PEPRA processes a photo only after an adult member gives separate photo-processing and contextual-scoring consent. You may replace or delete it, and deleting your account removes the stored original, generated previews and report records.
Operator and contact
PEPRA is operated by James Baker. It is not currently a healthcare provider, pharmacy or clinical service.
Privacy, access, correction and deletion requests: james@getpepra.com.
Information collected
- Account email, password hash, security session and timestamps
- A front-facing photo you intentionally provide
- Age, height, weight, goals, budget, styling preferences, routines, lifestyle context and appearance history you choose to enter
- Optional private safety records for medications, supplements, allergies, conditions and supervised treatments
- Versioned adult, photo-processing and health-data consent receipts
- Appearance category estimates, confidence ranges, ranked actions and generated previews
- Optional provider connection status, encrypted credentials and selected aggregate summaries
PEPRA does not store plaintext passwords. Only upload your own photo and data, or material you are authorized to provide.
Purposes
- Create and secure your account
- Estimate visible appearance categories and explain uncertainty
- Generate member-requested hairstyle and color simulations
- Rank non-medical next actions by expected impact, cost, time, risk and reversibility
- Display optional activity, sleep and fitness progress without using it to calculate attractiveness
- Operate, secure and debug the product
PEPRA does not use these records for insurance, employment, credit or treatment eligibility.
AI-assisted processing
When you request analysis, PEPRA sends your photo and a tightly scoped instruction to OpenAI to produce the appearance report. Selected goals, preferences and routine context may be included to rank actions. Exact medication and supplement names, doses and schedules are not sent to the report model; it receives completion status and counts only so treatment-level actions can be gated. When you request a Style Lab preview, the source photo and selected styling variable are sent again to create that simulation. PEPRA instructs the model not to infer race, ethnicity, health conditions, personality, sexuality or personal worth and not to change identity in previews.
Optional Apple Health, Strava and Fitbit summaries are not required for an appearance score. Oura-origin and Oura-derived data is never sent to an external AI service.
Storage, providers and sharing
Account and report records are stored in hosted database infrastructure; original photos and generated previews are stored in private object storage; provider credentials are encrypted. Infrastructure, app-store and AI vendors process only the information needed for their functions. PEPRA sets store: false on OpenAI requests; OpenAI's separate safety and abuse-monitoring retention rules may still apply. PEPRA does not sell photos or consumer health data or use them for targeted advertising.
No clinician, pharmacy, trainer or marketplace provider receives your data merely because you create an account. Any future transfer requires an identified recipient, purpose and appropriate authorization.
Retention and controls
Information remains while your account is active or as reasonably required for security and legal obligations. You can replace or delete a photo, disconnect providers, and delete your account. Account deletion removes stored originals, generated previews and report records. Limited security, fraud-prevention and backup records may persist where legally permitted.
Security, age and changes
PEPRA uses password hashing, secure session cookies, ownership checks, encrypted provider credentials and private object storage. No internet service can guarantee absolute security. The product is for adults 18 or older. Materially new uses will require updated disclosure and, where appropriate, additional consent.