Privacy Policy

Information you provide:

• Email address (for account creation and communication)
• Skin profile data: skin type, sensitivities, age range, top concerns, and other voluntarily provided personalization details
• Photos of product ingredient labels you upload to be analyzed
• Optional notes, feedback, and reactions you provide about scanned products
• Payment information (processed by Stripe — we never store your full card details)

Information collected automatically:

• Device and browser information
• IP address and approximate location (country/region only)
• Usage data such as which features you interact with and how often

We use your information to:

• Provide the Service and analyze ingredients personalized to your skin profile
• Process payments and manage your subscription
• Send you transactional emails (password resets, payment confirmations)
• Improve the Service and develop new features
• Respond to your support requests
• Comply with legal obligations

When you submit a scan, your image and skin profile are sent to Anthropic's Claude AI to be analyzed. Anthropic does not retain your data for training purposes under our agreement. The resulting verdict and ingredient analysis is stored in your account so you can revisit past scans.

We share information only with the following:

• Anthropic — for AI-powered ingredient analysis
• Supabase — for secure database hosting and authentication
• Stripe — for payment processing and subscription management
• Service providers that help us run the Service (email delivery, hosting, etc.)

We do not sell your personal information to third parties. We do not share your scan history, skin profile, or photos with advertisers.

We retain your data for as long as your account is active. If you delete your account, we will delete your scan history, skin profile, and photos within 30 days, except where retention is legally required (e.g., billing records).

Depending on where you live, you may have rights to:

• Access the data we have about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of certain types of data processing

To exercise any of these rights, email us at the address below.

California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to deletion.

EU/UK residents have rights under GDPR including data access, rectification, erasure, and portability.

The Service is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If you believe we have collected data from a child under 13, please contact us immediately and we will delete it.

We use industry-standard security practices including encrypted connections (HTTPS), secure password hashing, and access controls on our database. No system is 100% secure, but we work hard to protect your data.

If you use the optional progress photo feature, your photos are stored in a private, encrypted bucket. Only you can access your photos. We never use them for AI training or share them with third parties.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or in-app notice before the changes take effect.

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Email: aaronrobinfg4@gmail.com

Operator: Bare AI (Aaron Robin)