Legal
Privacy Policy
Effective date: October 11, 2026 · Applies to Regimly v0.8+ · Operated by Svetlana Kraizler (sole proprietor) · Contact: privacy@regimly.com
Regimly (“we”, “us”) is a skincare organization and education app. This policy explains what we process, why, where it lives, and the choices you have.
1. What we process
- Account: email address (email/password accounts) or your Google / Apple identity, and a Firebase Authentication user ID. Guest mode uses an anonymous ID with no email.
- Profile: first name, an age range (14–17 / 18–29 / 30–44 / 45–59 / 60+ — the app never asks for your exact age, and doesn’t store or send one as part of your profile), skin type, and skin concerns.
- Products: the products you add (brand, name, category, optional size and ingredient text) and the product photos you take.
- Ingredient-label photos: read on your device. Uploaded only if you explicitly ask for alternatives to a product.
- Progress photos (your face): stored on your device only. Never uploaded. Removed on sign-out and when a different user signs in on the device.
- Profile photo (optional): if you add one, it is uploaded to our cloud storage so it follows your account (see §2).
- Remi chat: the conversation is kept on your device. Each message you send, with recent messages for context, is processed by our backend AI (see §3) and is not stored in our database.
- Problem reports: if you choose to send one from the Profile tab, your description and the app’s recent activity log lines (which can include product names) are sent to Firebase Crashlytics. The app also opens your own email app with the same report addressed to support@regimly.com — you can read it first, and it is sent only if you press Send, from your email address.
- Pregnancy / breastfeeding answer (optional): stays on your device and is never sent to us — see §12.
- Usage & diagnostics: Firebase Analytics usage events — only after you opt in (see §9) — and Crashlytics crash reports (device model, OS version, installation identifiers). We do not collect the Google Advertising ID or Apple IDFA, and there is no advertising in the app.
2. Where your data lives
- Database (profile, shelf, current routine, reminder on/off preference, disclaimer-acceptance record): Google Cloud Firestore, region eur3 (European Union), synced for registered users so a reinstall or new phone restores them. Guests are never synced: a guest’s shelf, routine and chat stay on the device. Photos a guest uploads for AI features are stored under the guest’s anonymous ID and removed by the inactivity cleanup (§6).
- Photos (products, avatar): Google Cloud Storage, region us-central1 (United States).
- AI processing: Google Cloud Vertex AI, region europe-west4 (European Union).
- On your device only: chat history, check-ins and streaks, progress photos, language preference, reminder times, shopping country, and your pregnancy / breastfeeding answer with the results of its ingredient checks (§12).
3. AI processing (Google Vertex AI — Gemini)
Product identification, routine generation, Remi’s answers and the alternatives feature run on Google Cloud Vertex AI (Gemini models), always through our backend — the app holds no AI credentials. Depending on the feature, the AI receives: product or ingredient-label photos, your product list, skin type, concerns, age range, and your chat messages, in your chosen language.
What the app never attaches to AI requests: your name, email, exact age, user ID, or face photos — these are not taken from your account and added automatically. If you type such details into a Remi message, they are sent as part of that message, so please leave out anything you don’t want processed. Per Google Cloud’s Vertex AI terms, customer inputs and outputs are not used to train Google’s models. We have turned off Google’s data caching for our project. Google may still keep inputs for limited periods where its own terms require it — for example for abuse monitoring — as described in Google Cloud’s data-retention terms for Vertex AI. We do not store raw AI requests in our database; results you choose to keep (an identified product, a generated routine) are saved to your profile.
4. Why we process it
- Provide and personalize skincare routines; identify products and ingredients; flag conflicts and overlaps; offer alternatives; operate Remi, the in-app assistant (performance of our contract with you).
- Keep your shelf and routine restorable across devices (contract).
- Measure usage — with your consent only: analytics is off until you opt in, and you can withdraw at any time (see §9).
- Diagnose crashes (legitimate interest in keeping the app stable and secure).
- Security, abuse prevention, and legal compliance.
5. Who receives data
- Google (Firebase & Google Cloud): authentication, database, file storage, serverless functions, analytics, crash reporting, Vertex AI — as our processor.
- Open Beauty Facts (non-profit product database): receives only the product-name text you search. No identity, no photos.
- Stores you choose to visit: a store link in product suggestions opens that store’s own page in your browser. The link carries only a tag saying the visit came from Regimly; we send the store nothing about you. What the store collects once you are on its site is covered by its own privacy policy.
