Consumer Health Data Privacy Policy

1. Consumer Health Data We Collect

When you use our skin analysis service, we collect and derive the following categories of consumer health data: photographs of your face that show skin condition; cosmetic skin assessments generated from those photographs (including observations and 1-10 scores for wrinkles, blemishes and spots, pores, texture, redness, and tone); derived skin attributes (estimated skin type such as oily or dry, apparent skin tone category, apparent sensitivity level, and appearance-based estimated age and gender); objective computer-vision measurements of the photo (such as redness coverage, blemish coverage, texture, shine, and tone evenness); and the ingredient recommendations generated from your assessment.

These assessments are cosmetic in nature and are not medical diagnoses. We do not collect precise location information, and we do not use geofencing around any facility.

2. Sources of Consumer Health Data

We collect this data from you directly: the selfie you choose to upload, information you enter in the service, and the analysis results our systems generate from your selfie. We do not purchase consumer health data from third parties or data brokers.

3. Why We Collect It

We collect and use consumer health data only to: generate your cosmetic skin analysis and personalized serum recommendations; show you your analysis history and progress over time; improve the accuracy and safety of our recommendation system; provide customer support; and comply with legal obligations. We do not use consumer health data for advertising, and we do not sell consumer health data.

4. Sharing and Processors

We share consumer health data only with service providers (processors) acting under contract on our behalf: Google Cloud Platform (secure photo storage, database hosting, and AI analysis processing). Payment, shipping, and email providers receive order information but not your photos or skin analysis results.

We do not share consumer health data with affiliates for their own use, and we have no affiliated companies with whom such data is shared. We do not sell consumer health data and will never do so without the separate, valid authorization required by law.

We may disclose information when required by law, such as in response to a valid legal process, or to protect safety, security, or legal rights.

5. Your Rights

If you are a resident of Washington (or another state with a similar consumer health data law, such as Nevada), you have the right to: (a) confirm whether we collect, share, or sell your consumer health data and access that data, including a list of third parties and affiliates with whom we have shared it; (b) withdraw your consent to our collection and sharing of your consumer health data; and (c) have your consumer health data deleted, including from our processors and, on backup systems, on the backup rotation cycle.

We will not discriminate against you for exercising any of these rights.

6. How to Exercise Your Rights

Email contact@nuveeskinlab.com from the email address associated with your account and describe your request (access, withdraw consent, or delete). We will verify your identity and respond within 45 days. If we need an additional 45 days due to complexity, we will let you know.

If we decline your request, you may appeal by replying to our decision with the subject line "Health Data Appeal." We will respond to your appeal within 45 days with a written explanation. If your appeal is denied, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.

7. Changes and Contact

We will post any changes to this policy on this page with a new effective date. Questions about this policy can be sent to contact@nuveeskinlab.com.