Privacy policy.

• Photos you upload or capture for a skin check.
• Notes you type about concerns, sensitivities, goals or current actives.
• The generated skin report, including scores, suggested formula and routine.
• Account data if you sign up: email address, sign-in method, display name and any skin goals you save.
• Basic technical data needed to run and secure the site, such as request logs.

Your photo is sent over an encrypted connection to an AI model provider that analyses the image and returns the report. It is used to produce your result and, where you are signed in, to keep your history so checks can be compared over time. We do not sell photos, use them for advertising, or publish them.

If you are not signed in, the check runs and the result is shown to you; it is not saved to a client file. If you are signed in, the photo and the full report are stored privately against your account.

• Our hosting and database provider, which stores accounts, reports and photos in a private, access-controlled store.
• An AI model provider, which processes the submitted image and notes to generate the report.
• Google, only if you choose Google sign-in, to authenticate you.

These providers act on our instructions. Processing may take place outside your country; where that happens we rely on the safeguards offered by those providers.

Access to stored photos and reports is restricted to your own account through row-level security rules, and photos are held in a private bucket that is not publicly listable. Images are served to you through short-lived signed links. No system is perfectly secure, so please use a strong, unique password.

Photos and reports stay in your portal until you delete them or ask us to close your account, because history is what makes progress tracking work. When you ask us to delete your account we remove your photos, reports and profile from our systems, other than anything we must keep for legal or safety reasons.

• Run a check without signing in if you do not want anything stored.
• Ask for a copy of the data held about you.
• Ask us to correct anything inaccurate in your profile.
• Ask us to delete your photos, reports or entire account.
• Withdraw consent for future checks at any time by not submitting further photos.

To exercise any of these, email privacy@biofiniti.com from the address on your account.

We use only the storage needed to keep you signed in and to run the site. We do not run third-party advertising trackers.

The service is for adults. We do not knowingly collect data from anyone under 18. If you believe a child's photo has been uploaded, contact us and we will delete it.

We will update this page if our practices change. For any privacy question, contact privacy@biofiniti.com.