How Lumynous Care handles your information.

Depending on how you use the Service, we may collect:

• Account information, such as your Sign in with Apple account identifier, relay or real email address provided by Apple, and your authenticated service user ID.
• Profile and preference information you enter in the app, such as display name, preferred language, skin type, skincare concerns, allergies, fragrance preference, routine goal, budget level, and appearance preferences.
• Local onboarding answers, such as questionnaire responses, inferred skin profile, and recommended routine template. In app versions with local-only onboarding, these answers are stored and processed on your device and are not sent to our servers.
• Product interaction data, such as favorites, compare lists, routines, saved products, and scan history.
• Scan submission data, such as barcode values, product name or brand hints, ingredient photos you upload, OCR text extracted from those photos, normalized ingredient text, and scan result status.
• Subscription and entitlement data needed to provide premium access, such as subscription status, entitlement state, product identifiers, expiration dates, and related purchase lifecycle events supplied through Apple and RevenueCat.
• Limited technical and security data, such as request metadata, device-facing error details, and diagnostic logs used to keep the Service secure and functioning.

• Directly from you when you create an account, save products, build routines, or upload ingredient photos. Onboarding answers in the local-only flow are entered and processed on your device.
• From Apple when you sign in with Apple or complete an in-app subscription purchase handled by Apple.
• From our infrastructure and processors when the app syncs favorites, processes uploads, validates subscriptions, or generates scan results.
• From your device with permission, such as camera or photo library access when you choose to scan or upload an ingredient image.

• Authenticate you and maintain your account session.
• Provide personalized product, ingredient, and routine features.
• Personalize your skin profile and routine recommendations from onboarding answers on your device, including when you do not subscribe. The local-only onboarding flow does not upload these answers or their derived skin profile to our servers.
• Process barcode and ingredient-photo scans, including OCR, structured extraction, storage, and result retrieval.
• Sync your saved items and account-backed state across app sessions.
• Deliver and manage premium access, free trials, and purchase restoration flows.
• Protect the Service, troubleshoot failures, detect abuse, and improve reliability.
• Respond to support requests and comply with legal obligations.

We do not sell your personal information. We share information only as necessary to operate the Service, for example with:

• Apple, to authenticate your Sign in with Apple session and to process App Store purchases and subscription management.
• Cloudflare, which hosts our API, database, and file storage used for account-backed features and image uploads.
• OpenAI, which processes product photos you choose to scan and related scan details to identify products and read ingredient information using AI when you submit a photo scan.
• RevenueCat, which helps us process subscription status and entitlement events.
• Service providers or contractors who help us operate, secure, or support the Service under confidentiality and data-use restrictions.
• Law enforcement, regulators, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, or the integrity of the Service.

Any third party that receives user data from us is expected to protect that data with safeguards that are at least equal to the protections described in this Privacy Policy.

• Account-linked data is retained for as long as your account is active unless a longer period is required for legal, security, or fraud-prevention reasons.
• Ingredient photos, scan submissions, favorites, entitlement records, and related account data are deleted when you use the in-app account deletion flow, subject to limited backup, security, or legal retention windows.
• When you delete your account in the app, we currently delete the authenticated account, active sessions, favorites, entitlements, scan submissions, stored Apple refresh token records, and associated uploaded scan assets tied to your account.
• Local-only data stored on your device, such as routine drafts or exported JSON files, remains on your device until you remove it, reset the app, or delete the app.
• Earlier app versions may have uploaded onboarding intake records before account creation. Switching to local-only onboarding does not automatically delete those existing server records. Contact us using the support details below to request deletion of previously uploaded information.
• Operational logs are kept only as long as reasonably necessary for security, debugging, and service integrity.

• In app versions with local-only onboarding, you can reset saved onboarding answers and restore your skin profile to defaults using Manage onboarding answers in onboarding, app Settings, or the subscription screen. This keeps your account, subscription, saved products, and current routine.
• You can use parts of the app without signing in, but account-backed sync and upload features may require an authenticated account.
• You can revoke camera or photo library permission through iOS Settings at any time.
• Photo scanning is optional. You can use other parts of the app without submitting product photos for AI processing.
• You can delete your account in the app under More > Settings > Account > Delete Account.
• You can export a JSON copy of local app data from the app settings screen.
• If applicable law gives you privacy rights such as access, correction, deletion, or objection, you can contact us at info@alterkon.com.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will investigate and take appropriate action.

Your information may be processed in countries other than the one where you live. Those countries may have different data protection laws. When we transfer personal information, we take reasonable steps to protect it using contractual, technical, and organizational safeguards appropriate to the transfer.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page and may provide additional notice in the app or on the website when required.

If you have questions about this Privacy Policy or our privacy practices, contact Alterkon at info@alterkon.com.