Privacy Policy

Skin Pilot is a skincare ingredient analysis and product discovery service. In this policy, Skin Pilot, we, us, and our refer to the operator of the Skin Pilot website and related services.

You can contact us through our [email protected] for privacy questions, account requests, or data rights requests.

• Account information, such as your Firebase user ID, email address, display name, profile photo, and sign-in provider when you log in with Google or another supported provider.
• Skin profile information you choose to save, including skin type and selected skin concerns.
• Saved collection data, including collection names, saved product IDs, and timestamps.
• Ingredient analysis input, including pasted ingredient lists and the matched analysis results.
• Technical data such as IP address, request headers, cookies used for authentication, device or browser information, and approximate country data made available by hosting infrastructure.
• Usage information, such as product page views and rate-limit events.
• Messages or requests you send to us through contact or support channels.

• To create and manage your account.
• To save your skin profile, collections, and product preferences.
• To analyze ingredient lists and show product or ingredient information.
• To personalize match scores and product signals based on the profile details you provide.
• To prevent abuse, enforce rate limits, keep the service reliable, and protect the platform.
• To understand aggregate product interest and improve search, catalog quality, and site performance.
• To respond to support, privacy, or legal requests.

Skin type, skin concerns, ingredient triggers, and product match signals can feel personal. We use this information to provide product and ingredient analysis, not to diagnose, treat, cure, or prevent any disease or medical condition.

Do not use Skin Pilot as a substitute for advice from a doctor, dermatologist, pharmacist, or other qualified professional.

Where privacy law requires a legal basis, we rely on the following bases depending on the context:

• Your consent, where you choose to create an account, save a skin profile, paste an ingredient list, or enable optional features.
• Performance of a contract, where processing is needed to provide the service you request.
• Legitimate interests, such as security, abuse prevention, analytics, product improvement, and maintaining the catalog.
• Legal obligations, where we must keep or disclose information to comply with applicable law.

We use service providers to run Skin Pilot. These providers may process information on our behalf:

• Firebase and Google Cloud for authentication, hosting, server functions, storage, and database services.
• Typesense for product and ingredient search.
• Upstash Redis for rate limiting, request throttling, and related operational analytics.
• Retailer and affiliate destinations when you choose to follow an external purchase link.

Skin Pilot uses cookies and similar local storage primarily to keep you signed in and remember interface state.

Retailer and affiliate websites you visit from Skin Pilot may use their own cookies, tracking, or attribution technologies. Their privacy policies apply once you leave Skin Pilot.

• Account, skin profile, and saved collection data are kept while your account remains active or until you delete them.
• Ingredient analysis lists are designed to expire after a short period, currently about two days.
• Rate-limit and product-view throttling records are kept temporarily as needed for security, abuse prevention, and operational reliability.
• Aggregated operational and catalog data may be kept for product improvement without directly identifying you.

• You can update your name, email, skin profile, and saved collections from your account settings.
• You can delete your account from account settings.
• You can request access, correction, deletion, restriction, portability, or objection where applicable law gives you those rights.
• You can opt out of optional communications if we introduce them in the future.

To make a privacy request, contact us through our [email protected]. We may need to verify your identity before acting on a request.

Skin Pilot and its providers may process information in countries other than where you live. When required, we rely on appropriate transfer safeguards provided by our vendors or applicable law.

Skin Pilot is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can review and remove it where appropriate.

We may update this policy as Skin Pilot changes. The date at the top shows when it was last updated. Material changes may be communicated through the site or another appropriate method.