Privacy Policy — All Beauty

Effective date: August 9, 2026

1. Who We Are

All Beauty ("we", "our", or "us") is a mobile application that helps users in the Mexican market discover more affordable cosmetic alternatives. The app is operated by an individual developer. If you have questions about this policy, contact us at: diamond.michael.mail@gmail.com

2. What Information We Collect

2.1 Information you provide

• Product photos — images you take or select from your camera roll to identify a cosmetic product. Photos are sent to our server and then to an AI provider (OpenAI) for analysis. We do not store your photos after the analysis is complete.
• Product names — text you type to describe a product. Same handling as photos.
• Skin type preference — an optional setting stored only on your device.

2.2 Automatically collected information

• Anonymous user ID — a random identifier generated by RevenueCat when you first open the app. It is not linked to your name, email, or any personal account.
• Subscription status — whether you have an active premium subscription, managed by RevenueCat. RevenueCat may collect purchase receipt data as required by Apple App Store or Google Play.
• Usage analytics — anonymized events (e.g., "scan started", "analog saved") collected via Firebase Analytics. These events do not include photos, product names, or any personally identifiable information.
• IP address — recorded server-side temporarily to protect against abuse of the free credit system. IP addresses are hashed and are not shared with third parties.

2.3 What we do NOT collect

• Name, email address, phone number, or any account credentials — the app has no registration or login.
• Location data.
• Contacts or any other device data.

3. How We Use Your Information

PurposeData usedIdentify and analyze cosmetic productsProduct photo / name → OpenAI APIProvide cheaper alternatives and eco scoresAI response stored temporarily in sessionManage your credit balance and subscriptionAnonymous user ID, RevenueCatPrevent free-credit farming / abuseHashed IP address, device identifierImprove app reliability and featuresAnonymized Firebase Analytics events

4. Third-Party Services

We share data with the following third parties solely to operate the app:

OpenAI — receives the product photo and/or name to generate the analysis. OpenAI's privacy policy: openai.com/policies/privacy-policy

RevenueCat — manages in-app subscriptions and purchase verification. RevenueCat's privacy policy: revenuecat.com/privacy

Google Firebase Analytics — collects anonymized in-app events. Google's privacy policy: policies.google.com/privacy

We do not sell, rent, or broker your data to any third party for advertising or marketing purposes.

5. Data Retention

• Product photos and names — deleted immediately after the AI analysis response is returned. We do not retain them.
• Analysis results — stored only on your device (local storage). We do not have a copy.
• Hashed IP / device data (fraud prevention) — retained for 90 days, then automatically deleted.
• Subscription records — retained by RevenueCat for as long as required to support your subscription and comply with financial regulations.
• Analytics events — retained by Firebase according to Google's standard retention policy (up to 14 months by default).

6. Data Security

All communication between the app and our server uses HTTPS/TLS encryption. Product photos are transmitted securely and are not logged or stored on our servers. We apply rate limiting and IP-based fraud guards to protect the integrity of the service.

7. Children's Privacy

All Beauty is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it promptly.

8. Your Rights

Even without an account, you have the following rights:

• Delete your local data — uninstalling the app removes all locally stored analysis results, saved items, and preferences.
• Opt out of analytics — you can disable Firebase Analytics by adjusting your device's ad tracking / analytics settings.
• Request deletion of server-side data — email us at diamond.michael.mail@gmail.com with your RevenueCat anonymous user ID (visible in Settings → App Info) and we will delete any associated server-side records within 30 days.

9. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will update the effective date at the top and notify you via an in-app message on the next launch.

10. Contact

Questions or requests regarding your privacy: diamond.michael.mail@gmail.com