PRIVACY POLICY
Effective Date: August 2026
ZETTA TECH SOLUTIONS SRL ("we", "our", or "us") operates the SKIN Core AI mobile application and website. We are committed to protecting your privacy and ensuring your personal data is handled securely and transparently in compliance with the General Data Protection Regulation (GDPR).
1. Information We CollectAccount Data: When you register, we collect your email address, basic profile information (such as age range and gender), and secure authentication credentials.Facial and Cosmetic Data: To provide our core service, we collect images you upload (selfies) and images of cosmetic product labels. We strictly analyze cosmetic surface features (e.g., texture, redness). We do not collect, extract, or store Biometric Identifiers (such as facial geometry mapping used for identity verification).Usage and Device Data: We may collect anonymous diagnostic data, device type, and operating system version to maintain app stability.
2. Face Data Collection, Usage, and 30-Day Auto-Deletion SKIN Core AI collects 2D facial images (selfies) provided voluntarily by the user solely for generating cosmetic skin analysis. We do not use facial recognition technology for personal identification, nor do we collect biometric identifiers. Your facial images are securely transmitted via API to our third-party analysis provider, Face++ (Megvii), strictly for algorithmic skin mapping (e.g., texture, redness). The anonymous data points are then processed by Google Gemini AI to generate your routine. Face data is NEVER shared with advertisers, data brokers, or external entities. Data Retention & The 30-Day Rule: We operate on a strict data minimization protocol. Images and associated scan data are stored securely on Google Firebase solely to allow you to view your scan history, but they are subject to an automated 30-day Time-To-Live (TTL) rule. This means all face data and scan history are automatically and permanently deleted from our servers exactly 30 days after the scan. Additionally, you can request the immediate deletion of your data at any time by deleting your account within the app..
3. Data Retention & The "30-Day Rule" We operate on a strict data minimization protocol. To provide the History feature, we store your generated analytical text reports and scores for exactly 30 days, after which they are automatically deleted. However, your actual facial images (selfies) are NEVER stored on our servers. They are permanently discarded the exact moment the AI completes the analysis.
4. Third-Party Service Providers We employ trusted third-party services to operate the app. These include:Google Firebase & Google Cloud: For secure database hosting, user authentication, and AI processing infrastructure.RevenueCat: To securely manage your subscription and billing status. We do not store or process your credit card information directly; this is handled entirely by Apple (App Store) or Google (Google Play).API Providers (e.g., Megvii/Face++): Strictly for optical mapping of cosmetic features in real-time. Images sent to Face++ are processed ephemerally and are not stored, logged, or used by the provider to train external models.
5. Your GDPR Rights You have the right to access, rectify, or request the immediate deletion of your personal data at any time. You can delete your account directly from within the SKIN Core AI app settings, which will instantly purge all your active data from our systems.
6. Contact Us For any privacy-related questions, please contact us at: contact@skincoreai.com.