- Nobody else. No data brokers, no ad networks, no sale of personal data. The app contains no purchase or subscription SDK; this policy will be updated before subscriptions launch.
6. Retention & deletion
- Delete in the app: Profile tab → Delete Account → Delete, then confirm your identity (password, Google or Apple) — removes your photos, profile, shelf, routine, and sign-in.
- Delete from the web (no app needed): the /delete-account page on this site.
- Deletion takes effect immediately in the app and our database. Residual database versions expire within 1 hour. Deleted photos remain in Google Cloud Storage’s recovery period for up to 7 days, then are removed permanently. Your sign-in stops working immediately; Firebase Authentication then removes the sign-in record from Google’s live and backup systems within up to 180 days (IP addresses in its logs are kept for a few weeks). We keep no backups of our own.
- Logs and reports: server logs are kept for 30 days. When an AI request fails, the log can include an excerpt of the AI’s response (for example product names or routine text) so we can diagnose the error. Crash and problem reports are kept by Firebase Crashlytics for 90 days, after which Google begins removing them from its live and backup systems.
- Dormant accounts: accounts unused for 6 months are deleted automatically, including all stored data and photos.
- Uninstalling the app removes everything on the device but does not by itself delete your cloud account — use either deletion route above, or the 6-month dormancy deletion will apply.
7. Security
All traffic uses HTTPS/TLS. Cloud data is encrypted at rest. Database and file access is restricted per-user by security rules keyed to your authenticated ID; backend AI calls authenticate with a service account, never an embedded key. Production access is limited to the project owner.
8. International transfers
Your profile, database records and all AI processing stay in the European Union. Product photos are stored in the United States (Google Cloud Storage, us-central1). For EU/EEA users this transfer relies on Google Cloud’s Standard Contractual Clauses and Google LLC’s certification under the EU–U.S. Data Privacy Framework.
9. Analytics & your choices
Analytics is opt-in. The app asks once, on first use, and collects nothing until you agree. You can change your choice at any time in the app: Profile tab → Anonymous usage stats. Advertising ID collection is disabled. Crash reporting runs only in release builds.
10. Age
Regimly is for ages 14 and over. Onboarding requires choosing an age range; choosing “Under 14” ends the session and deletes the just-created account on our server — no profile is stored. If the deletion cannot complete right away (for example, with no connection), the app stays locked on that account and keeps retrying, and a server job deletes such accounts every hour — usually within an hour of the phone reconnecting. An account on a phone that never reconnects is removed by the inactivity cleanup. Please note the age control is enforced in the app based on the user’s own answer.
11. Your rights
Depending on your law (GDPR, CCPA and others), you may have rights to access, correct, delete, restrict, object, and port your data, and to withdraw consent. Much of this you can do directly: your profile, shelf and routine are visible and editable in the app (Profile and Products tabs), and your account data — profile, shelf, routine, photos and sign-in — is deletable via either deletion route. Logs and crash or problem reports expire on the schedules in §6. We will consider any request about them — as about any other data — under the law that applies to you and its exceptions, and tell you what we did. For a copy of data that isn’t shown in the app, or any other request, write to us. For anything else: privacy@regimly.com. You may also complain to your local supervisory authority.
12. Pregnancy and breastfeeding ingredient checks (optional)
At sign-up or later in the Profile tab you can choose to tell Regimly that you are pregnant, breastfeeding, both, or neither — or skip the question. If you say you are pregnant or breastfeeding, the app checks the ingredient lists you scanned from your products’ labels against a fixed list of ingredients. For pregnancy it keeps products with a flagged ingredient out of your routine; for breastfeeding it only adds a note to check with a clinician. It does not build a medical routine, it never tells you a product is safe, and it is not medical advice.
- What stays on your device: your answer and the results of these checks (which products were flagged or kept out, and why) are stored only in the app on your device. They are not sent to our servers, to our AI provider, to analytics, or to crash and problem reports, and they are not part of the cloud copy of your account — so they do not follow you to a new phone. If you use your phone’s own system backup (for example iCloud or Google device backup), that backup may include the app’s settings on your device.
- What the AI receives: when you build a routine or chat with Remi, the app tells our AI provider that pregnancy status was “not provided” — never your answer. If you write about pregnancy or breastfeeding in a message to Remi, that message is sent to our AI provider as part of the chat, like any other message you send (§3).
- Your control: the question is optional and the checks are off unless you turn them on. You can change or clear your answer at any time in the Profile tab. It is removed from the device when you sign out or delete your account.