1. Who we are
Lucea ("we", "us") is a mobile app that looks at photos of your face and gives you scores, heatmaps and skincare suggestions about visible, cosmetic skin characteristics. Lucea is developed by an independent developer based in India. This policy explains what data the app handles, why, and the choices you have. Questions: md.alishanali88@gmail.com.
2. The short version
- There are no accounts. We never ask for your name, email address or phone number to use the app.
- Your photos and answers are saved only on your phone.
- When you run an analysis, a resized copy of the photo is sent securely to our server, analysed, and then discarded. Our server does not keep or log your photos.
- We do not sell your data, show ads, or use your face to identify you.
- You can erase everything from inside the app at any time.
3. What the app handles and why
Face photos. When you scan your skin, the photo is stored on your device so you can see your history and compare progress. To produce your results, the app sends a resized copy (about 1024 pixels, JPEG) over an encrypted HTTPS connection to our API, which passes it to OpenAI for analysis and returns your scores. The photo exists only in memory while the request is processed. Our API does not save it and does not write it to logs. Face photos are used only to describe the appearance of your skin. They are never used for facial recognition, identity verification or tracking.
Ingredient-label photos. When you check a product, the photo of its ingredient list goes through the same flow: it is sent for analysis, a result comes back, and nothing is stored on our server.
Your quiz answers. During setup you may share your age range, gender, skin type, skin concerns, skin conditions you have been told you have, and habits such as water intake, sleep, sun exposure and stress. These answers are stored on your device. They are sent along with analysis requests so the results and routine fit you, and they are not stored on our server.
An anonymous identifier. Instead of an account, the app uses a random anonymous ID (created by RevenueCat, or a random install ID). It lets us check whether you have an active subscription and apply fair-use limits. It is not linked to your name or contact details.
Purchases. Subscriptions are processed by Google Play or the Apple App Store. We never see your card or payment details. RevenueCat receives the purchase receipt and your anonymous ID so the app knows which features you have unlocked.
Product analytics. When enabled, the app sends anonymous usage events to PostHog, for example which setup step was reached, which answer option was chosen, or whether a scan finished. PostHog may also record basic technical details such as device model, OS and app version. These events never contain photos, names or email addresses, and we do not build personal profiles from them.
Reminders. Routine and re-scan reminders are scheduled on your device as local notifications. No push token is sent to us.
Support emails. If you email us, we receive your email address and whatever you choose to write. We use it only to reply to you.
4. Service providers
- Amazon Web Services (Mumbai region, India) runs our API.
- OpenAI performs the image analysis. It receives the photo and your quiz answers for the request only. Under OpenAI's API data-usage terms, API inputs are not used to train its models by default. OpenAI may keep request data for a limited period for abuse monitoring, as described in its own policies.
- RevenueCat manages subscription status.
- Google Play and Apple process payments.
- PostHog provides anonymous product analytics.
Some of these providers process data outside your country, including in the United States. We use them only to run the features described above.
5. What we do not do
- We do not sell, rent or trade your data.
- We do not use your photos to train AI models.
- We do not show advertising or share data with advertisers.
- We do not identify you from your face.
6. How long data is kept
Photos, results, quiz answers and routines stay on your device until you delete them or uninstall the app. Our API keeps no copy. RevenueCat keeps the anonymous subscription record needed for your purchases. Anonymous analytics events are kept for as long as they are useful for improving the app.
7. Your choices and rights
- Delete everything on your phone: Profile → "Delete all my data". See how data deletion works.
- Ask us to delete the subscription record linked to your anonymous ID, or ask any privacy question, by emailing md.alishanali88@gmail.com.
- Camera and photos: you can withdraw these permissions in your phone settings at any time.
- Notifications: turn reminders off in the app or in your phone settings.
Depending on where you live (for example under India's Digital Personal Data Protection Act or the GDPR), you may have rights to access, correct or erase your data and to complain to a regulator. Because we hold almost nothing on our side, most of these rights are met directly in the app. Email us for anything else and we will reply within 30 days.
8. Security
All traffic between the app and our API is encrypted with HTTPS. Our API is stateless: it holds request data only in memory while it works on it. No system is perfectly secure, but we keep the amount of data we handle as small as we can.
9. Age limit
Lucea is not intended for anyone under 13, and you must not use it if you are younger. The app's age options start at 13. If you are under 18, please use Lucea with the involvement of a parent or guardian. If you believe a child under 13 has used the app, contact us and we will help remove any related data.
10. Not medical advice
Lucea analyses visible, cosmetic skin characteristics. It is not a medical device and does not diagnose, treat or prevent any condition. Health information you choose to share in the quiz is used only to tailor cosmetic suggestions.
11. Changes to this policy
If we change how the app handles data, we will update this page and the date at the top. Significant changes will also be mentioned in the app or in the store release notes.
12. Contact
Email md.alishanali88@gmail.com. We read every message.