Privacy Policy

1. Information We Collect

We collect information you provide directly to us, information collected automatically during app usage, and information generated through AI analysis:

2. How We Use Your Information

We use the information we collect strictly to:

• Generate AI-driven skin observations and personalized morning/evening routine recommendations;
• Decode product ingredients and calculate compatibility with your skin profile;
• Maintain your GlowBook journal, routine completion streaks, and milestone achievements;
• Deliver routine reminders, scan notifications, and product expiration alerts (if enabled);
• Detect and diagnose technical crashes, fix bugs, and optimize app performance;
• Respond to your customer support requests and communicate critical policy updates.

3. How We Share & Disclose Information

We only share information under strict confidentiality standards in the following limited circumstances:

• Infrastructure Service Providers: Trusted third-party cloud infrastructure (e.g., Amazon Web Services, Google Cloud Platform) and secure AI inference processors who operate under strict non-disclosure and data protection contracts.
• Legal Obligations: When required by court order, search warrant, subpoena, or applicable state or federal law to protect safety, prevent fraud, or defend legal claims.
• Business Transfers: In the event of a merger, acquisition, or sale of company assets, user data would transition subject to the commitments in this Privacy Policy.

4. Data Security & Encryption

We enforce modern technical and organizational security controls designed to safeguard your data:

• In Transit: All data transmissions between your device and our servers use modern TLS/SSL encryption protocols;
• At Rest: Stored databases and facial imagery are encrypted using industry-standard AES-256 encryption;
• Access Controls: Server and data access is strictly restricted to authorized engineering personnel using multi-factor authentication.

5. Your Rights, Choices & Data Deletion

You maintain full sovereignty over your personal data:

• Account & Data Deletion: You can delete your account and all associated data directly inside the App by visiting Profile > Settings > Delete Account, or by emailing support@skinlyst.ai with the subject “Data Deletion Request”. Upon verification, your profile, photos, and journal entries will be permanently expunged.
• Device Permissions: You can grant or revoke camera access and push notification permissions at any time via your device's operating system settings.
• Regional Rights (GDPR & CCPA/CPRA): Depending on your location, you have the right to request access to the data we hold about you, request corrections, or object to certain processing. We do not sell personal information or share it for cross-context behavioral advertising.

6. Children's Privacy

Skinlyst AI is not intended for use by children under 13 (or under 16 in the European Economic Area or UK). We do not knowingly collect personal information or facial photos from children. If we discover that a child has provided us with personal information without verified parental consent, we will promptly delete that data.

7. Updates to this Policy

We may update our Privacy Policy periodically. When updates are published, we will revise the “Effective Date” at the top of this page. For significant changes, we will provide in-app notices or email notifications to active users.