Privacy Policy

1. Introduction

SkinCognition ("we", "us", "our") is operated by Ruxi.AI. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service"). Please read this policy carefully. By using the Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

• Account information: email address, name, age, gender, and skin type when you create an account.
• Profile data: skin concerns, treatment preferences, and region/location you provide.
• Authentication data: login credentials managed through Firebase Authentication.

2.2 Skin Analysis Data

• Facial photographs you upload for skin analysis.
• AI-generated analysis results including skin condition assessments, severity scores, and metric values.
• Treatment recommendations and skincare routine data.
• Progress tracking data across multiple analyses.

2.3 Usage Data

• Device information: device type, operating system, browser type.
• Log data: access times, pages viewed, features used.
• Camera and sensor data used during the photo capture process (processed locally and not stored beyond the analysis).

3. How We Use Your Information

• To provide AI-powered skin analysis and personalised skincare recommendations.
• To generate treatment eligibility assessments and skincare routines.
• To track your skin health progress over time.
• To improve our AI models and analysis accuracy (using anonymised, aggregated data only).
• To communicate with you about your account and provide customer support.
• To process orders you place for skincare products and arrange their delivery.
• To comply with legal obligations and protect our rights.

4. Data Storage and Security

Your data is stored securely using Google Firebase infrastructure with encryption at rest and in transit. Facial photographs are processed by our AI analysis engine and stored in encrypted cloud storage. We implement industry-standard security measures including TLS/SSL encryption, access controls, and regular security audits to protect your personal information.

5. Data Sharing

We do not sell your personal information to third parties. We may share data with:

• Google Firebase — for authentication, data storage, and analytics.
• Google AI (Gemini) — for processing skin analysis requests (photos are sent for analysis and not retained by Google beyond processing).
• Stripe — for secure payment processing when you purchase products (we never store your full card details).
• Our fulfilment partners — solely to deliver products you have ordered.
• Law enforcement — if required by law or to protect our legal rights.

6. Your Rights

Under applicable data protection laws (including GDPR and UK Data Protection Act 2018), you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate personal data.
• Erasure: request deletion of your personal data ("right to be forgotten").
• Portability: request a machine-readable copy of your data.
• Restriction: request restriction of processing of your data.
• Objection: object to processing of your personal data.
• Withdraw consent at any time by contacting us or deleting your account.

You can delete your account and all associated data at any time from Profile → Delete Account inside the app.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Analysis history is retained to enable progress tracking. You may request deletion of your account and all associated data at any time by contacting support@skincognition.com. Upon account deletion, your data will be permanently removed within 30 days.

8. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

9. International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States (Google Cloud infrastructure). We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the app and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

11. Contact Us

Questions about this policy or your data? Email support@skincognition.com.