Privacy Policy

1. Information We Collect

When you create an account, we collect:

• Email address and username
• Optional skin profile information (skin type, skin concerns, known sensitivities)
• Content you submit (reviews, forum posts, product collections)
• Usage data (pages visited, features used) in aggregate, anonymous form

When you subscribe to Skinuity Pro, your payment is processed by Stripe, a PCI-DSS-compliant payment processor. We never receive, store, or have access to your full card number, CVV, or banking details. Stripe provides us only with a customer token and subscription status. You can review Stripe's privacy policy at stripe.com/privacy.

2. How We Use Your Information

We use the information we collect to:

• Provide and improve the Skinuity platform
• Personalize product recommendations based on your skin profile
• Display your public reviews and collection on your profile
• Process and manage your subscription (via Stripe)
• Send important account-related and billing notifications
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Third-Party Service Providers

We use the following trusted third parties to operate the platform:

• Stripe — payment processing and subscription management
• Cloudflare R2 — secure storage of product images
• Railway — cloud hosting infrastructure

These providers only receive the data necessary to perform their specific function and are contractually required to protect your information.

4. Affiliate Links

Some “Where to Buy” links on product pages are affiliate links. If you click one and make a purchase, we may earn a small commission at no extra cost to you. We are a participant in the Amazon Associates Program, an affiliate advertising program designed to provide a means for sites to earn fees by linking to Amazon.com. Affiliate links are clearly labeled on the platform.

5. Cookies and Local Storage

We use cookies and local storage to keep you logged in and remember your preferences. We may use analytics tools to understand how the site is used in aggregate form — no individual tracking. We do not use advertising or cross-site tracking cookies.

6. Data Retention

Your account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Reviews you have written may remain on the platform in anonymized form after account deletion. Billing records may be retained as required by law.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Opt out of certain data processing

To exercise any of these rights, contact us via our contact page. We will respond within 30 days.

8. Security

We take reasonable technical and organisational measures to protect your information, including encrypted password storage (bcrypt), HTTPS-only connections, HttpOnly authentication cookies, and access controls on our infrastructure. Payment data is never stored on our servers — all payment processing is handled by Stripe's PCI-DSS-certified infrastructure.

In the event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable law, and take immediate steps to contain it.

9. Children's Privacy

Skinuity is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or via an in-app notice. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or how your data is handled, please reach out via our contact page.