Privacy Policy

Version 2026-06-05-r2

SKINLINK — PRIVACY & CONSENT (v2026-06-05-r2)

1. What we collect
   • Facial photographs you capture or upload during a skin scan.
   • Self-reported profile data (name, age, city, skin type, goals).
   • Daily check-ins (hydration, sleep, mood, food entries).
   • Device metadata (browser user agent, IP address) for security and audit.

2. How we process your photos
   • Selfies are uploaded over TLS to encrypted Supabase Storage hosted by
     our cloud provider.
   • They are then sent server-side to the Lovable AI Gateway, which routes
     to dermatology-tuned vision models (Google Gemini / OpenAI GPT) for
     biomarker analysis. Photos are NOT processed entirely on your device.
   • Numerical biomarker outputs (0-100 per marker) are stored against your
     account and used to compute your GlowScore.

3. Retention
   • Raw selfie images are auto-deleted 90 days after capture. Numerical
     biomarker history is retained for as long as your account is active
     so we can show your trends.
   • You can delete any individual scan or your entire account at any time
     from Settings → Privacy. Deletion is permanent within 30 days.

4. Sharing
   • We do not sell your data.
   • Photos are never shown to other users.
   • Aggregated, de-identified statistics may be used to improve the model.

5. Your rights (DPDP Act, 2023)
   • Access, correction, erasure, and consent withdrawal at any time.
   • Contact privacy@skintellis.skin for any request.

6. Consent
   By tapping "I agree", you confirm you are 13+ and consent to the
   collection and server-side processing described above. You can withdraw
   consent at any time, which will delete your photos and stop processing.