Luni — Privacy Policy

Last updated: 2026-10-26

Luni ("we", "us") helps you evaluate skincare products on evidence and fit. This policy explains what we collect, why, and your choices.

Who we are

Luni (KvK 94418691), Leliestraat 31, 2011 BL Haarlem, Netherlands. Contact: [email protected].

What we collect

• Account data — email address and (optional) display name, to create and secure your account. Authentication is handled by Supabase. If you choose Sign in with Apple or Continue with Google, we receive from Apple or Google a sign-in token, your e-mail address (with Apple this may be a private relay address that forwards to you) and your name, which we save as your display name if you have none yet. You can change or clear the name in Profile.
• Skincare inputs you provide — your selected skin goals, the products on your Skin Shelf, pasted ingredient (INCI) lists, product links you submit, and routine/usage check-ins. Most of this is stored locally on your device; account-linked data is stored on our backend.
• Skin Coach images (Premium, optional) — if you use the AI Skin Coach, the photos you capture are sent to our analysis service to detect cosmetic skin signals. We do not store the images on our servers. If you opt into progress tracking, your check-in photos are saved only on your device for before-and-after comparison — you can delete any scan, or all Skin Coach data, at any time. You give explicit consent before any image is uploaded and separate explicit consent before any photo is saved on your device.
• Skin Coach cloud backup (Premium, optional, off by default) — if you switch on Cloud Backup in Skin Coach settings, your check-in records — the cosmetic concern scores, dates, the context you noted (for example "wearing makeup") and the written summary — are stored in your account on our backend so your history follows you to a new phone. Photos are never included, not even as file names; they stay only on the device that took them. Switching backup off deletes the stored records, and deleting a check-in or all Skin Coach data removes them too.
• Skin Coach weekly insight wording (Premium, optional) — the short weekly progress sentence is computed on your device from your own check-ins. For Premium members it may be sent to our backend to be rephrased by an AI model in a warmer voice; the model receives only that sentence — never photos or scores — and the app shows its wording only if it changed nothing but the phrasing.
• Shared product comment (optional) — when you mark a product as finished you can leave a private note, which stays on your device, and separately choose to share a short comment; a shared comment, your verdict and your account id are stored on our backend. The comment and the product's name are first checked by an AI model (Anthropic Claude, see "AI processing") for personal details, abuse and medical claims; after that pre-screen and, where needed, a human review, shared comments are displayed on the product's page to other Luni users, anonymously (never your name or e-mail), together with your verdict and the 0–10 score you gave the product. That score is shown on your own comment only; we never combine scores into an average or a product rating. A stable pseudonymous key derived from your account lets other users hide your comments on their own device; it cannot be turned back into your identity. Other users can report a comment; you can edit or delete yours at any time (edits are re-screened). The reason a comment was held is not shown in the app.
• Advisor chat (optional; a few free questions, then Premium) — the Advisor asks for your permission before your first question, and you can withdraw it in Profile → Privacy & Data. The same permission covers the Routine Builder's AI wording (below); withdrawing it stops both. With permission, each message you send, the recent conversation, and a compact summary of your Luni state are processed to generate a reply (see "AI processing" below): your goals, skin type, age range, skin concerns and sensitive-skin setting, the names and roles of products on your shelf, your routine coverage, gaps and routine warnings, and — if you use the Procedures log — the type and date of procedures logged in the last 60 days (and of any you have planned for the next 60 days, marked as planned) and any active aftercare window. Only when a question needs it, the Advisor can also look up: your routine; your products' opened and use-by dates, how much is left, when and how often you use them, patch-test results, paused products, wishlist and shopping list; your finished products with your own verdict, score and survey answers; your routine check-ins; your body routine (steps, and the shaving, irritation and event days you noted); your logged procedures; your light-therapy device, plan and sessions; your Skin Coach results (the cosmetic concern scores and written summary — never photos); and your Other products. Never sent: photos, notes, procedure providers, prices or treated areas, your light-therapy safety answers, or your pregnancy setting — nor anything that only the pregnancy setting changes. To keep the free questions free, our backend counts how many AI questions your account has asked (a number per feature, never their content).
• Routine Builder AI wording (Premium, optional) — the Routine Builder picks your products on your device by fixed rules. With the same permission as the Advisor, the finished routine is sent to our backend so an AI model can write a short "why this routine" explanation and a lead-in to your first four weeks: your goals, skin type, sensitive-skin setting, routine size and budget preference, and the products it picked with Luni's reasons and week-by-week plan for them. Your pregnancy setting is never sent. Without permission the routine is shown without the AI wording.
• Procedures log (optional) — the procedures you log (type, date, the treated areas for procedures that have them, such as laser hair removal or permanent makeup, and an optional note, provider and cost) are stored on your device. Reminders you switch on are scheduled by your phone; nothing is sent to a server. If you switch on Back up my log (Premium, off by default), those entries — including the areas and any note, provider name or cost you typed — are stored in your account on our backend so the log follows you to a new phone. Switching it off deletes the stored copy; deleting an entry, clearing your data or deleting your account removes it too.
• Body routine (optional) — the body-care steps you set up, what you tick off, the shaving, irritation and event days you note, and your reminders are stored on your device. Progress photos you take there are saved only on your device. If you switch on Back up to my account (free, off by default), those records — never the photos — are stored in your account on our backend so they follow you to a new phone. Switching it off deletes the stored copy; clearing your data or deleting your account removes it too.
• Photos of products — when you photograph a pack, a barcode or an ingredient list, the picture is read on your device and is not uploaded. A photo of the front of a pack, or a photo you add to a product yourself (for example in your Product history), may be kept only on your device as your own picture of that product; you can remove it at any time, clearing your data deletes it, and it is never included in a backup. Separately, you can choose to share a product photo: the app resizes it and removes embedded data such as location, and the photo and your account id are stored on our backend. After a review it is shown to other Luni users as that product's picture, never with your name or e-mail. You can ask us to remove a shared photo at any time at [email protected]; deleting your account removes the photos linked to it from display.
• Products you contribute (optional) — if you submit a product that is missing from our catalog, the brand, name and ingredient list you typed or scanned, and your account id, are stored on our backend. An AI model (Anthropic Claude) checks the brand, name and ingredient list — only those, never your account details — to judge whether the brand is real and the list plausible. After checks the product may become part of the shared catalog, never with your name or e-mail.
• Brand requests (optional) — if you ask us to add a brand, the brand name, the website you typed and your account id are stored on our backend so we can review the request.
• Light-therapy answers (optional) — if you use light therapy, the safety questions you answer before a plan (including whether you take medicines that increase light sensitivity, pregnancy, being under 18, and light-sensitive conditions), the device you select, your plan, and the sessions you log are stored only on your device and are never sent to our servers. Deleting the plan, or clearing your data in Settings, removes them. If you ask us to add a mask that isn't in our list, the brand, model and product link you type — and your account id — are sent to us so we can add the device; nothing else from light therapy leaves your device.
• Reminders (optional) — if you turn reminders on, they are scheduled by your phone's own notification system. Nothing is sent to a server, and we cannot see whether a reminder was delivered or opened.
• Subscription status — managed by RevenueCat and the App Store / Google Play. We receive your entitlement status (active / not), not your payment card details (the app stores never share card data with us).
• Device & diagnostic data — basic technical data needed to run the app and, if enabled, anonymized crash/diagnostic reports to fix bugs.

