Privacy Policy

Last updated: July 2026

What we collect

Vaiya Labs collects the information you choose to provide when using the app: your skin type, skin concerns, ingredient preferences, any allergens or medications you enter, your routine and check-in history, product ratings, and any progress photos you upload. We use this to personalize your experience. It is never sold.

Account information. Your email address, used to sign you in and to send you app emails (such as beta invites and the reminders you choose to turn on).

Usage data. Basic events about how you use the app — for example, which screens and features you open. When you're signed in, these may be associated with your account. We use this only to understand and improve the app.

Diagnostics. If the app runs into an error, we automatically collect a crash report — the error message, a technical stack trace, the screen you were on, and your device/browser type — so we can find and fix bugs. We deliberately record only the page path, never the full web address, so it can't carry personal identifiers.

Location (only if you turn on UV/SPF alerts). To show you local UV-index and sunscreen-reapply alerts, the app uses your device's approximate location. Your coordinates are sent to Open‑Meteo for the UV forecast and to BigDataCloud (or, as a fallback, OpenStreetMap Nominatim) to turn those coordinates into a place name. We don't store your location on our servers beyond what's needed to show the alert, and these alerts are off unless you enable them.

Push notifications (only if you turn them on). If you enable reminders as web or app push notifications, we store the push subscription your browser or device gives us so we can send the routine, SPF, and check-in nudges you asked for. You can turn these off anytime in the app's settings or in your device settings.

How we use your information

The information you provide is used to generate skincare routine recommendations tailored to your profile. Your check-in history is used to calculate your consistency score and display your progress over time. We do not use your personal skincare data for advertising or share it with marketers.

Sensitive and health-related information

Some information you can choose to enter — the allergens, sensitivities, and medications you save, and any notes about how your skin reacts — may be considered sensitive or "consumer health" information under some laws. You are never required to provide it; you enter it only if you want Vaiya to personalize your routine and flag possible conflicts for you.

How we use it. We use this information solely to run the features you asked for — building your routine, checking products against what you told us to avoid, and (if you use Sophie+) generating your chat and label-scan responses. We do not sell it, and we do not use it for advertising, marketing, or profiling unrelated to providing the service.

Your consent, and how to withdraw it. We ask for your explicit opt-in before storing this data, and a separate opt-in before sharing any of it with our AI assistant. You can withdraw at any time and delete it from You → Withdraw health-data consent, or by deleting your account. Full details are in our Consumer Health Data Privacy Policy.

Third-party services

Vaiya Labs uses Supabase for data storage, authentication, and private storage of your progress photos. If you subscribe to Sophie+, payments are processed by Stripe on the web and by Apple (via RevenueCat) in the iOS app — we never see or store your full card details. Sophie chat and label scanning are powered by Anthropic (the Claude AI). We use an email provider to deliver invites and the reminders you opt into. If you turn on UV/SPF alerts, we use Open‑Meteo (UV forecast) and BigDataCloud, with OpenStreetMap Nominatim as a fallback (to name your location from its coordinates); if you turn on push notifications, they're delivered through your browser or device's push service. We also display affiliate links to retailers (including Amazon); clicking one may place a cookie from that retailer, whose privacy practices we don't control.

Sophie chat (Sophie+). When you send a message to Sophie, your message and relevant skincare context are sent to our AI provider (Anthropic) to generate a reply. To personalize her answers and check products for you, that context includes your first name, skin type, goals, and the allergens and medications you've saved — but not your email or account login. Anthropic does not use your messages to train its models. Please don't include additional sensitive personal or medical details in chat — Sophie is for general skincare education, not medical advice.

Our usage analytics and crash diagnostics are self-hosted — we do not use any third-party analytics, advertising, or tracking service.

For the full, dated list of the vendors that process your data on our behalf — what each one does, the data it handles, and where — see our Sub-processors register. We maintain a Data Processing Agreement with each of them.

Data stored on your device

Some information — such as your skin profile, routine, and progress photos — may be stored locally on your device. This data stays on your device unless you choose to sync it.

Age

Vaiya is intended for adults. You must be at least 18 years old to use it. Vaiya is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us at the address below and we will delete it.

How long we keep your data

We keep the information tied to your account for as long as your account is active, so the app works for you. When you delete your account, we delete the associated data as described under "Your choices" below. We may retain limited records where we are legally required to, or keep de-identified or aggregated information that no longer identifies you. Diagnostic and usage records are kept only as long as needed to fix problems and improve the app.

Your privacy rights

Depending on where you live, you may have rights over your personal information — such as the right to access it, correct it, delete it, obtain a copy, or object to or restrict certain uses, and the right not to be treated differently for exercising them. Vaiya is built so you can exercise the core of these yourself: you can view and edit your profile in the app, and permanently delete all of it at any time (see "Your choices"). We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising. To make any other request, or if you would like help, contact us at the email below; we will respond as required by applicable law. If you are in the EEA or UK, our legal bases for processing are your consent (which you can withdraw), performing the service you requested, and our legitimate interest in keeping the app secure and working as intended.

Your choices

You can permanently delete your account and all your data at any time from within the app: You → Delete my account. This erases your profile, allergens and medications, check-ins, shelf, progress photos, and your login — it cannot be undone. If you have questions about your data, contact us at the address below.

Contact

For privacy questions, contact: hello@vaiyalabs.com

This policy may be updated from time to time. Continued use of the app after changes constitutes acceptance of the updated policy.