Privacy Policy

1. Introduction

VanityFix ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect information about you when you use the VanityFix mobile application and website at vanity-fix.com (the "Service").

By using VanityFix, you agree to the collection and use of information as described in this Policy. VanityFix is operated by Shanaz Ahmed, based in York, United Kingdom. We serve users globally and comply with applicable data protection laws including the UK GDPR, EU GDPR, and the California Consumer Privacy Act (CCPA).

2. Information We Collect

Information You Provide

• •Account information: name, email address, and password
• •Skin and hair profile: skin type, hair type, age group, concerns, allergies, sensitivities, pregnancy status, and skincare goals
• •Product information: products you add to your shelf including brand names and ingredients
• •Progress data: skin ratings, progress photos, glow streak data, and routine completion logs
• •Health information: medications and supplements you log within the app
• •Communications: messages and questions you send to Vanessa AI
• •Payment information: subscription details processed securely by our payment provider

Information We Collect Automatically

• •Device information: device type, operating system, and browser type
• •Usage data: features you use, pages you visit, and actions you take
• •Log data: IP address, access times, and referring URLs

Photos and Images

If you use the Skin Scan feature or upload progress photos, we collect images of your skin and face. These are stored in private, encrypted storage — accessible only to you and our admin team. They are never used for advertising or shared with third parties for marketing purposes.

3. How We Use Your Information

• •Create and manage your account
• •Generate personalised skincare and hair care routines
• •Power the Vanessa AI advisor to provide personalised beauty advice
• •Detect ingredient clashes and flag potential allergens
• •Track your skincare progress and glow streak
• •Send routine reminders and product alerts
• •Send transactional and retention emails — you can opt out at any time
• •Process payments and manage your subscription
• •Improve and personalise the VanityFix experience
• •Comply with legal obligations

4. Affiliate Links

VanityFix participates in affiliate marketing programmes including Amazon Associates UK (tag: shanaz36-21) and the Awin affiliate network (publisher ID: 2964865), including merchants such as Avant Skincare, Stylevana UK, MyBeauty.Boutique, Sinocare, The Outlet Shop, brickzonehub, and Aurora.

When you click a "Buy Now" link, you may be directed to a third-party retailer via an affiliate tracking link. We may earn a commission on purchases at no extra cost to you. Affiliate relationships do not influence AI recommendations generated for you.

5. How We Share Your Information

We do not sell your personal data. We share information only with trusted service providers who help us operate VanityFix:

• •Base44 / Wix — our app development and hosting platform
• •Anthropic — provider of the Claude AI model powering Vanessa AI
• •Amazon Web Services — cloud infrastructure and file storage
• •Resend — transactional email delivery
• •Payment processors — to handle subscription payments securely

All service providers are contractually required to protect your data and use it only to provide services to us.

6. Sensitive Health Information

VanityFix collects sensitive personal data including health information (skin conditions, allergies, medications, pregnancy status) and photos of your skin and face. We collect this only with your explicit consent, solely to provide personalised skincare recommendations. You may withdraw consent at any time by deleting your account or contacting us.

7. AI-Generated Recommendations

VanityFix uses artificial intelligence including the Claude AI model by Anthropic to generate skincare routines and advice through Vanessa AI.

• •AI recommendations are for informational purposes only and do not constitute medical advice
• •Recommendations have not been reviewed by a licensed medical professional
• •Always consult a qualified healthcare professional before starting new treatments
• •VanityFix is not liable for adverse outcomes from following AI-generated recommendations

Conversations with Vanessa AI may be processed by Anthropic's systems. Please refer to Anthropic's Privacy Policy at anthropic.com/privacy for details.

8. Data Retention

• •Account data: retained until you delete your account
• •Progress photos: retained until you delete them or close your account
• •AI conversation history: retained for 12 months
• •Payment records: retained for 7 years as required by UK tax law

When you delete your account, we will delete or anonymise your personal data within 30 days, except where required by law.

9. Your Privacy Rights

VanityFix serves users globally. Your privacy rights depend on where you are located.

UK Users — UK GDPR

• •Right of access: request a copy of the personal data we hold about you
• •Right to rectification: ask us to correct inaccurate or incomplete data
• •Right to erasure: ask us to delete your personal data
• •Right to restriction: ask us to restrict how we process your data
• •Right to data portability: request your data in a machine-readable format
• •Right to object: object to processing based on legitimate interests or direct marketing

You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

EU Users — GDPR

If you are based in the European Economic Area, you have the same rights as listed above under the EU General Data Protection Regulation (GDPR). You may lodge a complaint with your local Data Protection Authority (DPA). A list of EU DPAs is available at edpb.europa.eu.

California Users — CCPA

• •Right to know: request disclosure of personal information we have collected about you
• •Right to delete: request that we delete your personal information
• •Right to opt-out: we do not sell personal information to third parties
• •Right to non-discrimination: we will not discriminate against you for exercising your rights

California residents may submit requests by emailing privacy@vanity-fix.com. We will respond within 45 days.

All Users

To exercise any of these rights, contact us at privacy@vanity-fix.com. We will respond within 30 days (or as required by applicable law).

10. Children's Privacy

VanityFix is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe your child has provided us with personal information, contact us at privacy@vanity-fix.com and we will delete it immediately.

11. Security

We implement appropriate technical and organisational measures to protect your information including HTTPS encryption in transit, secure password hashing, access controls, and private encrypted storage for all face and skin photos. No method of transmission over the internet is 100% secure, but we take all reasonable steps to protect your data.

12. International Data Transfers

VanityFix is operated from the United Kingdom. If you access the Service from outside the UK, your information may be transferred to and processed in the UK or other countries where our service providers operate, including the United States.

We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the UK ICO and European Commission where required. By using VanityFix, you consent to your information being transferred to these locations.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a notice within the VanityFix app. Continued use of VanityFix after changes constitutes acceptance of the updated Policy.

14. Contact Us