Privacy Policy

Introduction

Welcome to Behold Beauty (“we,” “our,” or “us”). Behold Technologies LLC (“Behold Beauty”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Services.

Information We Collect

Account Information

When you create an account, we collect information you provide directly, including:

• Email address
• Password (stored as a secure hash by our authentication provider)
• Username and display name
• Profile photo (optional)
• Bio (optional)
• Birthday (optional)
• Country or region (optional)

If you sign in using Google, we receive your name, email address, and profile picture from Google, subject to the permissions you grant.

Skin Profile Information

To personalize your experience, you may optionally provide beauty-related information, including:

• Skin type (e.g., oily, dry, combination)
• Skin concerns (e.g., acne, aging, sensitivity)

Some skin concerns, such as acne or sensitivity, may be considered health-related information under certain privacy frameworks. We do not access HealthKit, clinical health records, or fitness data.

User-Generated Content

When you use our social features, we collect and store the content you create, including:

• Product reviews and ratings
• Optional review responses, such as how long you used a product, whether it was worth the price, and whether you would purchase it again
• Beauty routines and routine descriptions
• Comments on reviews and routines
• Product lists and collections
• Photos and images you upload (including review images, routine images, and your profile photo)
• Upvotes on reviews, routines, and comments

Social and Interaction Data

We collect information about your interactions with other users, including:

• Users you follow and users who follow you
• Users you have blocked
• Notifications related to follows, comments, and upvotes

These relationships form your in-app social graph. We do not access or upload contacts from your device address book.

Feedback and Support Information

If you submit feedback, request support, or report a user or content, we collect the information you choose to provide, such as the feedback type, subject, message, report reason, and additional description. Bug reports may also include the current app screen, device type or name, operating system version, app version, and platform so we can investigate the issue.

Information Collected Automatically

When you use our Services, we may automatically collect certain information:

• Device information (device type, operating system, and version)
• App version
• IP address and a general country or region inferred from it for security and analytics
• Account, authentication, app-installation, and push-notification identifiers used to operate the Services
• Firebase authentication metadata (login timestamps, authentication method used)
• Website and app usage analytics, such as app launches, screens viewed, feature interactions, product activity, and conversion events
• Search activity metadata, such as query length, search mode, result count, and whether a search returned results, without the search terms themselves

Information Stored Locally on Your Device

Some information is stored only on your device and is not transmitted to our servers:

• The search terms in your recent search history
• Recently viewed products
• App preferences and settings
• Cached data for offline performance

Information We Do Not Collect

We want to be transparent about what we do not collect:

• Precise GPS, Wi-Fi-based location, or background location from your device
• Contacts from your device address book
• HealthKit, clinical health records, or fitness data
• Financial or payment information
• Microphone or audio data
• Advertising or cross-app tracking identifiers used for third-party targeted advertising

How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain our Services: Create and manage your account, enable you to post reviews and routines, and facilitate social interactions.
• Personalize your experience: Use your skin profile and activity to surface relevant product recommendations, search results, and content, and to operate and improve our recommendation, search, discovery, and personalization features.
• Social features: Enable following, feed curation, notifications, and community engagement features.
• Communications: Send you service-related notifications (e.g., when someone follows you, comments on your review, or upvotes your content). With your consent, we may also send marketing communications.
• Safety and moderation: Monitor content for violations of our community guidelines and enforce our Terms of Service.
• Improve our Services: Analyze usage patterns to improve features, fix bugs, and enhance overall app performance.
• Machine learning and AI: Develop and improve machine learning and artificial intelligence features used within the Services.
• Legal compliance: Comply with applicable legal obligations and protect our rights.

Aggregated and De-identified Information

We may aggregate, anonymize, or otherwise de-identify information collected through the Services.

Because this information cannot reasonably identify you, we may use it for analytics, research, product development, trend reporting, marketing, collaborations, and other lawful business purposes.

How We Share Your Information

Public Content

Certain information you provide is visible to other users by design. This includes your username, display name, profile photo, bio, reviews, routines, comments, product lists, and follower/following counts. Please be mindful that content you post publicly can be viewed by anyone using the Services.

