Privacy Policy

At Twacha Labs, your privacy is fundamental to how we build and operate our platform. This policy explains how we collect, use, and protect your personal information when you use our AI skin analysis services.

Information We Collect

Account Information: When you create an account, we collect your email address and basic profile details (name, skin type, skin goals) to personalise your experience and authenticate your identity.

Facial Images: When you use our scan feature, your facial images are captured on-device and transmitted securely to our analysis pipeline. Images are encrypted in transit using TLS 1.3 and processed through our AI vision model. We do not sell or share your facial images with third parties.

Lifestyle Data: Before each scan, you may optionally log lifestyle factors (sleep, water intake, diet, exercise, skincare routine). This data is used to correlate lifestyle habits with skin health outcomes.

Usage Data: We collect anonymised analytics about how you interact with our service to improve the user experience, such as feature usage patterns and session data.

How We Use Your Information

We use your information to:

• Provide personalised skin analysis, scoring, and recommendations
• Track your skin health progress over time
• Generate GP-ready reports summarising your skin data
• Send you scan results and account notifications
• Improve our AI analysis models using anonymised, aggregated data

Technology and Infrastructure

Our platform is built on industry-standard infrastructure. We use Supabase for authentication and database services, Vercel for hosting and deployment, and OpenAI for powering our current AI analysis capabilities. We are also developing a custom vision model to improve analysis accuracy and reduce our reliance on third-party AI providers.

Each of these providers maintains their own security certifications and data processing agreements. We only share the minimum data necessary for each service to function.

Data Security

Your data is protected by the following measures:

• TLS 1.3 encryption for all data in transit
• Encrypted database storage via Supabase (AES-256 at rest)
• Row-level security policies ensuring users can only access their own data
• Facial images are stored securely in encrypted storage and can be deleted at any time through your settings
• Regular review of access controls and security practices

Data Retention

We retain your scan history, scores, and profile data for as long as your account is active. You can request deletion of your data at any time through your dashboard settings or by contacting us. Upon account deletion, all personal data — including scan results and profile information — will be permanently removed within 30 days.

Your Rights

You have the right to:

• Access your personal data at any time through your dashboard
• Request correction of inaccurate data
• Request deletion of your data and account
• Export your data (including GP reports) in a portable format
• Opt out of non-essential communications

Third-Party Services

We use the following third-party services to operate our platform:

• Supabase — authentication, database, and real-time data
• Vercel — application hosting and deployment
• OpenAI — AI-powered skin image analysis (current provider)
• Stripe — payment processing for premium subscriptions

These partners are contractually bound to protect your data and use it only for the purposes we specify. We do not sell your personal data to any third party.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at founder@twachalabs.io