Privacy Policy

This Privacy Policy applies to personal information we collect through the Services. It does not apply to third-party websites, products, or services that may be linked to or integrated with the Services, which are governed by their own privacy policies. By using the Services, you acknowledge that you have read this Privacy Policy. Where required by law, we will obtain your consent before collecting or using your personal information.

The Services are intended for users who are at least 18 years of age. We do not knowingly collect personal information from children. The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child in violation of applicable law, we will delete it. If you believe a child has provided us personal information, contact us at privacy@skinsafeproducts.com.

3.1 Information You Provide. We collect information you provide directly, such as when you create an account, set up a profile, identify allergens or sensitivities, save or review products, post content, ask questions, contact support, or purchase a subscription. This may include your name, email address, username, profile and health-related preferences you choose to share (such as allergens), and content you submit.

3.2 Payment Information. If you purchase a Premium Subscription, payment is processed by our third-party payment processors or by the applicable app store (Apple or Google). We do not store full payment card numbers. Billing, auto-renewal, cancellation, and refund terms are described in Section 5 of the Consumer Terms of Service and are not duplicated here.

3.3 Information Collected Automatically. When you access or use the Services, we may automatically collect: (i) device information such as IP address, device and hardware identifiers, operating system, mobile network information, and browser type and language; (ii) usage details such as access times, pages and features viewed, traffic data, and referring addresses; (iii) approximate or precise location information, where you have enabled it; and (iv) information collected through cookies and similar technologies.

3.4 Cookies and Similar Technologies. We and our service providers use cookies, SDKs, pixels, and similar technologies to operate and secure the Services, remember your preferences, measure usage, and (where permitted) support analytics and advertising. You can usually control cookies through your browser or device settings; disabling some cookies may affect functionality.

3.5 “Do Not Track” and Global Privacy Control. Some browsers offer a “Do Not Track” (DNT) signal. Because there is no common industry standard for DNT, we currently do not respond to DNT signals. Where required by applicable law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC) as a request to opt out of the “sale” or “sharing” of personal information for the browser or device from which we receive the signal.

We use personal information to: (i) provide, maintain, and secure the Services and their content; (ii) create and manage accounts and authenticate users; (iii) personalize content and, where permitted, advertising; (iv) process subscriptions and payments and carry out our obligations under the Terms, including billing and collection; (v) communicate with you, including account, transactional, and (with your consent where required) marketing messages; (vi) analyze and improve the Services and develop new products and features; (vii) detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity; and (viii) comply with legal obligations and enforce our agreements. We may create and use de-identified or aggregated information for any lawful purpose; we maintain such information without attempting to re-identify it except as permitted by law.

We do not sell your personal information for money. Except as described in this Privacy Policy, we will not rent, sell, or share your personal information with third parties without your consent. We may share personal information as follows:

• With service providers and contractors who perform services on our behalf (such as hosting, payment processing, analytics, customer support, and communications) and who are contractually bound to protect it and use it only for the purposes we specify;
• With our affiliates and subsidiaries;
• In connection with, or during negotiations of, a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our assets, in which case personal information may be transferred as a business asset;
• To comply with applicable law, legal process, or governmental request, and to enforce the Terms or other agreements;
• To protect the rights, property, or safety of SkinSAFE, our users, or others, including for fraud prevention and security;
• In aggregated or de-identified form that does not reasonably identify you; and
• With your direction or consent, including content you choose to make public.

Linked accounts. If you choose to link your individual account to your healthcare provider’s account, information is shared as described in the SkinSAFE Consent for Linked Accounts and, with respect to information handled by your provider, the BAA.

We may work with third-party advertising and analytics partners that collect information about your use of the Services and other sites and apps over time to provide measurement services and deliver more relevant ads. You can learn about and opt out of interest-based advertising from participating companies through the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org), and through your device’s advertising settings. Where required, we obtain consent before such activities.

7.1 Account and Communication Choices. You can review and update your account information by logging into your account. You can opt out of marketing emails by using the “unsubscribe” link or adjusting your settings; we may still send you transactional or service messages. You can control location collection and certain tracking through your device settings.

7.2 U.S. State Privacy Rights. Depending on your state of residence (for example, California, Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws), you may have the right to: (i) confirm whether we process your personal information and access it; (ii) correct inaccuracies; (iii) request deletion; (iv) obtain a portable copy; and (v) opt out of targeted advertising, the “sale” or “sharing” of personal information, and certain profiling. We do not use or disclose sensitive personal information for purposes that require an opt-out right beyond those described here. We will not discriminate against you for exercising these rights. To exercise your rights, contact us at privacy@skinsafeproducts.com. We will verify your request as required by law, and you may use an authorized agent where permitted. If we deny your request, you may appeal by replying to our response; where available, you may also contact your state attorney general.

7.3 EEA/UK Rights. If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: your consent; performance of a contract; compliance with legal obligations; and our legitimate interests in operating, securing, and improving the Services. You have the rights to access, rectify, erase, restrict, and object to processing, to data portability, and to withdraw consent, and you may lodge a complaint with your local supervisory authority. SkinSAFE is the controller of personal information you provide directly to us.

We retain personal information for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, maintain appropriate business records, and enforce our agreements. When personal information is no longer needed, we delete or de-identify it. If you ask us to delete your account or information, we will do so subject to legal retention requirements. Retention of protected health information handled through the Provider Portal is governed by the BAA.

We implement administrative, technical, and physical safeguards designed to protect personal information against accidental loss and unauthorized access, use, alteration, and disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. The security of your information also depends on you safeguarding your credentials. If you have reason to believe your account is no longer secure, contact us immediately at privacy@skinsafeproducts.com.

Certain features may let you post content that is visible to others. Information you choose to make public may be viewed, collected, and used by others and may be indexed by search engines. Do not include information you wish to keep private in public posts. Where available, you may use anonymity or privacy settings to limit how your content is associated with you.

We are based in the United States, and the information we collect is processed in the United States and other countries that may not provide the same level of data protection as your home jurisdiction. By using the Services, you understand that your information will be transferred to and processed in the United States. Where required, we use appropriate safeguards for international transfers.

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy with a new “Effective Date” and, where required, provide additional notice (such as email or in-app notice). Your continued use of the Services after the changes take effect constitutes acceptance of the updated Privacy Policy.

This Privacy Policy is part of, and incorporated by reference into, the SkinSAFE Consumer Terms of Service and the SkinSAFE Provider Portal Terms of Service. Capitalized terms not defined here have the meanings given in the applicable Terms. To the extent this Privacy Policy conflicts with the BAA regarding protected health information, the BAA controls.

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at: SkinSAFE Products, Inc., 3104 E. Camelback Rd. #726, Phoenix, AZ 85016, Attn: Privacy; email privacy@skinsafeproducts.com.