Privacy Policy

1. Information We Collect

We may collect the following categories of personal information when you use the Service:

• Account Information: Name, email address, phone number, and password when you create an account.
• Photos & Images: Photographs of your skin that you voluntarily upload for AI-powered skin analysis. These images may reveal health-related information.
• Health-Related Data: Skin type, skin concerns, known allergies, and any other health-related details you provide. This information is considered sensitive personal data and is handled with additional safeguards.
• Usage Data: Information about how you interact with the Service, including pages viewed, features used, and session duration.
• Device & Technical Data: IP address, browser type, operating system, and device identifiers.
• Payment Information: Billing details processed through our third-party payment providers. We do not store full credit card numbers on our servers.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service, including delivering AI-generated skin analysis and personalized skincare recommendations.
• To process transactions, manage appointments, and send related communications such as confirmations and reminders.
• To respond to your inquiries, provide customer support, and address technical issues.
• To send you marketing and promotional materials, subject to your opt-in preferences and applicable law.
• To conduct research and analytics to improve our AI models and overall user experience, using de-identified or aggregated data wherever possible.
• To comply with legal obligations and enforce our Terms of Service.

3. Data Storage & Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256).
• Strict access controls limiting personnel who may access personal data.
• Regular security assessments and vulnerability testing.
• Secure cloud infrastructure with data centers that maintain recognized certifications.

Photos and health-related data are stored in encrypted form and retained only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

4. Your Rights

In accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and other applicable data protection laws, you have the following rights with respect to your personal information:

• Right to Be Informed: You have the right to be informed of the collection and processing of your personal data.
• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request the deletion of your personal data, subject to applicable legal obligations.
• Right to Object: You may object to the processing of your personal data, including processing for direct marketing purposes.
• Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to File a Complaint: You may file a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within thirty (30) days, or as required by applicable law.

5. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: