Privacy Policy

Last Updated: September 2, 2026

This Privacy Policy explains how DermaCare ("we," "us," or "our") collects, uses, stores, and shares information when you use our skincare recommendation service (the "Service"). Please read this policy carefully. By using the Service, you agree to the practices described here.

1. Information We Collect

1.1 Information You Provide Directly: Account information: name, email address, and password. Skin profile information: skin type, skin biome details, and self-reported allergies or sensitivities. Preference information: budget range and product preferences. Uploaded images: photographs of skincare products you upload for review or compatibility analysis. We also collect data regarding the tracked efficacy of specific routine ingredients, such as charcoal, niacinamide, hyaluronic acid, and retinoids.

1.2 Information Collected Automatically: Device and usage data, such as IP address, browser or device type, and general usage patterns within the app.

1.3 Information We Do Not Intentionally Collect: We do not ask you to submit medical diagnoses, prescription information, or government identification.

2. Sensitive Nature of Skin and Allergy Data

We recognize that information about allergies and skin conditions can be sensitive. Where consumer health data laws apply, we will obtain your consent before collecting or processing this information, not sell this information without your separate explicit authorization, and provide a mechanism for you to withdraw consent.

3. How We Use Your Information

We use the information we collect to generate skincare product recommendations, process uploaded product images to extract product information, and operate the Service. We do not use your skin, allergy, or health-adjacent information for advertising or marketing purposes, and we do not sell this information to data brokers.

4. How Your Information Is Processed and Shared

Your information is shared with Amazon Web Services (AWS) for data storage and AI-based image content extraction, and Google (Gemini API) to generate personalized routines. These providers process data on our behalf under their own data processing and security terms. We do not sell your personal information.

5. Data Storage, Retention, and Security

Uploaded images are stored in Amazon S3, and skin/preference profile data is stored in Amazon DynamoDB. We retain your information for as long as your account is active or as needed to provide the Service, or to comply with legal requirements. In the event of compromised cloud infrastructure or database breaches, we commit to user notification within 72 hours.

6. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at: privacy@dermacare.com.