Privacy Policy

Clearface Rosacea ("Clearface", "the App", "we", "our") is a mobile application for iOS and Android that helps people understand product ingredients and track skin patterns associated with rosacea. The App is developed and published by CRE8T LTD, a company registered in the United Kingdom, which is the data controller for the personal information described in this policy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. You can contact us about anything in this policy at support@clearface.app.

Plain-language summary

1. Information We Collect

1.1 Account Information

When you create an account, we collect the following depending on your sign-in method:

• Sign in with Apple: Apple User ID, your name (if you choose to share), and your email address (which may be an Apple private relay address).
• Sign in with Google: Google account ID, name, email address, and profile picture URL.
• Email and password: the email address and password you provide. Passwords are hashed by our authentication provider and we never see the plaintext.

1.2 Profile Information

During onboarding, you provide:

• First name (or any display name you choose)
• Rosacea subtype (Unsure or Type 1–4)
• Optional general severity (Unknown, Mild, Moderate or Severe)
• Known triggers (e.g. sun exposure, spicy food, stress)

1.3 Diary Entries

When you log a diary entry, we store:

• Date and time
• Flare level (Flare-free, Mild, Moderate, Severe)
• Affected areas you select (such as cheeks, nose, chin, forehead, eyes, neck or chest)
• Selected triggers
• Stress level
• Suspected items (food, drink, skincare, makeup, medication, or other items you believe may have contributed to a flare)
• A short local-conditions summary at log time (such as "UV high · humidity low"), if you have granted location permission — never your coordinates
• Notes you write
• Optional symptoms, personal skin impact, experienced weather exposures, menstrual or birth-control notes, and procedure records you choose to enter

1.4 Treatments You Track

If you choose Premium treatment tracking, we store the treatment name, its form (topical, oral, or other), start and stop dates, instructions or dose/frequency you enter, dated changes, recorded treatment use, and any possible side effects or improvements you note. This information is used only to show you how your own logs change alongside a treatment and to include that record in reports you generate. Clearface never advises on treatment.

1.5 Scanned Products

When you scan a product barcode, we store:

• Product name, brand, and category
• Ingredient list
• Educational ingredient notes generated from your profile
• Your personal shelf label (Safe, Use with caution, Avoid)

1.6 Products You Add

Product details and corrections you enter are saved for your account and are not automatically published to other users. Shared catalogue records come from independent product sources such as Open Food Facts and Open Beauty Facts. Your personal shelf labels and diary links remain private.

1.7 Location and Weather Data

If you grant location permission, we use your location only to fetch UV index, temperature, humidity, wind and the forecast for your optional morning brief. Before leaving your phone, coordinates are rounded to two decimal places (roughly a kilometre of latitude). These approximate coordinates and your device time zone are sent through our Supabase weather function to Apple WeatherKit. Weather responses and approximate locations may be held briefly in memory to avoid repeated requests; they are not saved to your account or diary. Diary entries save only the short conditions summary described in section 1.3. Normal technical request metadata is processed by the services that deliver this feature.

Weather provider transition: updated builds use Apple WeatherKit as described above. Older installed builds may still send coordinates directly to Open-Meteo for weather lookup, without the new two-decimal rounding step. Clearface does not save those coordinates to your account. See Open-Meteo’s terms and privacy information. Updating the app switches to the new weather integration when it becomes available for your platform.

1.8 Camera, Label Photos, and Skin Photos

The camera is used for three things, all initiated by you:

• Barcode scanning: no image is captured, stored, or transmitted.
• Ingredient-label photos: when you add a missing product, you can photograph its ingredients label. The photo is sent over an encrypted connection to an AI service (Anthropic) for one purpose — extracting the printed ingredient list as text. Clearface does not persist the submitted image in its database or photo bucket. Anthropic may retain API inputs and outputs under its applicable service and safety terms; see Anthropic’s retention explanation. We do not submit these images as model-training feedback. This requires a signed-in account, and you can always type the ingredients instead.
• Skin photos: optional diary photos are stored on your device. With your explicit opt-in, Premium photo backup uploads private copies to Supabase so you can restore them on your other signed-in devices. Turning backup off stops future uploads; it does not itself delete existing cloud copies. Profile provides a separate cloud-copy deletion control. Selected comparison photos can be included in reports you generate. Reports are shared only when you choose a destination. Copies already exported or saved on another device cannot be remotely removed by Clearface.

1.9 Notifications

The optional daily check-in reminder is scheduled locally on your device. It transmits nothing and can be changed or turned off in Profile at any time.

1.10 Diagnostic Data (Crash and Error Reports)

To improve app stability, Clearface uses Sentry as a crash and error reporting service. When the App encounters an unexpected error or crash, Sentry receives diagnostic information including the stack trace, app version, operating system version, and device model. We disable Sentry’s default PII collection and do not intentionally attach diary text or photos to diagnostics. Technical identifiers and network request metadata may still be processed by the service; retention and handling also depend on Sentry’s settings and privacy terms. This data is used solely to debug and fix problems in the App.

