Privacy Policy
Last updated September 3, 2026
Jaw Sim Labs (“we”, “us”) provides a web tool that visualises possible orthognathic (jaw) surgery outcomes from a photograph you upload. This policy explains what we collect, where it goes, and what you can do about it. It covers jaw-sim-labs.com and nothing else.
We are a small independent operation, not a healthcare provider. We are not a HIPAA covered entity and the information you give us is not protected health information under that law, even though it concerns your face and your surgical plans. That is a reason to read this page, not to skip it.
The short version
What we collect
Account information. If you sign up with email, we hold your email address and a password hash — stored and verified by Supabase, our authentication provider; we never see your password. If you sign in with Google, Google gives us your name, email address and profile picture, and nothing else. We do not request access to your Gmail, Drive, Contacts or any other Google service.
Photographs.The photo you upload, the cropped version of it, the simulated “after” image, and a thumbnail. A photograph of your face is personal data, and in some places it is a special category of it — see “Biometric and health-adjacent data” below.
Simulation data. The facial landmark positions and contour curves derived from your photo, the surgical parameters you set (advancement in millimetres, rotations, implant sizes), and the automatic assessment of your profile. This is a numerical description of your facial geometry and of a procedure you were considering.
Purchase records. Which plan you bought, how many photo credits it carried, how many you have used, and the Stripe checkout session identifier.
Nothing else. There is no analytics package on this site. No Google Analytics, no advertising pixel, no session recorder, no heatmaps, no A/B testing tool. We do not build a profile of you, and there is nothing to sell because we never collected it.
Your photo is processed on your device
The models that find your jawline and separate you from the background — the segmentation network and the facial landmark detector — run inside your browser, on your own computer or phone. The model files are served from our site and executed locally. Your photograph is not uploaded to us, or to any third-party AI or image service, in order to be analysed.
Your photo does leave your device in one case: when you are signed in, we save your simulation to your account so it is still there next time. That upload goes to our storage provider and nowhere else. If that is more than you want, see “If you would rather leave nothing behind” below.
Where it is stored, and who can reach it
Account data, purchase records and simulation data live in a Postgres database run by Supabase, protected by row-level security so that your rows are readable only by your own signed-in account. Images live in Supabase Storage.
Within that hour the link is a key rather than an identity check: anyone you send it to can open the image until it expires. So a simulation link is still something to share deliberately, not casually.
Our hosting is provided by Netlify, which necessarily processes the requests your browser makes, including your IP address, in order to serve the site.
Payments
Payments are handled entirely by Stripeon Stripe’s own hosted checkout page. Your card number never touches our site and we never receive it, see it, or store it. We receive back only a session identifier, whether the payment succeeded, and the email address you gave Stripe. Stripe’s handling of your payment details is governed by Stripe’s privacy policy.
Who we share it with
We do not sell your personal information, and we do not share it for advertising. We do not use your photographs to train any model. The only parties who process your data are the service providers that make the site work:
- Supabase — database, authentication, image storage
- Stripe — payment processing
- Netlify — website hosting and delivery
- Google — only if you choose to sign in with Google
We would also disclose information if we were legally required to, or to establish or defend a legal claim. If we are ever acquired, your data would be part of what transfers, and this policy would follow it until replaced by one you are told about.
If we ever want to show a real before-and-after publicly, we will ask you first and you can say no. Nothing on the marketing pages of this site is a customer photograph: the faces shown there are AI-generated.
Biometric and health-adjacent data
Depending on where you live, a photograph of your face and the facial measurements taken from it may be treated as biometric or as consumer health data, with stronger protections than ordinary personal information — for example under the Illinois Biometric Information Privacy Act, Texas’s CUBI, or Washington’s My Health My Data Act.
We derive facial landmark coordinates from your photo in order to perform the simulation you asked for. We use them for that and for showing you your saved simulations. We do not use them to identify you, we do not run face recognition, we do not match you against any other image, and we do not disclose them to anyone beyond the providers listed above. By uploading a photo you are consenting to this specific use. You can withdraw that consent by deleting the simulation or your account, which deletes the derived data with it.
How long we keep things
- Simulations and images — until you delete them, or until you delete your account.
- Account record — until you ask us to delete it.
- Purchase records — retained after account deletion where we need them for tax, accounting and chargeback purposes.
What you can do
- Delete a simulation. Open your profile and delete it. This removes the database row and the stored images.
- Delete your account. Email us and we will delete the account and everything attached to it.
- Get a copy of your data, or ask us to correct it.
- Object, or ask us to restrict processing.
Depending on where you live you may have these rights by law — under the GDPR or UK GDPR, or under California’s CCPA/CPRA and similar US state laws — and you may have the right to complain to your data protection regulator. We will honour the requests above regardless of where you live, because the difference is not worth arguing about. Email jaw.sim.labs@gmail.com and we will respond within 30 days. We will not charge you or degrade your account for asking.
Where the GDPR applies, our legal basis is: performance of a contract for your account, purchases and simulations; your explicit consent for the facial imagery and the measurements taken from it; and our legitimate interest in keeping the service running and secure. Our providers are in the United States, so using the service involves an international transfer of your data.
If you would rather leave nothing behind
Saving is what an account is for, but you are not obliged to keep anything. You can run a simulation, export the image, and then delete the simulation — the analysis already happened on your device, so deleting it costs you nothing but the ability to reopen it later.
Security
Traffic is encrypted in transit. Database access is constrained by row-level security. Passwords are hashed by our authentication provider and are not visible to us. Note the caveat about public image links above. No system is perfectly secure, and we cannot promise otherwise.
Children
This service is not intended for anyone under 18, and we do not knowingly collect data from children. Orthognathic surgery is sometimes considered for younger patients; if you are under 18, please do not upload a photograph — involve a parent or guardian and your surgeon instead. If you believe a child has uploaded a photo, email us and we will delete it.
Changes
If we change this policy we will update the date at the top. If the change is significant — a new category of data, a new recipient, a new purpose — we will email account holders rather than rely on you noticing.