Data Retention & Deletion Policy
Last updated: July 6, 2026
This policy explains how long Nuvée ("Nuvée," "we," "our," or "us") keeps the information collected through our skin analysis and shopping services, and how it is permanently destroyed. It is published to satisfy, among other laws, the written retention-policy requirements of biometric privacy statutes such as the Illinois Biometric Information Privacy Act (BIPA).
Retention Schedule
Uploaded selfie photos
Deleted automatically within 24 hours of upload
Photos are used only to generate your skin analysis. Our cloud storage is configured to permanently delete uploaded photos within 24 hours. After deletion, the photo cannot be recovered and links to it stop working.
Face-geometry data (camera alignment guide)
Not collected by our servers; discarded on your device
The on-screen face-mapping overlay used to help you align your selfie is computed entirely in your browser or device. This facial geometry data is never transmitted to, collected by, or stored on Nuvée servers, and it is discarded when the capture session ends. Nuvée does not use facial recognition and cannot identify you from biometric data.
Skin analysis results
Until you request deletion
Your cosmetic skin analysis (scores, observations, derived skin attributes such as estimated skin type, apparent skin tone category, and sensitivity, and computer-vision measurements) and your recommended formulas are stored with your account so you can review your history and track progress over time.
Account and order information
For the life of your account, then as required by law
Account details, order history, and transaction records are retained while your account is active and afterwards only as needed for tax, accounting, fraud prevention, and other legal obligations.
Biometric Data Statement
Nuvée does not perform biometric identification or facial recognition, does not create or retain biometric templates capable of identifying you, and does not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information. To the extent any facial geometry is processed by the on-device camera guide, it remains on your device and is destroyed when the capture session ends — meaning it is destroyed well before the earlier of (a) the purpose of collection being satisfied or (b) three years after your last interaction with us.
How to Request Deletion
Email contact@nuveeskinlab.com from the address associated with your account and ask us to delete your skin analysis history, your account, or both. We will verify the request and complete the deletion within the timeframe required by applicable law (and in any case within 45 days), except for records we must keep for tax, accounting, security, fraud-prevention, or other legal purposes. Data in encrypted backups is purged on the backup rotation cycle.
Destruction Methods
Electronic records scheduled for destruction are permanently deleted from production systems using the deletion mechanisms of our cloud providers, after which they are unrecoverable by us. Photo deletion is enforced automatically by a storage lifecycle rule rather than manual review.
Questions
Contact contact@nuveeskinlab.com with any questions about this policy.