We do not sell your personal data.

Staff access. Authorised Luni staff can view your account details (e-mail, sign-up and last sign-in dates, sign-in method, subscription status, AI question counts) and what you submitted (shared photos and comments, reports, contributed products, brand and light-therapy device requests), for support and moderation; never your skin, routine or health data. Every such view is logged.

AI processing

The Skin Coach, its weekly insight wording, the Advisor, the Routine Builder's AI wording, the pre-screen of shared product comments (the comment and the product's name) and the check of products you contribute (brand, name and ingredient list) use AI models (including Anthropic Claude) via our secure backend. Inputs are sent to generate analysis/replies and are not used to train third-party models. The Advisor and Skin Coach provide cosmetic, educational guidance only — not a medical diagnosis.

How we use your data

To provide the core features (scoring, routine fit, recommendations), to operate your account and subscription, to improve the app, and to comply with law. Legal bases (where GDPR applies): performance of contract, your consent (e.g. Skin Coach images and the Advisor), and our legitimate interests in operating and improving Luni.

Third-party services

• Supabase — authentication, database, storage, serverless functions.
• Apple and Google — only if you choose to sign in with them.
• Anthropic (Claude) — AI analysis for the Advisor, Skin Coach and Routine Builder wording, the pre-screen of shared comments, and the check of contributed products.
• RevenueCat + Apple App Store / Google Play — subscription processing.
• Cloudflare — hosting the web app.

Each processes data under its own terms; we share only what's needed for the feature you use.

Data retention & deletion

You can delete your account from Profile → Privacy & Data → Delete account, which removes your account and associated server-side data (including any Skin Coach cloud backup and shared comments). Locally stored data is removed when you delete the app; Clear on-device data in the same screen removes it sooner, Skin Coach photos included. Subscription records held by the app stores follow their policies.

Your rights

Depending on your location (e.g. GDPR/UK GDPR, CCPA), you may have rights to access, correct, delete, or export your data, and to withdraw consent. Contact [email protected] to exercise them.

Children

Luni is not directed to children under 16. We do not knowingly collect data from children under that age.

Changes

We'll update this policy as the app evolves and revise the "Last updated" date.

Contact

Questions: [email protected], Luni (KvK 94418691), Leliestraat 31, 2011 BL Haarlem, Netherlands.