Last updated: [Month Day, Year]
Privacy Policy
This Privacy Policy explains how [Legal entity name] ("Pristine," "we," "us," or "our") collects, uses, shares, and protects personal information when you use the Pristine website, mobile app, and related services.
This page includes placeholders for legal and contact details. Replace bracketed fields before publishing this policy as final legal copy.
Information We Collect
Account information
When you sign in, we may collect account identifiers and profile information provided through Sign in with Apple, such as your Apple account identifier, email address, email verification status, private relay status, and name when provided.
Skin profile information
We collect information you provide in onboarding and settings, such as age range, gender, skin type, skin sensitivity, skincare goals, chronic or special skin-related conditions, ingredient preferences, ingredient reactions, and questionnaire answers.
Face scan information
If you choose to take a skin scan, the app captures face photos and sends them to our systems for analysis. The analysis may produce a summary and detected skin concerns such as acne, oiliness, dryness, pores, redness, dark spots, dark circles, and wrinkles. Our current app stores the derived scan result, not the original face photos, after analysis completes.
Product scan information
If you scan a product, the app sends the product image for analysis and may store derived information such as product name, brand name, match outcome, and related catalog identifiers. When you are signed in, product scan events may be associated with your account.
Saved products and recommendations
We store products you add to your shelf or wishlist and recommendation records generated from your skin profile, face scan results, and product catalog data.
Device, usage, and notification information
We may collect technical information needed to operate the service, including request metadata, app version/build information, analytics events, and push notification tokens if you enable notifications.
How We Use Information
- Provide, operate, maintain, and secure Pristine.
- Authenticate your account and keep your session active.
- Analyze face scans and product scans that you choose to submit.
- Create and update your skin profile, product recommendations, shelf, and wishlist.
- Send service messages and push notifications when enabled.
- Monitor reliability, debug errors, prevent abuse, and improve the product.
- Comply with legal obligations and enforce our terms.
Face Scans, Product Scans, and AI Analysis
Face scans and product scans are optional. When you choose to submit a scan, we process the images and related information to provide skin analysis, product identification, product matching, and personalized skincare recommendations.
We may use third-party AI image-analysis providers to process scan images on our behalf. These providers are permitted to process the information only as needed to provide services to us and subject to appropriate confidentiality, security, and data protection obligations.
Analytics and Product Improvement
We may use analytics providers to understand app reliability and usage patterns. Our analytics configuration is intended to avoid sending face photos, product photos, skin profile details, message bodies, authentication tokens, email addresses, names, product names, or brand names as analytics event properties.
How We Share Information
We do not sell your personal information. We may share personal information with service providers that help us operate Pristine, including:
- cloud hosting, infrastructure, and database providers
- authentication providers
- AI image-analysis providers
- analytics providers
- push notification delivery providers
- customer support and operational service providers
We may also share information if required by law, to protect rights and safety, to investigate abuse or security issues, or as part of a merger, acquisition, financing, or sale of assets.
Retention
We retain personal information for as long as needed to provide the Services, maintain your account, comply with legal obligations, resolve disputes, and enforce agreements. Account deletion removes many account-linked records, but some derived or operational records may be retained without your account identifier where permitted by law.
Security
We use administrative, technical, and organizational safeguards designed to protect personal information. No system is completely secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed.
Children
Pristine is not intended for children under 13, or under the age required by applicable law in your region. If you believe a child has provided personal information to us, contact us so we can take appropriate action.
Your Privacy Rights
Depending on where you live, you may have rights to:
- request access to personal information we hold about you
- ask us to correct inaccurate information
- ask us to delete your account or personal information, subject to legal and operational limits
- object to or restrict certain processing where applicable
- withdraw consent where processing is based on consent
- appeal or complain to a regulator where applicable law gives you that right
To exercise these rights, contact us at [privacy email]. We may need to verify your identity before responding.
International Transfers
We and our service providers may process information in countries other than where you live. When required, we use appropriate safeguards for international transfers of personal information.
Cookies and Similar Technologies
Our website may use cookies or similar technologies to operate the site, remember preferences, measure performance, and understand usage. You can control cookies through your browser settings.
Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at [privacy email] or [mailing address].