Privacy policy
Data controller
[Company name, address and contact details — to be added before launch.]
What we process
If you create an account: your email address, a one-way hash of your password, your language preference, and consent records (which text version you accepted and when).
When you complete the quiz, your answers are sent to our server to calculate the routine. We don't store them unless you separately agree to save them to your account. If you do, your answers and routine are kept for up to 12 months and you can delete them from your account at any time.
Skincare answers may be sensitive. That is why we store them only with separate, explicit consent, never send them to analytics tools and never add them to product links.
What we don't process
We don't collect photos. We don't use facial recognition or biometric identification templates. To show products available to you, we estimate your country from your IP address (IP Geolocation by DB-IP, https://db-ip.com, CC BY 4.0). We don't store IP addresses; to limit abuse we keep only a non-reversible hash for a short time.
Cookies and analytics
Cookies other than essential ones are used only with your permission. See the Cookie policy for details.
Sharing
We use an email provider to send emails and a hosting provider to run the site. When you click an affiliate link you go to the retailer's site; we don't pass on personal or skin information.
Your rights
You can access, export (Account → Download my data), correct and delete (Account → Delete my account) your data and withdraw your consents. To exercise your rights under the UK/EU GDPR or other applicable laws, contact us at [contact address].
Retention
Unverified accounts are deleted after 7 days. A saved skin profile and routine are kept for up to 12 months. When you delete your account, related records are deleted immediately; the schedule for deletion from backups will be stated before launch.
Text version: 2026-09-draft1