BeautySkIn

Privacy Policy

Last updated: 30 October 2026

BeautySkIn is built to respect your privacy. Here, in plain words, is what happens with your data.

Who is responsible

The app is published by Nathalie Scharf (AI-Creativ), an independent sole trader based in Martinique, France.

The camera

The app uses the camera to show makeup on your face in real time, and to pick up the colour of a garment or a product when you ask it to.

No image is ever sent anywhere. Face detection runs entirely on your device, through a component embedded in the app that works without an internet connection. The video stream is never recorded, transmitted, or analysed anywhere other than on your phone. The skin scan is fully local as well.

Your data stays on your device

Your kit, profile, looks and settings are stored only on your phone (the browser's local storage). No account to create, no resale. This data is never sent to a server, with one exception: on the web version, if you accept reminders by notification, the text of a reminder may contain the name of a product from your kit that is about to expire (see “Reminders”). The only information that leaves your phone is described below, one item at a time.

• No account to create, no email address requested.
• No data sold.
• No location data requested or stored.

External services

Barcode scanning queries the free public database Open Beauty Facts to find a product name from its barcode. Only the barcode number is sent, nothing else.

Anonymous usage measurement

To find out which screens cause trouble and fix what gets in the way, the app sends technical events: the name of the screen shown, the label of the button tapped, the list of buttons shown on that screen, and incidents such as a refused camera. These events are hosted in Europe, in Frankfurt, by the PostHog service.

What is never sent: no photo, no face analysis, no skin colour, no kit, no first name, no address, no location. That data stays on your phone.

A randomly drawn number links the steps of a single visit. It cannot tell who you are, and it disappears if you clear the app data. This measurement uses no cookie and never records your screen.

You can refuse this measurement in the “Settings” tab, privacy section. Nothing is sent any more.

Your subscription

On Android, the subscription is optional. It is handled by Google Play, which processes payment and billing. We never see, receive or store any bank details.

Subscriptions are managed technically through the RevenueCat service, a company based in the United States. RevenueCat receives an anonymous purchase identifier, not linked to your name or your email address, and the details of the purchase: plan, dates, status. You can cancel at any time from the Subscriptions section of your Google Play account.

On the web (beautyskin.nathielab.com), the subscription is paid by card, through RevenueCat and Stripe. You give your card and your email address directly when you pay: we never see your card. Your email is used to send you the confirmation, your receipts, the reminder before a yearly renewal and the link to manage your subscription. You can cancel at any time from that link. If you cancel, we may also email you to ask why (optional) and, twice, to offer you a discount to come back; each offer email has a link to stop receiving them. The web subscription is sold in France, under our terms of sale (in French).

Reminders

BeautySkIn can send you four reminders, all optional:

• the morning ritual;
• the kit check;
• an alert 7 days before the expiry date of an opened product in your kit. You control it with the “Warn me when a product expires” switch, on the Me page, which is on to begin with;
• if you start a free trial, a reminder 2 days before the trial ends.

In the Android app, these reminders are local notifications: your phone schedules and triggers them itself, without going through any server. Permission to show notifications is only requested when it is needed.

On the web version, since 30 October 2026, the same reminders can arrive as a notification from your browser, only if you accept it. The permission window only appears after an action on your part. If you accept:

• your browser gives us an anonymous subscription address, provided by its notification service: Google for Chrome, Apple for Safari, Mozilla for Firefox, Microsoft for Edge;
• our server, the same one as our websites, at our host Hostinger, keeps this address with the dated list of planned reminders and their texts, so as to send them to you at the right time. The text of an alert may contain the name of the product from your kit that is about to expire;
• it receives neither your name, nor your email address, nor any account, nor the rest of your data in the app;
• the content of each notification is end-to-end encrypted up to your browser: the notification service cannot read it;
• each reminder is deleted from our server as soon as it is sent. The app sends its list again each time it is opened, for the next three weeks only: a reminder planned further ahead, such as a distant expiry date or trial end, is only passed on at a later opening;
• the subscription address is deleted when no reminder is left, when you turn reminders off in the app, or when your browser reports that the subscription no longer exists. You can also withdraw permission in your browser settings.

On iPhone, these notifications only work if you have added the web app to your home screen. Reminders are used for nothing else: no advertising, no tracking.

Measuring our ads (Meta), only if you accept it

On the web version of BeautySkIn, in a browser, a banner asks for your consent. If you click “Accept”, the app loads the Meta pixel (Meta is the company that runs Facebook and Instagram). It helps us know whether our ads on Facebook and Instagram bring people to BeautySkIn, and show those ads to people likely to be interested. If you decline, or if you do not answer, nothing is loaded and nothing is sent. The Android app has no pixel.

What is then sent to Meta:

• the address of the page shown;
• two specific actions: finishing the app walkthrough, opening the plans screen;
• your IP address and technical information about your browser and your device;
• an identifier stored by Meta in a cookie (_fbp), kept for about three months.

If a Facebook or Instagram account is signed in on this browser, Meta may link this information to that account.

What is never sent: no photo, no image of your face, no skin colour, and neither your kit, your looks nor your first name. Meta's automatic reading of buttons and forms is turned off, and no email address or phone number is passed on to it.

Who is responsible: for the collection and sending of this information, AI-Creativ (Nathalie Scharf) and Meta Platforms Ireland Limited are joint controllers (Article 26 of the GDPR). The essentials of their agreement can be read at facebook.com/legal/controller_addendum. For what Meta does with it afterwards, Meta alone is responsible: see its privacy policy. Meta may process this information in the United States; it states that it relies on the EU–US Data Privacy Framework to do so.

Legal basis and duration: your consent. Your choice is kept for six months on this device, after which you are asked again.

Changing your mind: at any time, in the “Settings” tab, “Manage cookies”. If you withdraw your consent, nothing more is sent from that moment on. You can also clear your browser's cookies. You can exercise your rights with us, at contact@ai-creativ.fr, or directly with Meta.

Permissions requested

The app requests only three permissions:

• Camera: for makeup try-on and colour capture, locally.
• Internet: for barcode scanning, usage measurement and checking your subscription.
• Notifications: for reminders, optional, only requested when it is needed.

No location, storage, contacts, microphone, or advertising identifier permission.

Deleting your data

Since your data lives only on your phone, you erase all of it by uninstalling the app, or by clearing the app's data in your device settings. No request to us is needed. Usage measurement events are linked only to a randomly drawn number: they cannot be traced back to you. On the web version, if you accepted reminders, each reminder is deleted from our server as soon as it is sent, and turning reminders off in the app deletes your subscription address.

Children

The app is intended for an adult audience and does not target children under 13.

Changes

If a future version of the app changes how your data is handled, this page will be updated and the date at the top changed accordingly.

A question

Write to us and we will answer as soon as we can.