Last Updated: October 2, 2025

1. Introduction

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our AI-powered skincare recommendation service ("Service"). We are committed to protecting your privacy and being transparent about our data practices.

We do not sell your personal data to third parties.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our Service, including:

• Skin type, concerns, and conditions

• Age range and gender

• Product preferences and allergies

• Skincare goals and routines

• Account information (name, email address, password)

• Communication preferences

• Feedback and survey responses
  
  

2.2 Automatically Collected Information

When you use our Service, we automatically collect:

• Device information (browser type, operating system, device type)

• IP address and general location data

• Usage data (pages visited, features used, time spent)

• Cookies and similar tracking technologies
  
  

2.3 Information from Third Parties

We may receive information from:

• Analytics providers

• Payment processors (transaction information only)
  
  

3. How We Use Your Information

We use your information to:

• Generate personalized AI-powered skincare recommendations

• Create and manage your account

• Communicate with you about your account and our Service

• Send promotional materials (with your consent)

• Process transactions and affiliate commissions

• Analyze usage patterns and Service performance

• Comply with legal obligations

• Detect and prevent fraud or security issues
  
  

4. AI Processing and Data Anonymization

4.1 Claude API Integration

Our Service uses Anthropic's Claude API to retrieve data and match recommendations. When processing your skincare information through the Claude API:

• All personal identifiers are removed before data is sent to the API

• Your data is anonymized to protect your privacy

• Only relevant skincare information (skin type, concerns, preferences) is processed

• According to Anthropic's policies, data submitted via the API is not used to train their models
  
  

4.2 Data Minimization

We only send the minimum necessary information to the Claude API to personalize your recommendations. Personal information such as your name, email address, and account details are never sent to external AI services.

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for monetary consideration.

5.2 When We Share Information

We may share your information only in the following limited circumstances:

Service Providers: We share anonymized or necessary data with trusted service providers who assist us in operating our Service, including:

• Cloud hosting providers

• AI services (Claude API, with anonymization as described above)

• Analytics platforms

• Payment processors

• Email service providers

These providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements: We may disclose your information when required by law, including:

• Responding to legal process (subpoenas, court orders)

• Protecting our rights and property

• Investigating fraud or security issues

• Complying with regulatory obligations
  
  

Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. The acquiring entity will be required to honor the commitments made in this Privacy Policy unless you consent to a new privacy policy.

With Your Consent: We may share your information with third parties when you explicitly consent to such sharing.

5.3 Aggregate and Anonymous Data

We may share aggregated, anonymized data that cannot identify you personally with partners, researchers, or the public for analytics, research, or marketing purposes.

6. Affiliate Links and Tracking

Our Service contains affiliate links to skincare products. When you click on these links:

• We may earn a commission on purchases (at no additional cost to you)

• Third-party retailers may use cookies to track purchases

• We do not share your personal information with affiliate partners

• Retailers' privacy policies govern data they collect on their platforms
  
  

7. Data Security

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit and at rest

• Secure authentication and access controls

• Regular security assessments

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

8. Data Retention

We retain your information for as long as:

• Your account remains active

• Necessary to provide and improve our Service, including generating personalized skincare routines

• Required by law, regulatory obligations, or to resolve disputes

Inactive accounts: If you haven't logged in or used our Service for 24/36 months, we may delete your account and associated personal information, though we may retain anonymized data for product improvement and research purposes.

Your control: You can request deletion of your account and personal information at any time by emailing us at info@boyskin.co. We'll process deletion requests within 30 days, except where we're required to retain certain information for legal or regulatory compliance.

After deletion: Some information may remain in our backup systems for up to [90 days] before permanent deletion. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics and service improvement.

You may request deletion of your account and personal information at any time (see Section 11).

9. Your Privacy Rights

Depending on your location, you may have the following rights:

9.1 Access and Portability

• Request a copy of the personal information we hold about you

• Receive your data in a structured, commonly used format
  
  

9.2 Correction

• Request correction of inaccurate or incomplete information
  
  

9.3 Deletion

• Request deletion of your personal information (subject to legal retention requirements)
  
  

9.4 Opt-Out

• Unsubscribe from marketing emails (opt-out link in every email)

• Disable cookies through browser settings

• Opt out of certain data processing activities
  
  

9.5 Object and Restrict

• Object to or restrict certain processing of your information

To exercise these rights, contact us using the information in Section 14.

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect information from children under 13. If we discover we have collected information from a child under 13, we will delete it promptly.

11. Your Choices

11.1 Account Information

You can update your account information through your account settings.

11.2 Communication Preferences

You can opt out of promotional emails by clicking the unsubscribe link or contacting us.

11.3 Cookies

You can control cookies through your browser settings. Note that disabling cookies may limit Service functionality.

11.4 Account Deletion

You can request account deletion by contacting us. We will delete your personal information within 30 days, except where retention is required by law.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy with a new "Last Updated" date

• Sending an email notification (for significant changes)

• Displaying a prominent notice on our Service

Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Privacy Contact:
Boy Skin LLC
Email: info@boyskin.co

14.1 Data Protection Officer

For privacy concerns, you may also contact our Data Protection Officer at:
Email: info@boyskin.co

15. Additional Information for Specific Regions

15.1 California Residents (CCPA)

California residents have specific rights under the California Consumer Privacy Act, including:

• Right to know what personal information is collected

• Right to know if personal information is sold or disclosed

• Right to opt-out of the sale of personal information (we do not sell personal information)

• Right to deletion

• Right to non-discrimination
  
  

15.2 European Economic Area Residents (GDPR)

EEA residents have specific rights under the General Data Protection Regulation, including:

• Legal basis for processing (consent, contract performance, legitimate interests)

• Right to lodge a complaint with a supervisory authority

• Right to data portability

• Right to withdraw consent
  
  

15.3 Other Jurisdictions

Residents of other jurisdictions may have additional privacy rights under local laws. Contact us to learn more about your specific rights.

Commitment to Privacy: We are committed to protecting your privacy and handling your information responsibly. We will never sell your personal data to third parties, and we employ industry-standard security practices to safeguard your information.