Privacy Policy

We only collect what we need to give you your reading:

• Account details. Your email, a secured password, display name, and role.
• Your wellness inputs. The responses you give across the six dimensions, your archetype and protocol, check-ins and notes, and any photo you choose to add.
• Subscription details. Your plan and status. Payment card details are handled by our payment processor and never touch our servers.
• Usage details. Which pages and features you use, approximate device information, and timestamps.
• Messages. Anything you send us through support or feedback.

• To build your archetype, protocols, and progress tracking.
• To run your account, sign you in, and send essential messages like receipts and password resets.
• To improve the platform using aggregated, de-identified patterns.
• To keep the service safe and meet our legal obligations.
• With your consent, to send you educational content and product updates.

We use recognized safeguards: encryption while your data travels, encryption at rest for sensitive fields, role-based access control, activity logging, and regular security reviews. No system is perfectly secure. If a breach ever affects your information, we will tell you and the relevant authority as the law requires.

We never sell your personal information, and we never share it for someone else's marketing. We share only with the trusted providers that help us run the platform, and only the minimum they need:

• Supabase, secure hosting and sign-in.
• Vercel, application hosting and delivery.
• Stripe, subscription billing.
• Resend, essential email delivery.

Each provider works under a written agreement. We disclose data to authorities only when compelled by valid legal process or to prevent imminent harm.

You are always in control. You can:

• Access the information we hold about you.
• Correct anything inaccurate or incomplete.
• Delete your account and personal information.
• Export your data in a portable format.
• Withdraw consent for optional processing at any time.

To exercise any right, email privacy@skinlumis.com. We respond within 30 days.

Your wellness inputs are the most personal thing you share with us, so they get extra protection. We treat them as sensitive information. They are never sold, never used for advertising, and never shared for another party's purposes.

Sensitive fields are encrypted, access is tightly limited, and any aggregated research we produce is de-identified so it can never be traced back to you. You can delete your wellness record at any time, and it goes.

We keep cookies to a minimum:

• Essential, sign-in and security. The service does not work without these.
• Functional, remembering your preferences.
• Analytics, first-party, aggregated measurement to help us improve. No advertising trackers, ever.

Skinlumis is for adults. You must be at least 18 to use it. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information to us, contact us and we will delete it.

We may update this policy as the platform grows. When a change is significant, we will tell you by email or an in-product notice at least 14 days before it takes effect. The date at the top always reflects the latest version.

Any privacy question, request, or concern? Reach our privacy team at privacy@skinlumis.com.