Luni — Privacy Policy

Last updated: 2026-09-18

Luni ("we", "us") helps you evaluate skincare products on evidence and fit. This policy explains what we collect, why, and your choices.

Who we are

Luni (KvK 94418691), Leliestraat 31, 2011 BL Haarlem, Netherlands. Contact: [email protected].

What we collect

• Account data — email address and (optional) display name, to create and secure your account. Authentication is handled by Supabase.
• Skincare inputs you provide — your selected skin goals, the products on your Skin Shelf, pasted ingredient (INCI) lists, product links you submit, and routine/usage check-ins. Most of this is stored locally on your device; account-linked data is stored on our backend.
• Skin Coach images (Premium, optional) — if you use the AI Skin Coach, the photos you capture are sent to our analysis service to detect cosmetic skin signals. We do not store the images on our servers. If you opt into progress tracking, your check-in photos are saved only on your device for before-and-after comparison — you can delete any scan, or all Skin Coach data, at any time. You give explicit consent before any image is uploaded and separate explicit consent before any photo is saved on your device.
• Skin Coach cloud backup (Premium, optional, off by default) — if you switch on Cloud Backup in Skin Coach settings, your check-in records — the cosmetic concern scores, dates, the context you noted (for example "wearing makeup") and the written summary — are stored in your account on our backend so your history follows you to a new phone. Photos are never included, not even as file names; they stay only on the device that took them. Switching backup off deletes the stored records, and deleting a check-in or all Skin Coach data removes them too.
• Skin Coach weekly insight wording (Premium, optional) — the short weekly progress sentence is computed on your device from your own check-ins. For Premium members it may be sent to our backend to be rephrased by an AI model in a warmer voice; the model receives only that sentence — never photos or scores — and the app shows its wording only if it changed nothing but the phrasing.
• Shared product comment (optional) — when you mark a product as finished you can leave a private note, which stays on your device, and separately choose to share a short comment; a shared comment, your verdict and your account id are stored on our backend. After an automated pre-screen and, where needed, a human review, shared comments are displayed on the product's page to other Luni users, anonymously (never your name or e-mail), together with your verdict and the 0–10 score you gave the product. That score is shown on your own comment only; we never combine scores into an average or a product rating. A stable pseudonymous key derived from your account lets other users hide your comments on their own device; it cannot be turned back into your identity. Other users can report a comment; you can edit or delete yours at any time (edits are re-screened). The reason a comment was held is not shown in the app.
• Advisor chat (Premium, optional) — messages you send to the AI Advisor are processed to generate a reply (see "AI processing" below), together with a compact summary of your Luni state so the reply fits your routine: your goals, the names and roles of products on your shelf, your routine coverage and gaps, and — if you use the Procedures log — the type and date of procedures logged in the last 60 days and any active aftercare window. Never photos, notes or provider names.
• Procedures log (optional) — the procedures you log (type, date, optional note and provider) are stored on your device. Reminders you switch on are scheduled by your phone; nothing is sent to a server. If you switch on Back up my log (Premium, off by default), those entries — including any note or provider name you typed — are stored in your account on our backend so the log follows you to a new phone. Switching it off deletes the stored copy; deleting an entry, clearing your data or deleting your account removes it too.
• Body routine (optional) — the body-care steps you set up, what you tick off, the shaving, irritation and event days you note, and your reminders are stored on your device. Progress photos you take there are saved only on your device. If you switch on Back up to my account (free, off by default), those records — never the photos — are stored in your account on our backend so they follow you to a new phone. Switching it off deletes the stored copy; clearing your data or deleting your account removes it too.
• Photos of products — when you photograph a pack, a barcode or an ingredient list, the picture is read on your device and is not uploaded. A photo of the front of a pack may be kept on your device as your own picture of that product; you can remove it at any time, and it is never included in a backup. Separately, you can choose to share a product photo: the app resizes it and removes embedded data such as location, and the photo and your account id are stored on our backend. After a review it is shown to other Luni users as that product's picture, never with your name or e-mail. You can ask us to remove a shared photo at any time at [email protected]; deleting your account removes the photos linked to it from display.
• Products you contribute (optional) — if you submit a product that is missing from our catalog, the brand, name and ingredient list you typed or scanned, and your account id, are stored on our backend. After checks the product may become part of the shared catalog, never with your name or e-mail.
• Light-therapy answers (optional) — if you use light therapy, the safety questions you answer before a plan (including whether you take medicines that increase light sensitivity, pregnancy, being under 18, and light-sensitive conditions), the device you select, your plan, and the sessions you log are stored only on your device and are never sent to our servers. Deleting the plan, or clearing your data in Settings, removes them. If you ask us to add a mask that isn't in our list, the brand, model and product link you type — and your account id — are sent to us so we can add the device; nothing else from light therapy leaves your device.
• Reminders (optional) — if you turn reminders on, they are scheduled by your phone's own notification system. Nothing is sent to a server, and we cannot see whether a reminder was delivered or opened.
• Subscription status — managed by RevenueCat and the App Store / Google Play. We receive your entitlement status (active / not), not your payment card details (the app stores never share card data with us).
• Device & diagnostic data — basic technical data needed to run the app and, if enabled, anonymized crash/diagnostic reports to fix bugs.

We do not sell your personal data.

AI processing

The Skin Coach, its weekly insight wording, and the Advisor use AI models (including Anthropic Claude) via our secure backend. Inputs are sent to generate analysis/replies and are not used to train third-party models. The Advisor and Skin Coach provide cosmetic, educational guidance only — not a medical diagnosis.

How we use your data

To provide the core features (scoring, routine fit, recommendations), to operate your account and subscription, to improve the app, and to comply with law. Legal bases (where GDPR applies): performance of contract, your consent (e.g. Face Scan images), and our legitimate interests in operating and improving Luni.

Third-party services

• Supabase — authentication, database, storage, serverless functions.
• Anthropic (Claude) — AI analysis for the Advisor / Skin Coach.
• RevenueCat + Apple App Store / Google Play — subscription processing.
• Cloudflare — hosting the web app.

Each processes data under its own terms; we share only what's needed for the feature you use.

Data retention & deletion

You can delete your account from Settings → Privacy & Data → Delete account, which removes your account and associated server-side data (including any Skin Coach cloud backup and shared comments). Locally stored data is removed when you delete the app; Clear on-device data in the same screen removes it sooner, Skin Coach photos included. Subscription records held by the app stores follow their policies.

Your rights

Depending on your location (e.g. GDPR/UK GDPR, CCPA), you may have rights to access, correct, delete, or export your data, and to withdraw consent. Contact [email protected] to exercise them.

Children

Luni is not directed to children under 16. We do not knowingly collect data from children under that age.

Changes

We'll update this policy as the app evolves and revise the "Last updated" date.

Contact

Questions: [email protected], Luni (KvK 94418691), Leliestraat 31, 2011 BL Haarlem, Netherlands.