Privacy Policy

1. Who we are

LoveSkin is run by Emma Mahon as an individual, who is the data controller for the information described below. Contact: emmammahon@googlemail.com.

2. What we collect

• Account details — if you sign in with Google, we store your name, email address, and profile photo.
• Skin quiz answers — your skin type, concerns, and other quiz answers, saved to your account if you're signed in.
• Chat messages — messages you send the expert chatbot are sent to Google's Gemini API to generate a reply. We don't store them on our servers; your browser keeps a local copy (in its own storage, on your device) so your conversation is there next time you visit.
• Payment & subscription details — handled entirely by Stripe. We only ever store your Stripe customer and subscription IDs, never your card details.
• Newsletter — your email address, if you choose to subscribe.
• Basic abuse-prevention logs — your IP address may be briefly recorded against the feature you used (e.g. the chatbot), purely to stop abuse of our AI features. These logs are automatically deleted within about 24 hours.

3. Why we use it

To provide the features you're using (fulfilling our contract with you), to prevent abuse of the site (our legitimate interest), and, for the newsletter, because you've asked to receive it.

4. Who we share it with

• Supabase — hosts our database and handles sign-in.
• Google — provides Google Sign-In, and its Gemini API generates chatbot and routine responses. Anything you send the chatbot is processed by Google to produce a reply.
• Stripe — processes all payments and subscriptions.

We don't sell your data to anyone.

5. Where your data is stored

Our providers (Supabase, Google, and Stripe) may process data outside the UK or EEA. Each maintains its own safeguards for doing so, such as Standard Contractual Clauses.

6. How long we keep it

Account and quiz data is kept while your account exists — email us to have it deleted. Abuse-prevention logs are kept for about 24 hours. Newsletter emails are kept until you unsubscribe.

7. Cookies & local storage

We only use strictly necessary storage: a session cookie (from Supabase) that keeps you signed in, and your browser's local storage to remember your chat history and light/dark theme choice on your own device. We don't use advertising or analytics cookies, so we don't show a cookie banner.

8. Your rights

Under UK GDPR, you can ask us to access, correct, delete, or export your data, or object to how we use it. Email emmammahon@googlemail.com to do so. You can also complain to the Information Commissioner's Office (ICO) if you think we've mishandled your data.

9. Children

LoveSkin isn't intended for children under 16.

10. Changes to this policy

We may update this policy from time to time. If we make a material change, we'll update the date at the top of this page.

11. Contact

Questions about your data? Email emmammahon@googlemail.com.