Privacy Policy

Dermavitas ("we", "us") operates dermavitas.com, an AI-assisted cosmetic skincare guidance service. For privacy questions, contact us at cyberprosoftware@gmail.com.

• Questionnaire answers. Skin type, concerns, sensitivity, budget, and routine preferences you enter to generate a routine.
• Photos. Optional selfies and weekly progress photos you upload. These are used solely to generate your cosmetic analysis and timeline.
• Account data. Email address and authentication identifiers if you sign up (including Google sign-in, which shares your email and basic profile with us).
• Saved content. Routines, shelf products, reminders, and coach conversations you create in your dashboard.
• Payment data. Subscription status and customer/session identifiers. Card details are handled entirely by Stripe — we never see or store them.
• Newsletter email. If you subscribe, we store your email address to send the newsletter.
• Technical and analytics data. IP address, browser type, pages visited, and error diagnostics. Analytics cookies only run if you accept them.

• To provide the service — generating routines, analyzing products, storing your dashboard data. Basis: performance of a contract.
• To process payments and manage subscriptions. Basis: contract.
• To analyze photos with AI models. Basis: your consent, given when you choose to upload a photo.
• To improve and secure the site, prevent abuse, and fix errors. Basis: legitimate interests.
• To send newsletters and analytics measurement. Basis: your consent, withdrawable at any time.

We do not sell your personal information, and we do not use your photos to train our own models.

• Supabase — database, authentication, and encrypted photo storage.
• AI model providers (via our AI gateway) — receive your photo and/or questionnaire answers to produce an analysis. They act as processors and do not receive your name or email.
• Stripe — payments and subscription billing.
• Resend — transactional and newsletter email delivery.
• Google Analytics — aggregate usage measurement, only after you accept analytics cookies.

Some processors are located outside the EEA/UK. Transfers rely on Standard Contractual Clauses or equivalent safeguards.

• Analyses and routines: until you delete them or close your account.
• Photos: until you delete them (any photo can be deleted from the Progress page).
• Anonymous analyses with no account: not linked to an identity and purged routinely.
• Billing records: as long as required by tax and accounting law.
• Newsletter email: until you unsubscribe.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your data, to object to processing, and to withdraw consent. EU/UK residents may also lodge a complaint with their supervisory authority. California residents may request disclosure or deletion and opt out of "sharing" — we do not sell or share personal information for cross-context behavioral advertising.

You can delete photos and saved data yourself from the dashboard, or email cyberprosoftware@gmail.com for a full account deletion. We respond within 30 days.

Data is encrypted in transit and at rest. Photos and routines are scoped to your account by row-level database policies, so other users cannot read them. No system is perfectly secure; please use a strong, unique password or sign in with Google.

Dermavitas is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has used the service, contact us and we will delete the data.

See our Cookie Policy for the full list of cookies and how to change your consent choice at any time.

We will update this page when our practices change and revise the "last updated" date. For material changes affecting your rights, we will notify account holders by email.