Legal
Plain-language policies
Written to be read. Last updated 1 September 2026. If anything here is unclear, treat it as unclear and don't upload photos.
The short version
We do not store your face photos. We do not sell anything, we do not show ads, and we do not ask for your name, phone number or address.
What a face scan sends, and where
If you use the scan, the photo is sent from your browser to our server, then to our AI provider (OpenRouter, United States) purely to estimate visible skin traits. The photo is processed in memory and is not written to our database. OpenRouter states it does not use API content to train its own models; we pass no account identifiers with the image.
The estimate (for example “oily”, or a look score) is saved on your device and, if you are signed in, to your profile so your results survive a reinstall.
What we store when you sign in
Your email (from the sign-in provider), and the skincare profile you chose: skin type, climate, region, age range, concerns, goals, avoid-list chips, your shelf, check-ins and Look Day entries. This lets us show you your own history.
We never store your email in analytics events, and we never send photos to analytics or error reporting.
What we measure
Anonymous, per-tab event counts (a page view, a scan completed, a product viewed) so we can tell whether the app is useful. Those events carry a random session id, not your identity. Skin type and climate can appear in those events because that is what we are measuring. Face photos and free-text answers never do.
How long, and deleting it
Photos: not stored, so nothing to delete. Account data: kept until you delete your account, which you can do by writing to us; we remove profile, shelf, check-ins and Look Day entries, and confirm in writing.
You can also clear everything on your device by clearing site data in your browser — you will lose your guest shelf and quiz answers.
Who else sees it
Supabase (auth + database, hosted in Singapore/India region depending on the project you sign up to), OpenRouter (scan inference), Open-Meteo (the weather behind the “tonight” card — it receives a city-level coordinate for your saved region, never your device location), and our error-reporting provider if one is configured. None of them may use your data for their own advertising.
The “tonight” card and your region
To tell you what to change tonight, we look up current conditions for the region you chose in the quiz. We use that region's city coordinates — we never ask for or read your GPS, and we do not track where you actually are. The result is cached on your device for 45 minutes and never sent to our servers.
Children
This is not directed at children under 13, and we do not knowingly collect their data. If you are under 18, treat high-risk actives (retinoids, exfoliating acids) as a conversation with a parent, a pharmacist or a dermatologist — see the age gate in your results.
Contact
Privacy questions or a deletion request: privacy@indianskincareadvisor.com