Privacy Policy for Biuty
Privacy Policy for Biuty
Last Updated: August 14, 2026
Introduction
Biuty ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the Biuty mobile application ("App").
By using Biuty, you agree to the collection and use of information in accordance with this Privacy Policy.
Information We Collect
Personal Information You Provide
When you create an account and use Biuty, we may collect:
• Account Information: Email address and name
• Authentication Information: Securely managed through AWS Cognito
• Optional Profile Information: Profile photo, skin type, skin concerns, and skincare preferences
Biuty does not store or directly manage user passwords.
Face Data and Skin Analysis Data
What Face Data We Collect
When you voluntarily use Biuty's skin analysis features, we may collect:
• Facial Photos: Images you take or upload for skin analysis
• Derived Face Data: Skin analysis results such as skin scores, appearance metrics, and AI-generated cosmetic insights
• Skin History: Historical skin analysis records associated with your account
Reasons for Collecting and Storing Face Data
Face data is collected and stored solely for the following purposes:
• Performing AI-based cosmetic skin analysis requested by you
• Tracking changes in your skin's appearance over time
• Enabling historical comparison of skin scans within your account
Face data is not used for advertising, marketing, cross-service tracking, identity verification, or behavioral advertising profiles.
Face Data Retention
• Facial photos and skin analysis data are retained while your account remains active, unless you delete an individual scan earlier.
• You may delete individual skin scans at any time within the App.
• Upon account deletion, all face data is permanently deleted within 30 days.
This retention period is necessary to support Biuty's core functionality of long-term cosmetic skin tracking and historical comparison.
Facial Geometry Data
To align your skin scans, crop them consistently, and render analysis overlays (for example, highlighting the area a score refers to), Biuty may process limited facial landmark (geometry) data from your scan photos.
• This data is used only for image alignment and on-screen visualization. It is not used to identify or verify you, and it is never used for face recognition across users.
• It is stored only as part of the corresponding skin scan and is deleted together with that scan, or within 30 days after account deletion.
Chat and Voice Data (Mei Assistant)
If you use Mei, Biuty's AI skincare chat assistant, we collect:
• Chat Messages: The messages you send and the assistant's replies, so your conversations remain coherent within and across sessions.
• Conversation Context: To answer your question, the minimum relevant context from your account (such as your skin profile, recent cosmetic scan scores, and products you track) may be included when generating a reply.
• Voice Input (optional): If you use voice chat, your speech is transcribed using Apple's speech recognition services on your device or by Apple; only the resulting text is sent to our servers and treated as a chat message. We do not store voice recordings.
Chat Data Retention
• Chat messages and conversation history are retained while your account remains active so that you can access and continue prior conversations.
• Upon account deletion, your chat history is removed from your account immediately and permanently deleted from Biuty's systems within 30 days.
Product and Treatment Records
If you choose to use these features, Biuty may collect:
• Product Records: Products you track, including names, images, ratings, and personal feedback
• Treatment Records: User-entered cosmetic or aesthetic treatment notes
All product and treatment records are user-reported and intended for personal reference only.
Biuty does not provide medical advice, diagnosis, or treatment.
Usage, Device, and Diagnostic Data
We may automatically collect:
• App usage data (features used, screens viewed)
• Device information (device type, operating system, app version)
• Diagnostic data (crash logs and performance metrics)
• Push Notification Token (optional): If you enable notifications, a device push token used solely to deliver them
• Approximate Location (optional): If you grant location permission, your approximate location is used to show local weather and UV conditions and tailor skincare tips to your climate. It is processed transiently and is not used for advertising or sold.
This data is used solely to operate and improve app stability, performance, and reliability.
How We Use Your Information
We use the collected information to:
• Provide and operate core app features
• Perform cosmetic skin analysis and generate personalized cosmetic insights
• Generate responses from the Mei skincare assistant
• Maintain and authenticate user accounts
• Improve app performance and reliability
• Communicate essential service-related updates
• Ensure security and prevent unauthorized access
Third-Party Processing
Cloud Infrastructure Provider (AWS)
Biuty uses Amazon Web Services (AWS) as its secure cloud infrastructure provider.
• AWS processes this data only as Biuty's cloud infrastructure service provider and subject to Biuty's instructions and applicable contractual safeguards.
• Facial photos, skin analysis data, and chat history stored on AWS are encrypted at rest and in transit.
• AWS does not use this data for advertising, profiling, or AI model training.
• AWS does not retain this data beyond the period specified by Biuty and does not store it independently of Biuty's instructions.
• Face data stored on AWS is retained only while your account is active and is permanently deleted within 30 days after account deletion.
AI Processing Provider (OpenAI)
Biuty uses OpenAI's API solely to perform the AI features you request:
• Skin analysis: Facial photos are transmitted to OpenAI solely to generate your cosmetic analysis results.
• Chat: Your chat messages, together with the minimum skincare context needed to answer (such as your skin profile and recent cosmetic scores), are transmitted to OpenAI solely to generate the assistant's reply.
Restrictions on this processing:
• Your photos, messages, and context are not used to train AI models. OpenAI's API terms provide that API inputs and outputs are not used for model training unless the API customer explicitly opts in. Biuty has not opted in.
• This data is not used for advertising or marketing purposes.
• Third-Party Retention: OpenAI may temporarily retain submitted API data for up to 30 days for trust-and-safety (abuse) monitoring, after which it is deleted in accordance with OpenAI's API data policies.
Face Data Sharing Disclosure
• Biuty does not sell face data.
• Biuty does not share face data with advertisers or marketing partners.
• Face data is processed only by service providers necessary to provide the requested functionality: Amazon Web Services (AWS) for secure cloud hosting, storage, and infrastructure; and OpenAI for generating the cosmetic skin analysis requested by the user.
• These providers process the data only for the purposes described in this Privacy Policy.
• Biuty does not share facial photos or facial geometry data with other third parties for advertising, marketing, identity recognition, or unrelated purposes.
Data Storage and Security
We implement appropriate technical and organizational safeguards, including:
• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication and access controls
• Restricted internal access to user data
Account Deletion and Data Removal
Upon account deletion request:
• All facial photos
• All skin analysis results
• All derived face data
• All chat history
are permanently deleted within 30 days, after which recovery is not possible.
Your Rights and Choices
You may request to:
• Access or review your personal data
• Correct or update your information
• Delete individual skin scans
• Delete your account and all associated data
Contact us at support@biuty.app to exercise these rights.
Children's Privacy
Biuty is not intended for children under the age of 13.
We do not knowingly collect personal information from children.
International Data Transfers
Your information may be processed in countries outside your jurisdiction. Appropriate safeguards are applied to protect your data.
Changes to This Privacy Policy
We may update this policy from time to time. Changes will be reflected by updating the "Last Updated" date.
Contact Us
Email: support@biuty.app
Website: https://biuty.app
California Privacy Rights (CCPA)
• Biuty does not sell personal data.
• California residents may request access or deletion of personal information.
European Users (GDPR)
Legal Bases for Processing:
• Contract performance
• User consent
• Legitimate interests (security and service improvement)
This Privacy Policy is effective as of August 14, 2026.