Privacy Policy

Overview

Melaura ("we", "us", or "our") provides skincare and ingredient education for every skin tone, with extra depth for melanin-rich skin, through our mobile app and website.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Melaura, you agree to this policy.

Information we collect

Account information: When you create an account, we collect your name, email address, and password (stored securely as a hash on our servers).

Skin profile: Your skin tone, skin concerns, and budget preferences are stored with your account and on your device.

Ingredient scans: When you scan a product label, the image is sent to our secure API for analysis. We use AI to read ingredients and personalize results for your profile.

On-device data: Scan history, routine tracking, progress photos, and notification preferences are stored locally on your device unless you choose to sync them in a future update.

Website waitlist: If you join our waitlist on melaura.app, we collect your email address to send product updates.

How we use your information

We use your information to personalize ingredient verdicts, build routines, find product dupes, and operate your account.

Label images are processed through our Cloudflare Worker and sent to OpenAI for vision analysis. We do not use your scans to train third-party AI models.

We may use aggregated, de-identified data to improve Melaura features and product matching.

What stays on your device

Progress photos are saved locally on your phone by default. They are not uploaded to our servers unless you explicitly opt in to cloud backup in a future release.

Routine completion data and scan history are stored on your device using secure local storage.

Third-party services

We use Cloudflare for API hosting, authentication, and infrastructure.

We use OpenAI for ingredient label analysis. Images and profile context are sent only when you run a scan.

We do not sell your personal information to advertisers or data brokers.

Data retention and security

Account data is retained while your account is active. You may request deletion by contacting us.

Scan usage is rate-limited to prevent abuse. We log scan metadata (timestamp, ingredient count) for monitoring when database logging is enabled.

We use industry-standard encryption in transit (HTTPS) and secure password hashing at rest.

Your rights and choices

You can update your skin profile, sign out, or delete the app at any time.

You may request access to or deletion of your account data by emailing support@melauraskin.com.

If you are in the EU, UK, or California, you may have additional rights under applicable privacy laws.

Children

Melaura is not intended for children under 13. We do not knowingly collect personal information from children.

Contact

Questions about this policy? Email support@melauraskin.com.