Privacy policy

What we collect

• Your email and display name — used to sign you in and contact you when needed.
• An optional skin profile — skin type, concerns, allergies, current products, notes. Most features work without it.
• Face photos you upload for Skin Analysis — sent to our AI provider Anthropic (Claude) to generate your analysis, and stored in our AWS storage (S3, US East) linked to your account so you can revisit past results and skin-trend history. We assess skin condition only — no face recognition or biometric identification — and neither we nor Anthropic use your photos to train AI models. You can delete them any time by deleting your account.
• AI conversation history — stored in our Postgres database so you can pick up where you left off.
• Stripe customer ID and last 4 of your card — held by Stripe itself; we never see or store your full card number.
• Your IP address — used only for rate-limiting to keep bots out.

What we don't do

• No advertising trackers.
• No third-party fingerprinting.
• We do not sell or trade your data.

Face photos & face data

• What we collect: when you use Skin Analysis, you upload a photo of your face. We treat this as sensitive personal data.
• How we use it: the photo is analyzed to assess visible skin condition — oiliness, dryness, acne, redness, dark circles and similar traits. We do NOT run face recognition, face matching, or any biometric identification; we never create a faceprint and never use your face to identify who you are.
• Who we share it with: to produce the analysis, the photo is sent to our AI provider Anthropic (Claude API, United States), and nowhere else. Anthropic processes it to return the result and does not use API data to train its models. We never sell it or share it for advertising.
• Where it's stored: your photo and its analysis result are stored in our AWS storage (Amazon S3, US East / us-east-1), linked to your account, so you can revisit past analyses and your skin-trend history.
• How long we keep it & how to delete it: photos are kept while your account is active. Delete them any time with "Delete account" on the Account page (in the app or on the web) — your photos and analyses are removed and fully purged within 30 days.

Third-party processors

To make the product work we share data with a small set of providers. Each one only gets the minimum it needs.

• Anthropic (Claude API), United States — powers our AI skin analysis, ingredient checks, routine generation and chat. Your face photo and the text you submit are sent here to produce your result. Anthropic does not use data submitted through its API to train its models.
• Resend — email delivery for login links and feedback replies.
• AWS (RDS Postgres + Amplify Hosting) — primary database and app hosting. Data residency: us-east-1.
• Upstash Redis — community storage and rate-limit counters. Region: ap-southeast-1.
• Stripe — payments and subscriptions. Full card numbers live with Stripe, not with us.

Data retention

• Account data is kept as long as your account is active.
• Face photos and their skin-analysis results are kept while your account is active so you can review your skin history; they are deleted when you delete your account.
• AI chat history is kept for 1 year.
• When you delete your account, data is anonymized immediately and fully purged after 30 days.

Your rights

• Access — sign in any time to see your data.
• Correction — update your name and skin profile from the Account page.
• Deletion — there's a Delete account button at the bottom of /account.
• Export — the Account page has a "Download my data" button that hands you the full JSON in one click.
• Withdraw consent — deleting your account withdraws consent for all processing.

Cookies

• Auth session cookie — essential; without it we can't tell who you are.
• Locale preference cookie — remembers your zh/en choice.
• No analytics cookies right now. If we add any later, we'll tell you first.

Amazon affiliate links

Some product links on our Find Products and Routine pages point to Amazon.com and carry our Amazon Associates tracking tag (ai4skincare-20). If you click one and buy something, Amazon may pay us a small commission — at no extra cost to you.

Amazon sets its own cookies once you land on amazon.com — those are governed by Amazon's privacy policy, not ours. We don't see what you searched for or bought on Amazon's side; we only see that you clicked an outbound link (logged for our own analytics, never shared).

You can opt out of any attribution by visiting amazon.com directly instead of using our links.

Contact

Privacy questions? Reach us via the contact page , or use the in-app feedback widget in the bottom-right corner.