Third-Party Service Providers

We share information with third-party service providers who perform services on our behalf:

• Firebase (Google): We use Firebase Authentication to manage user accounts and authentication. Firebase processes your email address, password hash, authentication tokens, and login metadata. See Firebase Privacy Policy.
• Cloudflare: We use Cloudflare Images to store and serve user-uploaded images (profile photos, review images, and routine images). Images are uploaded directly from your device to Cloudflare. See Cloudflare Privacy Policy.
• Google OAuth: If you choose to sign in with Google, we use Google OAuth to authenticate your identity. See Google Privacy Policy.
• PostHog: We use PostHog to understand aggregate website and app usage, such as page views, app interactions, waitlist conversions, and app funnel performance. PostHog receives event-level analytics associated with an app or device identifier and, after you sign in, our internal account identifier. Analytics may include app and device metadata, a general region inferred from your IP address, and optional skin type and skin tone values. We do not send your reviews, messages, email address, search terms, or free-form profile text to PostHog. You can opt out of product analytics in the app's Privacy & Security settings.
• Expo: If you enable push notifications, we use the Expo Push Service to obtain a push token and deliver notifications through Apple or Google. Expo processes the push token and notification payload as needed to provide delivery.
• Resend: We use Resend to deliver operational emails, including internal notifications about feedback, support requests, and content reports. Those emails may contain the information submitted in the applicable form and related account identifiers.

Affiliate Partners

If you choose to visit or purchase products through affiliate links provided within the Services, Behold Beauty may receive a commission from participating retailers.

We do not share your personal information with affiliate partners for this purpose unless you separately authorize us to do so.

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• A subpoena, court order, or legal process
• A request from law enforcement or government authorities
• Protection of our rights, property, or safety, or that of our users or the public

Business Transfers

If Behold Technologies LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

What We Do Not Share

We do not sell your personal information to third parties. We do not currently share your personal information with third-party advertising networks or data brokers for their own advertising purposes.

We may introduce advertising, sponsored content, or affiliate features in the future. If we do, we will update this Privacy Policy to explain what information is involved and provide any notice or choices required by applicable law before using your personal information for those purposes.

We may share aggregated, anonymized, or de-identified information that cannot reasonably identify individual users for research, analytics, industry insights, collaborations, or other lawful business purposes.

Device Permissions

Our mobile app may request the following device permissions:

• Camera: Used only when you choose to take a photo for your profile, a review, or a routine. We do not access your camera in the background.
• Photo Library: Used only when you choose to select an existing photo for upload. We do not scan or access your photo library beyond images you explicitly select.

Both permissions are optional and requested only when you initiate an action that requires them. You can revoke these permissions at any time through your device settings.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. Specifically:

• Active accounts: Your information is retained for the duration of your account.
• Deactivated accounts: If you deactivate your account, your profile is hidden from other users but your data is retained so you can reactivate at any time.
• Deleted accounts: If you request account deletion, your account is scheduled for deletion with a 14-day grace period. During this period, you may log back in to cancel the deletion. After the grace period, your personal information is permanently deleted or anonymized. Public contributions, including reviews, ratings, comments, and review photos, may remain publicly available in disassociated form to preserve the integrity and usefulness of the Services. These contributions are no longer associated with your account or personal information.
• Acceptance records: We keep a record of which version of our Terms of Service and Privacy Policy you accepted, and when. If you delete your account, this record is retained in a form that does not identify you unless you contact us about a legal claim. We keep it only to establish, exercise, or defend legal claims.
• Locally stored data: Data stored on your device (search history, recently viewed products) can be cleared at any time by clearing app data or uninstalling the app.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/HTTPS
• Secure authentication via Firebase with token-based access
• Password re-authentication required for sensitive account actions (deactivation and deletion)
• Server-side access controls and authentication verification

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can view your personal information through your account profile and settings at any time.
• Correction: You can update your profile information, including your display name, username, bio, email, birthday, country, skin type, and skin concerns directly within the app.
• Deletion: You can delete your account through the Privacy & Security settings in the app. After the 14-day grace period, your personal information will be permanently deleted or anonymized. Public reviews, ratings, comments, and review photos may remain available in disassociated form as described in this Privacy Policy.
• Content removal: You can delete your reviews, routines, comments, and product lists at any time.
• Marketing opt-out: You can opt out of marketing communications at any time through your account settings.
• Data portability: You may request a copy of your data by contacting us at the email below.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

Your right to request deletion is subject to the anonymized retention of public contributions and the retention of acceptance records, both described in the Data Retention section above.

European Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure (“right to be forgotten”)
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw consent at any time

The right to erasure applies to your personal information. Public contributions such as reviews, ratings, comments, and review photos may be retained in anonymized form that no longer identifies you, as described elsewhere in this Privacy Policy.

Our legal bases for processing your information include: performance of our contract with you (providing the Services), your consent (optional profile data, marketing), and our legitimate interests (improving our Services, ensuring safety).

Children’s Privacy

Our Services are not intended for users under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If we learn that we have collected information from a child under the applicable age, we will take steps to delete that information as soon as possible. If you believe a child has provided us with personal information, please contact us at the email below.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. When we transfer data internationally, we take steps to ensure your information receives an adequate level of protection.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date at the top. For significant changes, we may also notify you through the app or by email. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Behold Technologies LLC
Email: support@beholdbeauty.app

We will respond to your request within 30 days, or sooner as required by applicable law.