1.11 Information We Do Not Collect

We do not collect device identifiers for advertising, browsing history, contacts, microphone audio, or any data not listed above. Skin-photo transmission is limited to the optional backup and sharing features described above. We do not use advertising tracking SDKs. Sentry, used for crash reporting, is not used for analytics, advertising, or user tracking.

2. How Your Data Is Stored

Your profile, diary entries, and scanned products are stored:

• In our cloud database hosted by Supabase (a managed PostgreSQL service). This allows your data to sync across multiple devices when you sign in.
• Locally on your device as a cache for offline access and faster startup, within the app’s private storage; device security and backups also depend on the operating system and app version.

Each user's rows are isolated from other users' rows by row-level security policies in our database, so other app users cannot read or modify your records. Authorised service administration remains subject to access controls and this policy.

Supported builds use keychain-backed encryption for sign-in tokens and treatment storage. Some older builds or storage failures may use a local fallback. Skin photos use the app’s private storage, with optional cloud backup described above. Protect your device with a passcode and keep Clearface updated.

3. Third-Party Services

Clearface relies on the following third-party services to operate. Each is bound by its own privacy policy.

We do not share, sell, or rent your personal data to any third party for marketing purposes. We do not use advertising networks.

4. Data Retention

We keep your data for as long as your account exists. You can delete your data at any time by:

• Deleting your account in-app via Profile > Delete Account. This requests removal of your account, profile, diary, treatments, personal product records and backed-up skin photos, and clears local records on the device completing deletion. If an error occurs, retry or contact us; an error is not confirmation of completed deletion.
• Emailing us at support@clearface.app from the email associated with your account. We will complete the deletion within 30 days.
• Deleting the App from your device. This removes the local cache; your account record on our servers is preserved until you delete the account.

Deleted records may remain in restricted provider disaster-recovery backups until those backups expire under the provider’s retention schedule. They are not used for normal app access. Subscription providers and the stores may retain transaction records for billing, fraud prevention and legal obligations. Contact us for information about retention applicable to your request.

5. Data Security

We protect your data through:

• Encryption in transit: all communication between the App and our servers uses TLS (HTTPS).
• Encryption at rest: databases are encrypted at rest by our cloud provider.
• Row-level security: database policies enforce that each user can only access their own rows.
• Hashed passwords: if you sign up with email and password, your password is hashed and salted by our authentication provider; we cannot see it.
• No advertising or tracking SDKs.

No method of transmission or storage is 100% secure. We work to protect your information but cannot guarantee absolute security.

6. International Data Transfers

Our servers and processors may store and process your data outside your country of residence, including in the European Union, the United Kingdom, and the United States. Where required by law, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

7. Children's Privacy

Clearface is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@clearface.app and we will promptly delete it.

8. Your Rights

You have the following rights with respect to your personal data:

• Access: see your data inside the App (Profile, Diary, Products) or request a copy by emailing us.
• Correction: edit your profile, triggers, diary entries, and product shelf labels at any time inside the App.
• Deletion: delete your account and all associated cloud data via Profile > Delete Account, or by emailing us.
• Portability: use the data export in Profile or request a machine-readable copy by emailing us.
• Objection / Restriction: ask us to limit how we process your data.

If you are in the European Economic Area or the United Kingdom (GDPR / UK GDPR)

You can exercise the rights above and you have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office at ico.org.uk). Our legal basis for processing your data is your consent (granted when you create an account) and our legitimate interests in providing the App's features.

If you are a California resident (CCPA / CPRA)

You have the right to know what personal information we collect, request deletion of that information, and opt out of any "sale" or "sharing" of personal information for cross-context behavioural advertising. We do not sell personal information or share it for cross-context behavioural advertising. Service-provider processing described in this policy is separate.

9. Account Deletion

Deleting your account or uninstalling Clearface does not cancel your store subscription. Manage cancellation through Apple subscriptions or Google Play subscriptions.

You can request deletion inside the App at Profile > Delete Account, or by emailing us using the details below. Account deletion covers:

• Remove your profile, diary entries, treatments, personal product records and backed-up skin photos from the active service;
• Delete your authentication record so you can no longer sign in with that account;
• Clear local records on the device completing in-app deletion, including skin photos. An email request cannot remotely erase local-only data. Delete local app data separately on other devices, and remove any exported copies you no longer want.

If you cannot access the App, you can also email support@clearface.app from the address associated with your account to request deletion. We will complete the deletion within 30 days.

10. Health Information Disclaimer

Clearface collects health-related information (rosacea subtype, severity, flare history, affected areas, triggers, treatments you track, and scanned product responses). This data is used solely to personalise the App's educational ingredient notes and tracking features. Treatment records and before/after comparisons are summaries of your own diary, not clinical measures. Clearface is not a medical device, does not diagnose or treat any condition, and the information shown is not medical advice. Always consult a qualified healthcare professional for medical questions.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this policy and, where appropriate, by an in-app notice. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your rights:

• Email: support@clearface.app
• Website: https://clearface.app/support