Privacy Policy

Last updated: March 31, 2026

Lustra ("we," "our," or "us") operates the Lustra mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our app.

1. Information We Collect

Account Information

• Email address and name (when you create an account)
• Authentication data via email/password, magic link, or Apple Sign-In

Skin Scan Data

• Face photos captured during skin scans (front, left, and right angles)
• Skin health metric scores derived from photo analysis (Complexion, Oil Balance, Pore & Texture, Inflammation Control, Youthfulness)
• Overall Lustra Score

Profile & Preferences

• Skin type and skin concerns you provide during onboarding
• Skincare routines you create within the app
• Product preferences and saved products

2. How We Process Your Photos

On-Device Analysis: Your face photos are analyzed entirely on your device using local image processing algorithms. The scoring of your skin metrics (Complexion, Oil Balance, Pore & Texture, Inflammation Control, and Youthfulness) happens locally on your phone. Your face images are never sent to external servers for scoring purposes.

Narrative Generation: After your skin metric scores are computed on-device, the numerical scores (not your photos) are sent to OpenAI's API to generate personalized text insights, recommendations, and summaries. OpenAI does not receive your face images, name, or account information — only the metric scores.

Photo Storage: Your scan photos are uploaded to our secure cloud storage (hosted by Supabase) so you can view your scan history and compare results over time. These photos are associated with your account and are not shared with third parties.

3. How We Use Your Information

• To provide skin analysis results and personalized recommendations
• To track your skin health progress over time
• To match products to your skin profile
• To manage your account and skincare routines
• To improve our analysis algorithms and app experience

4. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only with the following service providers who help us operate the app:

• Supabase — Secure database hosting and user authentication
• OpenAI — Text-based narrative generation from numerical skin scores (no photos or personal identifiers are shared)
• Apple — Authentication via Apple Sign-In (if you choose this method)

We do not use any advertising networks, analytics trackers, or data brokers.

5. Data Security

We use industry-standard security measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure token-based authentication
• Row-level security policies on our database ensuring you can only access your own data
• Secure credential storage on your device (iOS Keychain via SecureStore)

6. Data Retention

Your account data and scan history are retained for as long as you maintain an active account. You may request deletion of your account and all associated data at any time by contacting us at the email address below.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your data in a portable format

8. Children's Privacy

Lustra is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy in the app or via email. Your continued use of Lustra after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: lustraglobal2025@gmail.com

Website: lustraglobal.com