Now available on the App Store

Privacy Policy

Last updated: May 1, 2026

Your privacy matters to us. This Privacy Policy explains what information Blumy ("we", "us") collects when you use the Blumy iOS app and the blumy.app website (together, the "Service"), how we use that information, and the choices you have. Blumy is a skincare app that scans skincare products, provides an ingredient safety read, and helps you build a daily routine that fits your skin.

1. Information We Collect

We collect a limited amount of information to operate and improve the Service.

  • Account information: details you share when creating an account, such as your name and email address.
  • Skin profile: information you choose to provide about your skin (such as skin type, concerns, sensitivities, and goals) so we can personalize routines and alternatives for you.
  • Scan data: the products and ingredient labels you scan, photos you capture or select, your scan history, and any products you bookmark. Photos are processed on your device where possible; when on-device recognition is not enough to identify a product, the relevant image or extracted text is sent to our backend or partner services to look the product up.
  • Usage information: how you interact with the Service, including screens viewed, features used, and approximate timestamps.
  • Device information: basic technical data such as device model, operating system, app version, language, and a device identifier provided by iOS.
  • Analytics: our website uses privacy-respecting analytics tools to understand aggregate traffic and improve the experience.

2. Camera & Photos

The App needs access to your camera to scan skincare products and ingredient labels, and optional access to your photo library if you choose to scan an existing photo. You control these permissions from iOS Settings at any time. We do not browse your camera roll. We only receive the specific photos you select for scanning. The live camera feed used for scanning is processed on-device and is not recorded or transmitted.

3. Face data (TrueDepth API)

Blumy includes an optional onboarding step that uses Apple's TrueDepth front camera and ARKit face-tracking to display a guided skin-scan moment. While this step is on screen, the app receives ARKit's generic face mesh, head pose, ambient light estimate, and a standard selfie image from the front camera.

All face data obtained from the TrueDepth API is processed only on your device, only for the duration of the onboarding screen. It is used solely to render a visual scanning animation over your photo and to coach you through framing and lighting. We do not use this data to identify you, do not perform face recognition, and do not build a biometric template. We do not store it, do not upload it to our servers, do not share it with any third party, and do not use it for advertising or analytics. As soon as you leave the onboarding step, the face data is discarded from memory.

You can skip the skin-scan step at any time by tapping the close button.

4. How We Use Your Information

We use the information we collect to:

  • Identify products you scan and return their ingredient breakdown and risk flags;
  • Personalize your daily routine, rituals, and alternative product suggestions based on your skin profile;
  • Maintain your scan history and bookmarks, and sync them across your devices;
  • Improve product coverage: when you scan a product not yet in our catalog, we read its label and may add it to the catalog so it's available to all users going forward;
  • Improve features, fix bugs, and understand how the Service is used;
  • Communicate with you about updates, changes, and support;
  • Protect the security and integrity of the Service;
  • Comply with legal obligations.

5. Third-Party Data Sources & Processors

To identify products and read ingredient labels, the Service may query third-party product databases and services. When a product cannot be identified from our existing catalog, we may send the captured image or label text to third-party recognition providers to extract ingredients or recognize the product. We use these providers only for the specific lookup and do not authorize them to use your data to train their models. We also rely on cloud infrastructure providers to host and sync data.

6. How We Share Information

We do not sell your personal information. We share information only in the limited circumstances described below:

  • Service providers: trusted vendors who help us operate the Service (cloud hosting, product-data providers, AI-assisted recognition, crash reporting, and analytics). They may only use your information to perform work on our behalf.
  • Apple: because Blumy is distributed through the App Store, certain information is processed by Apple in accordance with its own privacy policy.
  • Legal reasons: where required by law, or to protect the rights, property, or safety of Blumy, our users, or the public.
  • Business transfers: if Blumy is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

7. Cookies & Similar Technologies

Our website uses cookies and similar technologies to remember your preferences and measure aggregate traffic. You can control cookies through your browser settings. The App itself does not rely on browser cookies, but it may use device-level identifiers provided by iOS.

8. Data Retention

We keep your scan history, bookmarks, skin profile, and account information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Anonymized product data added to our catalog through your scans (product names, ingredient data, and similar non-personal information) may remain in the catalog so future users can benefit, even if you delete your account. When personal information is no longer needed, we delete or anonymize it.

9. Your Rights & Choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete information;
  • Request deletion of your personal information;
  • Object to or restrict certain processing;
  • Request portability of your information;
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, please reach out using the contact details on our website. You can also delete your account, scan history, and bookmarks at any time from within the App.

10. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International Data Transfers

Your information may be processed in countries other than the one where you live. When we transfer personal information across borders, we take steps to ensure it remains protected in line with this Policy and applicable law.

12. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, provide additional notice through the Service.

14. Contact

For questions or requests about this Privacy Policy, contact details can be found on our website at blumy.app.