Privacy notice

Last updated 11 October 2026. This covers the free analysis, the paid 90-day plan, and the earlier waitlist.

Who we are

Casdey is run by Davide Longo, an individual based in Italy, who is the data controller for the information below. Contact: info@casdey.com.

Casdey is for adults

The free analysis is only for people aged 18 or over. We ask you to confirm your age before we look at any photo, and we refuse photos of anyone who looks under 18.

What we collect

• Your email address.
• Your answers to the quiz: what you want to improve, your age range, height, weight, and habits such as training, sleep and skincare.
• Your photos (a face photo, and a full-body photo if you add one), only for the time it takes to analyse them. See below.
• The analysis we give you.
• If you start the 90-day plan: your check-in replies and any photos you choose to send by email, and your subscription status. Your card details go to Stripe and never reach Casdey.
• The country your connection comes from, worked out from your IP address. The IP address itself is not stored.
• Anonymous page statistics (pages viewed, steps of the quiz reached), collected without cookies.

Your photos

Your photos are sent once, encrypted, to our AI provider to produce your analysis, and are not stored by Casdey: not in our database, not on our servers, not in the email. Our AI provider processes them only to answer the request and does not use them to train its models. Photos can reveal sensitive things about you, so we ask for your explicit consent before you send them, and you can stop at any point before pressing the button.

Why, and on what basis

We use your answers and photos to produce your analysis, and your email to send you a copy and to tell you when the full Casdey plan opens. We keep your answers and the analysis so your plan can build on them, and to understand what people want. The legal basis is your consent, which you give when you request the analysis, and which you can withdraw at any time. We will only email you about Casdey, and we never sell your data.

Who processes it for us

• Anthropic (the AI that produces your analysis).
• Supabase (database, hosted in Ireland, EU).
• Vercel (website hosting).
• Resend (sending email).
• Stripe (payments, only if you start the 90-day plan).
• PostHog (anonymous page statistics, EU cloud).

Some of these providers are based in the United States and protect transfers with the EU standard contractual clauses.

How long we keep it

Photos from the analysis: not kept at all. Photos you send by email for your plan: kept only while your plan runs, and deleted when you ask or when it ends. Everything else: until you ask us to remove it, or 12 months after your last analysis, whichever comes first.

Your rights

You can ask to see, correct or delete your data, or withdraw your consent, by replying to any Casdey email or writing to info@casdey.com. You can also complain to your local data protection authority; in Italy that is the Garante per la protezione dei dati personali.