Privacy Policy

Data we collect

• Account: your email address and password (hashed, never readable by us).
• Beauty profile: your questionnaire answers (goals, skin type, budget, categories) and your color profile (skin tone, undertone, eye and hair color, visible skin finish: glowing, balanced, shiny or matte), including any corrections you make, and the history of your Glow score gauges (apparent hydration, radiance and tone, 0 to 100) to track your progress.
• Analysis results: the color profile produced by each analysis, its date and a confidence score. Never the photo.
• My kit: the products you save as favorites and the ones you own (brand, name, shade). A product photo is only used to read it and is never stored.
• Glow up goals: the program you pick, its start date and the steps or missions you tick off (to show your progress, streak and badges).
• Occasions and trips: the occasion type, the name you give it, its dates and the items ticked in your pouch.
• Cycle mode: NOTHING is collected. Your dates stay on your phone only, are never sent to our servers or used in our analytics, and are erased when you sign out or delete your account. Reminders (occasions, cycle) are scheduled on your phone only.
• Subscription: your Premium status (active or not, expiry date), provided by Apple and RevenueCat. We never see your payment details.

Your photo

When you start an analysis, your selfie is resized on your phone, then sent encrypted to our server, which forwards it to OpenAI only to read your skin tone, undertone, eye and hair color, your skin’s finish and how it looks (hydration, radiance, evenness) to compute your Glow score. The scan never rates your face or features. If you use “Try your look”, OpenAI also creates a made-up version of your photo (AI simulation): it is sent straight back to your phone and never stored by Shadewise.

Shadewise does not store the photo on its servers or in its databases. A copy is kept only on your phone, in the app’s private storage, so you can review your analysis; it is erased when you delete it, sign out or delete your account. On the server side, only the result is saved. OpenAI does not use data sent through its API to train its models and may keep it for up to 30 days for abuse monitoring before deleting it.

We never use your face to identify you, and the analysis does not look for your age, origin or any sensitive trait. You can also fill in your profile manually, with no photo at all.

Why we use this data

• To provide the service: create your account, compute your color profile, recommend products and keep your favorites (performance of contract).
• To manage your Premium subscription (performance of contract).
• To analyze your photo: only after your explicit consent in the app, which you can withdraw by no longer using the analysis.
• Security: to prevent abuse, for example by limiting analyses per period (legitimate interest).

Our providers

We rely on these processors, each limited to its role:

• Supabase (database, authentication, server functions), hosted in the European Union (Paris).
• OpenAI (photo analysis), United States, covered by the European Commission's Standard Contractual Clauses.
• RevenueCat (subscription management), United States.
• Apple (subscription payments through the App Store and app distribution).
• Vercel (hosting of this website).

What we don't do

• No advertising, no ad tracking, no selling or renting of data.
• No third-party audience analytics in the app.
• No facial recognition.

Retention

Your account data, profile, analysis results, kit, goals and occasions are kept as long as your account exists. When you delete your account, they are erased from our database immediately (our host's technical backups are overwritten within days).

Your rights

You can access, correct (Profile → Edit my profile), export, object to the processing of, or delete your data. Full deletion is done in the app: Profile → Delete my account.

For any other request, contact us by email at alric.jouy@gmail.com. You may also contact your data protection authority.

Purchase history kept by Apple and RevenueCat (your account's anonymous identifier, transactions) is governed by their own policies and accounting obligations; you can ask us to have your RevenueCat record deleted.

Note: deleting your account does not cancel an active subscription. Subscriptions are managed in iPhone Settings → your name → Subscriptions.

Minimum age

Shadewise is intended for people aged 16 and over.

Changes

If this policy changes significantly, we will let you know in the app before the change applies.