email privacy@getprofilemax.com or .
Privacy Policy · Terms of Use · Safety · Accessibility · ·