Privacy Policy

Effective {YYYY-MM-DD}

{COMPANY_LEGAL_NAME} (“Plump,” “we,” “us”) operates the Plump mobile application and the plump.beauty website (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

Account information. When you create an account, we collect your email address and any profile details you provide (name, age range, skin type self-report).

Skin photos and scan data. When you take a skin scan, we collect the photo and the analysis results derived from it. Photos are stored under your account so you can review and re-run analysis. You can delete individual photos or your full scan history at any time from within the app.

Usage data. Standard app analytics — which features you use, crash reports, device type, OS version — so we can improve the app.

Payment data. If you subscribe, payment is processed by Apple or Google. We receive a subscription status from them, not your card details.

2. How we use information

• To deliver the core Service: scans, routines, recommendations, chat.
• To improve the Service: aggregated analytics, model evaluation, debugging.
• To communicate with you: account emails, support replies.
• To meet legal obligations.

We do not sell your personal information. We do not use your photos to train models for third parties.

3. AI processing

Skin analysis is performed by our AI systems. Your photo is sent to our processing servers and may transit through third-party model providers under data-processing agreements that prohibit them from retaining or using your photo beyond completing your request.

4. Sharing

We share information with service providers that help us operate the Service (cloud hosting, analytics, payment processing, AI model providers, customer support tooling). These providers are bound by contracts limiting their use of your information to providing services to us.

We may disclose information when required by law, to enforce our terms, or to protect rights and safety.

5. Retention

We retain account and scan data while your account is active. When you delete content or your account, that content is removed from our active systems and from backups on a rolling schedule (typically within 90 days).

6. Your choices

• Access, correct, or delete your data from inside the app.
• Delete your account at any time.
• Canadian users have rights under PIPEDA and applicable provincial laws. EU/UK users have rights under GDPR. California users have rights under the CCPA/CPRA. Contact us to exercise any of these rights.

7. Children

Plump is not intended for children under 13. We do not knowingly collect data from children under 13.

8. International transfers

Plump is operated from {PROVINCE}, Canada. By using the Service you consent to your information being processed in Canada and potentially in other countries where our service providers operate.

9. Changes

We may update this policy. If we make material changes we will notify you in-app or by email. Continued use after a change constitutes acceptance.

10. Contact

Questions or requests: hello@plump.beauty

Important: This template provides a reasonable starting point but is not a substitute for legal review. Have a Canadian privacy lawyer review before launch, especially for PIPEDA / Quebec Law 25 compliance.