Privacy Policy

Skin Savvy AI is a Shopify app built and operated by the Skin Savvy AI team ("we", "us"). The app adds an AI skin analysis scanner and personalized product routine builder to a merchant's online store.

This policy explains what data the app collects, why, how long it is kept, and the rights merchants and shoppers have. It applies to every store that installs the app and to every shopper who uses the scanner on a store where it is installed.

Questions or requests can be sent to suganyanivas2k@gmail.com.

The app does not collect shopper names, email addresses, phone numbers, postal addresses, or order history. It does not request the read_orders, read_customers, or write_customers Shopify scopes.

Selfies are analysed in the shopper's browser. When the AI double-check is on, small skin tiles — with eyes, lips and hair blanked out — are sent to an AI service provider to double-check the marks measured on the device, then discarded. Photos are never stored by the app.

The app does not use cookies for advertising, does not sell data, and does not run third-party ad trackers.

Store domain: to identify the store, run the app, and report analytics back to that store.

Product catalog: products, variants, prices, images, tags and descriptions, read through the Shopify Admin API (read_products, write_products). Products can also be updated or created by the merchant from inside the app.

Shop access tokens: OAuth tokens used to call the Shopify API on the merchant's behalf. Tokens are stored encrypted in transit and at rest, are expiring offline tokens, and are refreshed automatically.

App configuration: product-to-skin-concern mappings, merchant settings and notes the merchant enters.

For each completed scan we store an anonymous analysis record: a numeric skin score, detected skin concerns and their severity, the skin type estimate, the routine that was recommended, and which products the shopper viewed or added to cart.

To apply the store's scan limit per shopper and to count unique shoppers, the scanner keeps a random reference in the shopper's browser. The app creates it; it isn't linked to a name, email, Shopify customer account, order or device, and the shopper can remove it by clearing their browser data. Scan records don't contain IP addresses, advertising IDs or contact details.

All scan data collected on a store is available to that store's merchant inside the app: per scan and in aggregate in Insights, as a CSV download of every scan, and as a monthly PDF report.

To operate the app: analyse skin, map the merchant's catalog, build routines, and let shoppers add products to the merchant's cart.

To provide merchant analytics: scan volume, detected concerns, recommendation engagement and add-to-cart rates for the store that generated them.

To bill for the service: subscription plan and scan-credit usage records.

Legal basis (where GDPR applies): performance of our contract with the merchant, and legitimate interests in operating and securing the service.

Data is hosted on managed cloud infrastructure in databases restricted to the app's own services.

Access to merchant dashboards is limited to the store's own staff via Shopify's authenticated embedded session.

Sub-processors we rely on: Shopify (catalog and store administration), our cloud hosting and database provider, and an automated vision service used to generate the skin map overlay. A current sub-processor list is available on request.

Merchant catalog, mappings and settings are kept while the app is installed and deleted within 30 days after the app is uninstalled.

Anonymous scan and analytics records are kept for the life of the installation and deleted within 30 days of uninstall.

Shop access tokens are deactivated immediately when the app is uninstalled and permanently deleted when Shopify sends the shop data erasure request (48 hours after uninstall).

Merchants can view, correct or export their data at any time from inside the app: product mappings and settings in the app, and scan data as a CSV download and a monthly PDF report in Insights. Uninstalling the app deletes the store's data as described in Retention.

We honour Shopify's mandatory privacy webhooks: customers/data_request, customers/redact and shop/redact. Because the app holds no customer personal data, a data request returns confirmation that nothing identifiable is held; redact requests delete the store's records as described in Retention.

Shoppers who want a scan record removed can ask the store they scanned on, or contact us at suganyanivas2k@gmail.com with the store name and approximate time of the scan.

Data in transit is encrypted (TLS). Access tokens are stored server-side and never exposed to the storefront.

Storefront endpoints that receive scan data validate the requesting store and reject requests from stores that don't have the app installed.

We update this policy when the app's data practices change. Material changes are announced to installed merchants before taking effect.

Skin Savvy AI — suganyanivas2k@gmail.com. This app is a cosmetic assessment tool and is not a medical device; scan results are not a medical diagnosis.