Privacy Policy

Effective date: [EFFECTIVE DATE] · Last updated: [EFFECTIVE DATE]

Skinchii helps you organise your beauty products, routines and reminders. This policy explains what information the Skinchii mobile app, this website and related services collect, why, who processes it for us, how long we keep it and the choices you have.

1. Who we are

Skinchii is provided by [COMPANY LEGAL NAME], [ADDRESS] (“we”, “us”). We are responsible for (the “controller” of) the personal information described here. You can reach us at [CONTACT EMAIL].

Reviewer: add a data protection officer or local representative here if the law of [JURISDICTION] or of your users' countries requires one.

2. Information we collect

Account information

• Email address, display name and a unique user ID created by Firebase Authentication.
• Whether your email address is verified, and how you sign in (email and password, or Google sign-in where available).
• Your password is handled by Firebase Authentication. We never see or store it. If you use Google sign-in, Google shares your name, email address and account identifier with us.

Profile and preferences

Skin type and skin concerns (if you choose to add them), time zone, language/region, currency, app theme and mascot accessory, accessibility settings (reduce motion, haptics), whether you agreed to marketing messages, onboarding status and when you last used the app.

Your beauty organiser content

• Products you add: name, brand, category, sub-category, shade, barcode, size, quantity, remaining amount, purchase date, price and currency, opened date, expiry date, period-after-opening, batch code, storage location, status, favourite flag, rating, notes, tags, custom categories, product photos and usage history.
• Routines: names, schedules, steps, timers, reminder times, completed/skipped/missed sessions and streaks.
• Wishlist items (name, brand, link, price, priority, notes, photo) and articles you save.
• Goals you set and their progress.

Journal and progress photos

Journal entries (date, mood, skin rating, skin conditions, notes, tags) and progress photos with their area, date and notes. These are private to your account: the Skinchii team cannot view them (see section 6).

Reviewer: notes about skin conditions may be treated as health or sensitive data in some jurisdictions. Confirm the lawful basis (for example explicit consent) required for [JURISDICTION] and where users are located.

Notifications

Your notification settings (categories, warning days, quiet hours), a push notification token for your device together with its platform, device name and app version, and the history of in-app notifications we sent you. Routine reminders can also be scheduled locally on your device.

Subscriptions and purchases

Premium is purchased through the Apple App Store or Google Play. The store processes your payment; we never receive your card details. Our subscription provider RevenueCat receives purchase receipts from the store and tells us your subscription status. We store the plan, status, store, product, billing period type, auto-renew status, key dates (start, expiry, grace period) and the subscription events we receive.

Support

Messages you send through in-app Help or by email, the topic you choose, and the app version and platform you were using.

Website waitlist

Before launch you can join the Skinchii waitlist on this website. If you do, we collect your email address, your consent to receive launch updates (and when you gave it) and, only if you choose to tell us, whether you use iPhone, Android or both. We also record the page you signed up from (including any campaign tags in the link) and your browser's language setting. To prevent spam and abuse, our server stores a one-way, salted hash of your IP address — not the address itself — and your browser's user-agent string.

• The form sends this information to our Firebase server function, which stores it in our Supabase database.
• We use it only to email you about the launch of Skinchii. We do not use it for other marketing, and we do not sell or share it.
• You can ask us to delete your waitlist entry at any time by emailing [CONTACT EMAIL]. See section 7 for how long we keep it.
• This website does not set cookies and does not use advertising or analytics trackers.

Reviewer: confirm the consent wording, whether double opt-in is required, and the lawful basis for the waitlist under [JURISDICTION].

Device features and on-device processing

• The camera and photo library are used only when you scan a barcode or choose to add a photo. Photos are uploaded only when you save them.
• Where your device supports it, reading text from a product label happens on your device; only what you save is stored.
• The app keeps a cached copy of your data on your device so it works offline.

