Privacy Policy for Biuty

Last Updated: January 20, 2026

Introduction

Biuty (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the Biuty mobile application (“App”).

By using Biuty, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

1. Personal Information You Provide

When you create an account and use Biuty, we may collect:

• Account Information: Email address and name

• Authentication Information: Securely managed through AWS Cognito

• Optional Profile Information: Profile photo, skin type, and skincare preferences

Biuty does not store or directly manage user passwords.

2. Face Data and Skin Analysis Data

What Face Data We Collect

When you voluntarily use Biuty’s skin analysis features, we may collect:

• Facial Photos: Images you take or upload for skin analysis

• Derived Face Data: Skin analysis results such as skin scores, appearance metrics, and AI-generated cosmetic insights

• Skin History: Historical skin analysis records associated with your account

Reasons for Collecting and Storing Face Data

Face data is collected and stored solely for the following purposes:

• Performing AI-based cosmetic skin analysis requested by you

• Tracking changes in your skin condition over time

• Enabling historical comparison of skin scans within your account

Face data is not used for advertising, marketing, profiling, or any purpose unrelated to app functionality.

Face Data Retention

• Facial photos and skin analysis data are retained only while your account is active.

• Face data is not retained indefinitely.

• You may delete individual skin scans at any time within the App.

• Upon account deletion, all face data is permanently deleted within 30 days.

This retention period is necessary to support Biuty’s core functionality of long-term skin health tracking and historical comparison.

Face Recognition / Verification Data

To ensure that skin scans are correctly associated with the correct user account, Biuty may process limited facial geometry data for scan ownership verification.

• This data is retained only while your account is active.

• You may reset or remove your registered face data at any time.

• All such data is permanently deleted within 30 days after account deletion.

3. Product and Treatment Records

If you choose to use these features, Biuty may collect:

• Product Records: Products you track, including names, images, ratings, and personal feedback

• Treatment Records: User-entered cosmetic or aesthetic treatment notes

All product and treatment records are user-reported and intended for personal reference only.

Biuty does not provide medical advice, diagnosis, or treatment.

4. Usage and Diagnostic Data

We may automatically collect:

• App usage data (features used, screens viewed)

• Device information (device type, operating system, app version)

• Diagnostic data (crash logs and performance metrics)

This data is used solely to improve app stability, performance, and reliability.

How We Use Your Information

We use the collected information to:

• Provide and operate core app features

• Perform skin analysis and generate personalized cosmetic insights

• Maintain and authenticate user accounts

• Improve app performance and reliability

• Communicate essential service-related updates

• Ensure security and prevent unauthorized access

Third-Party Processing of Face Data

Cloud Infrastructure Provider (AWS)

Biuty uses Amazon Web Services (AWS) as its secure cloud infrastructure provider.

• AWS acts solely as a data processor and infrastructure provider.

• Facial photos and skin analysis data stored on AWS are encrypted at rest and in transit.

• AWS does not independently access, use, or process face data for its own purposes.

• AWS does not use face data for advertising, profiling, or AI model training.

• AWS does not retain face data beyond the period specified by Biuty and does not store face data independently of Biuty’s instructions.

Face data stored on AWS is retained only while your account is active and is permanently deleted within 30 days after account deletion.

AI Processing Provider (Google Gemini)

Biuty uses Google Gemini AI solely to perform real-time cosmetic skin analysis requested by you.

• Facial photos are transmitted only to generate analysis results.

• Images are not used to train AI models.

• Images are not used for advertising or marketing purposes.

Third-Party Retention:

Google Gemini may temporarily retain submitted images for up to 55 days for abuse monitoring purposes, after which the images are automatically deleted in accordance with their API policies.

Face Data Sharing Disclosure

• Biuty does not sell face data.

• Biuty does not share face data with advertisers or marketing partners.

• Face data is shared only with the AI processing provider (Google Gemini) for the sole purpose of generating analysis results requested by you.

• No other third parties receive facial photos or face geometry data.

Data Storage and Security

We implement appropriate technical and organizational safeguards, including:

• Encryption in transit (HTTPS/TLS) and at rest

• Secure authentication and access controls

• Restricted internal access to user data

Account Deletion and Data Removal

Upon account deletion request:

• All facial photos

• All skin analysis results

• All derived face data

are permanently deleted within 30 days, after which recovery is not possible.

Your Rights and Choices

You may request to:

• Access or review your personal data

• Correct or update your information

• Delete individual skin scans

• Delete your account and all associated data

Contact us at support@biuty.app to exercise these rights.

Children’s Privacy

Biuty is not intended for children under the age of 13.

We do not knowingly collect personal information from children.

International Data Transfers

Your information may be processed in countries outside your jurisdiction. Appropriate safeguards are applied to protect your data.

Changes to This Privacy Policy

We may update this policy from time to time. Changes will be reflected by updating the “Last Updated” date.

Contact Us

Email: support@biuty.app

Website: https://biuty.app

California Privacy Rights (CCPA)

Biuty does not sell personal data.

California residents may request access or deletion of personal information.

European Users (GDPR)

Legal Bases for Processing:

• Contract performance

• User consent

• Legitimate interests (security and service improvement)

This Privacy Policy is effective as of January 20, 2026