Privacy Policy

Effective date: May 13, 2026

This Privacy Policy explains how MyVanity collects, uses, stores, and shares information when you use the MyVanity mobile application, related APIs, and any related support or website surfaces that link to this policy.

1. What this policy covers

This policy applies when you:

• create or use a MyVanity account;
• scan or manually enter products;
• build or track skincare routines;
• use assistant, shopping, dashboard, or notification features;
• contact support; or
• otherwise interact with the service.

2. Information MyVanity collects

MyVanity may collect information you provide directly, including:

• account details such as email address and login credentials handled through MyVanity's authentication providers;
• profile information such as skin goals, preferences, timezone, and optional notes you choose to enter;
• shelf and routine data, including saved products, routine steps, completion history, and related preferences;
• assistant messages, shopping guidance prompts, and other content you submit through in-app AI features;
• product photos, scan images, manual product text, and related metadata you submit for product identification and enrichment;
• notification preferences and device push token information;
• subscription and entitlement status information; and
• support communications.

MyVanity may also collect technical and usage information such as:

• device type and platform;
• app version and approximate diagnostics;
• feature interactions;
• error logs; and
• basic API and service performance information.

3. Product scans, images, and chat content

When you use scan, upload, assistant, dashboard, shopping, or routine suggestion features, MyVanity processes the content you submit to provide:

• product identification;
• product enrichment and ingredient summaries;
• compatibility and risk signals;
• shopping fit guidance;
• AI-assisted routine suggestions; and
• related product functionality.

This content may include product labels, packaging, shelf photos, skincare preferences, routines, and free-text prompts you choose to submit.

4. How MyVanity uses information

MyVanity uses information to:

• create and maintain your account;
• authenticate users and manage sessions;
• save shelf, routine, notification, and profile data;
• provide product scan, assistant, dashboard, routine, and shopping features;
• operate subscription and entitlement checks;
• send test or scheduled push notifications where enabled;
• protect the service, detect misuse, and enforce MyVanity's terms;
• troubleshoot, debug, and improve safety, quality, and reliability; and
• comply with legal obligations.

5. Service providers and infrastructure

MyVanity uses third-party providers to operate the service. Based on the current product implementation, these may include:

• Supabase for authentication, database, and persisted app data;
• Google Gemini / Google AI services for product understanding, enrichment, assistant, and routine suggestion features;
• RevenueCat for subscription and entitlement management;
• Apple and related app platform services for purchases and app distribution;
• Expo and push-notification infrastructure for mobile build and push delivery flows; and
• cloud infrastructure and support tooling providers used to host and operate the backend.

These providers may process information on MyVanity's behalf only as needed to provide their services to MyVanity.

6. Notifications

If you enable notifications, MyVanity may store:

• your notification preferences;
• timezone and quiet-hours settings; and
• one or more push tokens associated with your device.

MyVanity uses this information to send test notifications and scheduled reminders such as AM, PM, streak, or setup reminders if you enable those features.

7. Subscriptions and billing

If you purchase or restore a paid entitlement, MyVanity processes limited subscription-related information such as:

• entitlement status;
• product or offering identifiers;
• renewal or expiration state; and
• related subscription events.

MyVanity does not directly process raw payment card information in the app backend. Purchases are handled through the applicable app store and related subscription infrastructure.

8. Limited human review

To operate, maintain, secure, debug, improve safety, investigate abuse, comply with law, and provide customer support, MyVanity may review a limited portion of user-submitted content, including chats, scans, images, and support messages, when reasonably necessary.

Access is limited to authorized personnel and service providers acting on MyVanity's behalf.

9. Legal bases

Where applicable, MyVanity processes personal data:

• to provide the services you request;
• to pursue legitimate interests such as security, fraud prevention, service improvement, and support;
• to comply with legal obligations; and
• where required, based on your consent.

10. Data retention

MyVanity retains information for as long as reasonably necessary to:

• provide the service;
• maintain your account and settings;
• support routine, shelf, notification, and subscription features;
• resolve disputes;
• enforce agreements;
• improve safety and reliability; and
• comply with legal obligations.

Retention periods may vary depending on the type of data and the purpose for which it was collected.

11. Account deletion

The current service includes an account deletion flow. If you delete your account, MyVanity will delete account data associated with that flow, subject to any data that must be retained for legal, security, fraud-prevention, operational, or recordkeeping reasons.

Deletion may not remove information immediately from backups or logs, and some information may persist for a limited period where reasonably necessary.

12. Data sharing

MyVanity does not sell your personal information.

MyVanity may share information:

• with service providers acting on MyVanity's behalf;
• with affiliates, advisors, auditors, or professional service providers where reasonably necessary;
• with law enforcement, regulators, courts, or other third parties where legally required or reasonably necessary to protect rights, safety, or the service; and
• in connection with a merger, acquisition, financing, restructuring, or asset sale.

13. International processing

Your information may be processed in countries other than the one where you live. Where required, MyVanity takes appropriate steps designed to protect personal information when it is transferred across borders.

14. Security

MyVanity uses reasonable technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and MyVanity cannot guarantee absolute security.

15. Your choices and rights

Depending on your location, you may have rights to:

• access certain personal information;
• request correction of inaccurate information;
• request deletion of certain information;
• request export of certain data; and
• object to or restrict certain processing where applicable.

You may also withdraw consent where consent is the basis for processing.

16. Children

MyVanity is not intended for children under the minimum age permitted by applicable law in their jurisdiction, and MyVanity does not knowingly collect personal information from children in violation of applicable law.

17. Changes to this policy

MyVanity may update this Privacy Policy from time to time as the product evolves. If material changes are made, MyVanity may provide notice through the app, website, or other appropriate means. Continued use of the service after the updated policy becomes effective means the updated policy will apply to your use of the service.

18. Contact

If you have questions about this Privacy Policy or want to make a privacy-related request, contact: support@myvanityai.com