Technical and security information

Our infrastructure providers record technical logs such as IP address, request time and error details when the app talks to our servers. We keep an audit log of actions taken by Skinchii team members in our admin tools.

We do not sell your personal information and the app does not contain advertising SDKs. [CONFIRM BEFORE PUBLISHING: no third-party analytics or crash-reporting SDK is included]

3. How we use information

Reviewer: confirm the legal bases for each purpose under [JURISDICTION] and the users' countries.

4. Service providers

We use these providers to run Skinchii. They process information on our behalf and only for the purposes described.

We may also disclose information if required by law, to protect rights and safety, or as part of a merger or acquisition (with notice to you).

Product catalog credits

Product catalog data includes information from Open Beauty Facts (https://world.openbeautyfacts.org), made available under the Open Database License (ODbL); product images under Creative Commons BY-SA.

5. Where data is processed

App data is stored in our Supabase project hosted in [SUPABASE PROJECT REGION]. Our Firebase server functions run in the Google Cloud region asia-south1 (Mumbai, India). Firebase Authentication, Expo, RevenueCat, Apple and Google may process data in other countries, including the United States.

Reviewer: describe the transfer safeguards (for example standard contractual clauses) required for [JURISDICTION].

6. Access by the Skinchii team

A small number of team members use an admin console with role-based access (support, billing, content, analytics). Depending on their role they can see account basics (email, display name, status, plan, time zone), usage counts, subscription records and your support conversations. They cannot view your journal entries, progress photos or goals. Every admin action — including viewing an account — is recorded in an audit log.

Team members with the content or analytics role can view the website waitlist so that we can send the launch email; exporting or deleting waitlist entries is also recorded in the audit log.

7. How long we keep data

• Account and organiser data: while your account is active, until you delete it or ask us to.
• In-app notifications: read or dismissed notifications are deleted after 180 days, and all notifications after 365 days.
• Push delivery logs: 30 days. Push tokens that stop working are deleted 90 days after they become invalid.
• Website waitlist: until Skinchii launches. After we have sent the launch announcement, the waitlist is deleted. You can ask us to delete your entry sooner at any time. Rate-limiting records (hashed only) are deleted after 2 days.
• After you delete your account we keep only what is described on the account deletion page (for example deletion-request, billing-event and audit records) for [RETENTION PERIOD].
• Backups kept by our database provider expire within [BACKUP RETENTION PERIOD].
• Data cached on your device stays there until you clear the app's data or uninstall the app.

8. Your rights and choices

• Access and export: in the app, go to Me → Settings → Your data to download a copy of your data.
• Correction: edit your profile, products and other content in the app at any time.
• Deletion: delete your account in the app or follow the steps on the account deletion page.
• Waitlist: withdraw your consent or ask us to delete your waitlist entry by emailing [CONTACT EMAIL].
• Notifications: change categories and quiet hours in Settings → Notification settings, or turn notifications off in your device settings.
• Permissions: camera, photos and notifications can be turned off in your device settings at any time.
• Marketing: opt out in the app or by contacting us.
• Depending on where you live you may also have the right to object to or restrict processing, to data portability and to complain to your data protection authority. Contact [CONTACT EMAIL] to exercise any right; we will respond within [RESPONSE TIME].

9. Security

Data is encrypted in transit (TLS). Database rules make sure each account can read and change only its own data, private photos are stored in private storage and shown through short-lived links, and admin access is limited by role and logged. No system is perfectly secure, so please use a strong, unique password and tell us about any concern at [CONTACT EMAIL].

10. Children

Skinchii is not intended for children under [MINIMUM AGE]. If you believe a child has created an account or joined the waitlist, contact us and we will delete it.

11. Changes to this policy

We will post any update on this page and change the date above. If a change is significant we will also let you know in the app before it takes effect.

12. Contact us

[COMPANY LEGAL NAME]
[ADDRESS]
Email: [CONTACT EMAIL]