Skinaa Privacy Policy

1. What personal information do we collect?

• Your name, email address, and phone number
• Shipping and billing addresses
• Order and transaction details
• Device and usage data for security and analytics (non-identifiable)
• A photo of your face, only if you choose to use our AI-powered face analysis feature (see Section 14)

We collect this information directly from you when you register, place an order, contact support, or use the face analysis feature, and automatically through your device when you use the app (e.g., device identifiers and usage logs for security and analytics purposes).

We use this information to process orders and payments, provide customer support, improve the app and user experience, send transactional updates, and, for the photo, to generate your face analysis results and store it temporarily so you can view your before/after progress, as described in Section 14.

Aside from the face analysis feature, we do not collect or store health-related information or consultation data in this version of the app.

2. When do we collect information?

• Register via Google login
• Log in using your phone number (with OTP verification)
• Browse products
• Add items to the cart
• Place an order and enter your shipping/billing address
• Make a payment through Razorpay

3. How do we use your information?

• Process your product orders and payments
• Deliver your purchased products
• Provide customer support
• Improve our app, services, and user experience
• Send important transactional updates via email or SMS

4. How do we protect your information?

• Stored in secure environments accessible only to authorized personnel.
• All sensitive information (e.g., payment) is encrypted via SSL technology.
• We do not store payment details on our servers; payments are processed securely through Razorpay.

5. Do we use cookies?

We may use cookies on our websites for analytics and user experience improvement. You can disable cookies via browser settings. Our mobile app does not use cookies.

6. Third-party disclosure

• We do not sell or share personal information for marketing.
• We share order, payment, and delivery-related information with Razorpay (for payment processing) and our logistics/shipping partners (for order delivery), only to the extent necessary to complete your order.
• If you use our AI face analysis feature, your photo is sent to our self-hosted AI face analysis service (operated on our own servers, not a third-party AI provider) to generate your analysis results, and is retained for up to 30 days to show your before/after progress. See Section 14 for full details, including retention and deletion.
• We do not send your personal information to any external third-party AI or machine-learning service. If this changes in the future, we will update this policy to (i) disclose exactly what data would be sent, (ii) name the specific third-party AI service receiving it, (iii) obtain your explicit consent before any such data is shared, and (iv) confirm that the third party provides data protection at least equal to the protections described in this policy.
• Any third party we share data with is contractually required to use your information only for the purpose for which it was disclosed and to provide security and privacy protections at least equivalent to our own.

We may include third-party links which have separate privacy policies.

7. How does our site handle ‘Do Not Track’ signals?

We honor DNT signals and do not track or plant cookies when a DNT browser mechanism is enabled.

8. Does our site allow third-party behavioral tracking?

We do not allow third-party behavioral tracking within the Skinaa app.

9. Children’s Privacy

We do not specifically market to children under 13.

10. Fair Information Practices

In the event of a data breach, we will notify users via email within 7 business days.

11. CAN-SPAM Act

We collect email addresses to:

• Send order confirmations and shipping updates
• Provide information about orders or support requests

We do not use false or misleading subject lines, provide contact information in emails, and allow users to unsubscribe easily.

12. Data retention and deletion

We retain data as needed for services and legal obligations. You may request to review, update, or delete your data by contacting info@skinaa.com. Data will be deleted unless needed for legal, tax, audit, or fraud prevention purposes.

Face photos: Photos captured for the AI face analysis feature are retained for a maximum of 30 days from the date of capture, solely so you can view your before/after progress within the app, and are automatically and permanently deleted after that period. You can request us to delete any of your data anytime by emailing us at info@skinaa.com.

13. Additional Information for App Users

• We authenticate users via Google Sign-In and OTP (not stored).
• Payments are securely processed via Razorpay with no card details stored on our servers.

14. AI Face Analysis Feature

What data is sent: If you choose to use our face analysis feature, a photo of your face is captured through your device camera and sent to our AI face analysis service for processing.

Who it is sent to: This AI service is self-hosted — it runs on our own servers under our direct control. It is not operated by an external third-party AI provider, and your photo is not sent to any outside company (such as OpenAI, Google, or similar services).

How it is used: Your photo is used to generate your face analysis results (e.g., skin condition insights) and to let you compare your progress over time through a before/after view within the app.

Retention period: Your photo is stored securely for up to 30 days from the date it is captured, so you can view your before/after comparison during that window. After 30 days, the photo is automatically and permanently deleted from our servers. You can request us to delete any of your data anytime by emailing us at info@skinaa.com.

No facial recognition or identification: Your photo is used only to generate your personal skin analysis and progress comparison. It is not used to identify you, matched against any external database, or used for facial recognition purposes, and it is not used to train any AI model.

Security: Photos are transmitted to our servers over an encrypted (SSL/TLS) connection and are stored in encrypted storage, accessible only to the automated analysis system and authorized personnel who require access to maintain the service.

If we ever change this feature to use an external third-party AI service instead of our self-hosted service, or change how long photos are retained, we will update this Privacy Policy to (i) disclose exactly what data is sent, (ii) name the specific third-party service, (iii) obtain your explicit consent before any data is shared with or retention changes take effect, and (iv) confirm that any third party involved provides data protection equal to or greater than the protections described in this Privacy Policy.

15. Contacting Us