Privacy Policy

1. Introduction

Welcome to Vibe Skin AI ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Vibe Skin AI (the "App"), which provides AI-powered skin analysis and personalized skincare recommendations.

Our App uses advanced Google Gemini AI technology to analyze facial photos and provide personalized skincare routines specifically designed for Indian skin types and climate conditions. We are committed to protecting your privacy and ensuring the security of your personal information.

By using our App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our App.

2. App Overview

Vibe Skin AI is an AI-powered mobile application that provides:

• Comprehensive skin analysis using Google Gemini AI technology
• Personalized morning and evening skincare routines
• Progress tracking and skin improvement monitoring
• Season-aware recommendations for Indian climate conditions
• Ingredient-focused product suggestions without brand promotion

The App is built with React Native and Expo, and is available on Google Play Store and Apple App Store.

3. Information We Collect

3.1 Personal Information

We collect the following personal information when you use our App:

• Account Information: Email address for account creation and authentication
• Profile Information: Full name, age, gender for personalized recommendations
• Facial Photos: Images of your face for AI skin analysis (processed but not permanently stored)
• Usage Data: Skincare routine completion data, preferences, and app interaction history
• Analysis Results: AI-generated skin metrics and personalized recommendations

3.2 Technical Information

• Device Information: Device model, operating system, unique device identifiers
• App Usage Analytics: Features used, session duration, app performance metrics
• Authentication Data: Firebase Authentication tokens and session information
• Local Storage: Cached data stored on your device for offline functionality

3.3 AI Processing Data

• Skin Analysis Metrics: Wrinkles, firmness, pore size, pigmentation, radiance, texture, and other skin health indicators
• Processed Recommendations: AI-generated skincare routines and product suggestions
• Seasonal Adjustments: Climate-based modifications for Indian weather conditions
• Progress Data: Historical analysis comparisons and improvement tracking

4. How We Use Your Information

We use the collected information for the following purposes:

• AI Skin Analysis: Process facial photos through Google Gemini AI to generate comprehensive skin assessments
• Personalized Recommendations: Create custom skincare routines based on your skin type, concerns, and Indian climate conditions
• Progress Tracking: Monitor your skin improvement over time and adjust recommendations accordingly
• Account Management: Maintain your user account, authenticate access, and provide customer support
• App Improvement: Analyze usage patterns to enhance app functionality and user experience
• Communication: Send you important updates, notifications about your skincare routine, and app-related information
• Safety and Security: Detect and prevent fraudulent activities, abuse, and security threats

5. Third-Party Services

Our App integrates with the following third-party services:

5.1 Google Services

• Google Gemini AI: Processes facial images for skin analysis (images are not permanently stored by Google)
• Firebase Authentication: Manages user accounts and authentication
• Firestore Database: Stores user profiles, analysis history, and app data
• Firebase Analytics: Monitors app performance and usage statistics
• Google Cloud Platform: Provides secure cloud infrastructure

5.2 Development Services

• Expo Services: App development, deployment, and over-the-air updates
• App Store Services: Distribution through Google Play Store and Apple App Store

6. Data Storage and Security

6.1 Data Storage

• Cloud Storage: User data is stored in Google Firestore with user-specific access controls
• Image Processing: Facial photos are processed by Google Gemini AI but are not permanently stored
• Local Storage: Some data is cached on your device using AsyncStorage for offline functionality
• Analysis Results: Skin analysis results are stored with encrypted user ID association

6.2 Security Measures

• Encryption: All data transmission is encrypted using industry-standard TLS protocols
• Access Controls: Strict access controls ensure only authorized personnel can access user data
• Firebase Security: Leveraging Google's enterprise-grade security infrastructure
• Regular Audits: Regular security assessments and vulnerability testing
• No Permanent Image Storage: Facial photos are processed and immediately deleted

7. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: Google Gemini AI for skin analysis processing (with strict data protection agreements)
• Legal Requirements: When required by law, regulation, or legal process
• Safety and Security: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with user notification)
• Consent: With your explicit consent for specific purposes

We never share your personal information for marketing purposes or sell it to third parties.

8. Your Rights and Choices

You have the following rights regarding your personal information:

8.1 Access and Control

• Account Access: View and update your profile information within the App
• Data Export: Request a copy of your personal data in a portable format
• Data Correction: Correct inaccurate or incomplete personal information
• Usage History: View your skin analysis history and routine completion data

8.2 Privacy Controls

• Account Deletion: Delete your account and associated data at any time
• Data Minimization: Opt out of non-essential data collection where possible
• Analytics Opt-out: Disable usage analytics and performance monitoring
• Communication Preferences: Control notification and email preferences

8.3 GDPR Rights (EU Users)

• Right to Portability: Receive your data in a structured, machine-readable format
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we process your data
• Right to Object: Object to processing based on legitimate interests

9. Age Restrictions

Our App is designed for users aged 13 years and older. We comply with:

• COPPA Compliance: We do not knowingly collect personal information from children under 13
• Firebase Auth Restrictions: Age verification through Firebase Authentication
• Parental Consent: Users under 18 should obtain parental consent before using the App
• Account Termination: Accounts created by users under 13 will be immediately terminated

If you believe a child under 13 has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including:

• Google Cloud Infrastructure: Data may be processed in Google's global data centers
• Adequate Protection: All transfers are protected by appropriate safeguards
• Indian Users: Special consideration for Indian data protection requirements
• EU Users: GDPR-compliant transfer mechanisms for European users

11. Cookies and Tracking Technologies

Our mobile App uses the following tracking technologies:

• Local Storage: AsyncStorage for offline functionality and user preferences
• Session Tokens: Firebase authentication tokens for secure access
• Analytics: Firebase Analytics for app performance monitoring (can be opted out)
• Crash Reporting: Automated crash reports to improve app stability

You can control most of these technologies through your device settings or app preferences.

12. Data Retention

We retain your information for the following periods:

• Account Data: Until you delete your account or request data deletion
• Facial Photos: Immediately deleted after AI processing (not stored)
• Analysis Results: Retained for historical tracking until account deletion
• Usage Analytics: Aggregated data may be retained for up to 2 years
• Legal Requirements: Some data may be retained longer if required by law

13. Medical Disclaimer

Vibe Skin AI is not a medical device and does not provide medical advice, diagnosis, or treatment. Our AI-powered skin analysis is for informational and educational purposes only.

• Professional Consultation: Always consult with dermatologists or healthcare professionals for serious skin concerns
• Not a Substitute: Our recommendations do not replace professional medical advice
• Individual Results: Results may vary and are not guaranteed
• Allergies and Reactions: Test new products carefully and discontinue use if irritation occurs

14. Regulatory Compliance

We comply with applicable privacy laws and regulations including:

• GDPR: General Data Protection Regulation for EU users
• CCPA: California Consumer Privacy Act for California residents
• Indian Privacy Laws: Compliance with Indian data protection requirements
• Google Play Policy: Adherence to Google Play Store privacy requirements
• Apple Privacy: Compliance with Apple App Store privacy guidelines
• COPPA: Children's Online Privacy Protection Act

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• Notification: We will notify you of significant changes through the App or email
• Effective Date: Changes become effective on the date specified in the updated policy
• Continued Use: Your continued use of the App after changes constitutes acceptance
• Version History: Previous versions of this policy are available upon request

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiries within 30 days. For urgent privacy concerns, please mark your email as "URGENT - Privacy Request."