Last updated: April 4, 2026
Lustra ("we," "our," or "us") operates the Lustra mobile application. This Privacy Policy explains how we collect, use, store, and protect your information when you use our app.
Key point: Your face photos are analyzed on your device using computer vision algorithms. Your photos are never sent to AI services. Only numerical scores are shared with OpenAI for generating text insights.
Skin metric scoring (Complexion, Oil Balance, Pore & Texture, Inflammation Control, Youthfulness) is performed entirely on your device using local image processing. No face images leave your phone for scoring purposes.
Before computer vision processing, eye regions in your photos are automatically blurred to protect your privacy. This occurs on-device before any analysis.
After scores are computed on-device, the numerical scores and your skin profile context (skin type, concerns) are sent to OpenAI's API to generate personalized text insights. OpenAI does not receive your face images, name, email, or account information.
Your scan photos are uploaded to our secure cloud storage (Supabase) so you can view scan history and compare results over time. Photos are associated with your account and are not shared with third parties. You can delete all photos by deleting your account.
Lustra uses face detection solely to guide you in positioning your face during the scan capture process. We do not perform facial recognition, facial identification, or facial comparison between users. Your face geometry is not used to identify you.
Illinois residents: Under the Illinois Biometric Information Privacy Act (BIPA), face photographs may be considered biometric identifiers. Before your first scan, we request your explicit consent for the collection and storage of face photo data.
We collect face photographs for the sole purpose of analyzing skin health metrics. We disclose the following regarding biometric data:
We do not sell, rent, or trade your personal information. We share data only with the following service providers:
Receives: Numerical skin metric scores and skin profile context (skin type, concerns). Does not receive: face photos, name, email, or account identifiers. Purpose: Generating personalized text insights and recommendations.
Receives: All account data, scan photos, and analysis results. Purpose: Secure database hosting, file storage, and user authentication. Data is encrypted at rest and in transit.
Receives: Device push notification tokens. Purpose: Delivering push notifications for routine reminders and progress updates.
Receives: Apple ID credentials (if you choose Apple Sign-In). Purpose: Account authentication.
We do not use any advertising networks, analytics trackers, or data brokers.
Your account data, scan photos, and analysis history are retained as long as you maintain an active account. You may delete your account and all associated data at any time from the app's Settings screen. Upon account deletion:
You have the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below.
You have the right to access, rectify, erase, restrict processing, and port your data. Our lawful basis for processing is your consent (provided during account creation and before your first scan). You may withdraw consent at any time by deleting your account. To exercise your rights, contact us at the email below.
Lustra is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will promptly delete such information.
If you opt in to push notifications, we may send you routine reminders, streak updates, skin tips, product recommendations, and progress summaries. You can manage notification preferences in the app's Settings, or disable notifications entirely through your device settings. Push notification tokens are stored solely for the purpose of delivering notifications.
Lustra is not a medical device and does not provide medical advice. Skin analysis scores, insights, and product recommendations are for informational and educational purposes only. They are not intended to diagnose, treat, cure, or prevent any skin condition or disease. Always consult a qualified dermatologist or healthcare professional for medical advice regarding your skin health.
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy in the app or via push notification. Your continued use of Lustra after changes are posted constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, your data, or wish to exercise your rights, contact us at:
Email: lustraskincare2025@gmail.com
Website: lustraglobal.com