Privacy Policy

Skincare is personal. Information about your face, skin, habits, and concerns can be sensitive, and we treat it that way.

Synvora Skin, based in Saskatchewan, Canada, operating as Synvora (“Synvora,” “we,” “us,” or “our”), collects personal information only for identifiable purposes, limits collection to what is reasonably needed, applies extra care to facial images and health-related skincare information, limits how long we keep information, and gives you ways to access, correct, or delete it.

Using Synvora is not blanket consent to every possible future use of your sensitive information.

Synvora Skin, 4423 4th Avenue, Regina, SK, S4T 0J4, Canada. Our Privacy Officer oversees these practices and handles requests at hello@synvoraskin.com.

On this website: your email address if you join the waitlist, and a referral code we generate so you can invite friends. If you arrive via someone else’s referral link, we record that connection so we can credit them.

In the app:

• Account. Name, email, authentication details, account identifiers, age range, region, communication preferences.
• Skin profile. Skin type, concerns, sensitivity, known allergies and ingredient sensitivities, previous reactions, routine preference, monthly budget, climate, sun exposure and SPF habits, and products you save.
• Health-related skincare information. Where relevant to a recommendation — allergies, ingredient sensitivities, or pregnancy or breastfeeding status where it affects ingredient guidance. Providing it is your choice.
• Facial images. Three photographs per scan, handled differently from one another — see Section 5.
• Analysis results. Observed visible traits and severity, an estimated skin-tone band used internally to improve accuracy across skin tones, whether a finding was flagged as worth a professional’s attention, match scores, routines, and progress comparisons.
• Coach messages and the conversation context needed to answer you, which includes your skin profile and recent scan results.
• Product interactions and product photographs you capture.
• Subscription information. Status, plan, purchase and renewal dates, transaction identifiers, currency, price. We never receive or store your payment card details.
• Device and technical data. IP address, device type, OS, app version, device identifiers, language, approximate region, crash reports, diagnostics, login timestamps.
• Usage events. Which screens you reach, when a scan starts and finishes, whether a purchase succeeded, searches, and errors. These carry your user ID so we can follow one person’s journey through a flow — but never your photos, your scan results, or the content of your coach messages.

Directly from you, through your use of the app, from device features where you grant permission, and from our service providers. We do not access your camera merely because Synvora is installed — only when you start a scan or scan a product.

Scans are user-initiated. Synvora does not photograph you continuously, in the background, or without your action.

What the analysis is for. Your images are analyzed to observe visible skin characteristics — apparent oiliness, visible redness, texture, apparent dryness, visible blemishes, pigmentation, apparent fine lines, under-eye appearance — to generate your report and product matches, and to compare results over time if you re-scan.

Who processes them. Images are processed by Anthropic’s AI vision models solely to generate your results. That processing infrastructure is located in the United States, which means your images may be subject to lawful access by authorities in that jurisdiction.

Storage, precisely. You capture one front-facing photo and two side angles.

• The two side-angle images are never stored on our servers. They exist only for the duration of the analysis request, and are deleted from your device after the scan.
• The front-facing image is stored in a private location tied only to your account, so your report can display it and you can review past scans. No other user can access it. It is retained until you delete your account.
• Analysis results — the observed traits, not the images — are stored with your account so your report and progress tracking work.

No facial recognition. We do not use facial images to identify you, authenticate you, or compare your face against any database of identities.

No AI training on your images. Consenting to a scan is not consent to train models. Neither we nor our AI provider use your images to train or improve general-purpose AI models. If we ever wish to, we will ask separately and you will be able to decline while continuing to use Synvora.

To provide Synvora, personalize your recommendations, keep accounts safe, improve the app using usage events rather than your photos or conversations, communicate with you about your account and subscription, and comply with law.

We rely on your consent, or another basis permitted by law. Some features cannot function without particular information — a skin analysis cannot be performed without an image.

Your analysis results, match scores, and recommendation rankings are generated substantially or entirely by automated processing. Automated results can be inaccurate and are not medical diagnoses. If you have a concern about one, contact hello@synvoraskin.com.

Each provider receives only what it needs:

• Supabase — database, authentication, file storage: account data, skin profile, scan results, stored front photos, coach messages.
• Anthropic (United States) — skin analysis and coach: scan images, coach messages, skin profile context.
• Vercel — website hosting and anonymous aggregate analytics.
• RevenueCat — subscription status and transaction identifiers.
• PostHog — product analytics: usage events tied to your user ID.
• Apple / Google — in-app purchases. We never see card details.
• Resend — email delivery.

When you follow a link to a retailer, that retailer or affiliate platform may receive a referral identifier and information your device ordinarily transmits. We do not send your facial photographs or your skincare profile to retailers.

We may also disclose information where required or permitted by law, and personal information may transfer as part of a merger, acquisition, or sale of assets, subject to appropriate protections.

We do not sell your facial images, analysis information, or skincare profile. We do not use them for third-party targeted advertising, and we do not run advertising trackers. If this ever changes we will update this Policy and obtain any consent the law requires before applying a new practice to existing information.

As an Amazon Associate, Synvora earns from qualifying purchases. Some recommended products link to Amazon and other retailers, and we may earn a commission at no additional cost to you. Recommendations are generated by matching products to your skin profile and budget — commission does not influence which products we recommend or how they rank.

Synvora is operated from Canada, but several providers process or store information in the United States, including Anthropic, Vercel, RevenueCat, and PostHog. Your information may therefore be subject to lawful access by courts, law enforcement, or regulators in those jurisdictions.

• Account and profile data: while your account is active.
• Scan results and stored front photos: until you delete your account.
• Side-angle scan images: never stored.
• Coach messages: retained so the coach has memory; deleted with your account.
• Transaction records: as required for accounting, tax, and legal obligations.

Deletion from active systems may not immediately remove information from encrypted backups, which remain until overwritten under ordinary retention procedures.

Encryption in transit, access controls, authentication, private account-scoped storage for scan photos, restricted internal access, logging and monitoring, and incident response. No online system can be guaranteed completely secure, and you are responsible for protecting your credentials and your device.

If we become aware of an incident involving personal information we will investigate and take appropriate measures, and provide notification where the law requires it.

Depending on where you live you may request access, correction, or deletion; withdraw consent for certain future uses; challenge our compliance; and complain to a privacy regulator.

Getting a copy of your data: email hello@synvoraskin.com and we’ll send it to you within one month. There is no in-app export button — the right exists regardless of whether a screen does it, and handling requests by email lets us verify who is asking before we send someone’s skin data anywhere.

Account deletion: Settings → Delete account permanently deletes your account, skin profile, scan results, stored scan photos, and coach messages. This cannot be undone. To exercise any other right, email hello@synvoraskin.com. We may need to verify your identity first, and will ask only for what that requires. To remove your email from the waitlist before the app launches, email us and we’ll delete it by hand.

Deleting the app from your device does not delete your account or server-side information.

You may withdraw consent for processing based on consent, subject to legal and contractual restrictions and reasonable notice. If the information is necessary for a feature, that feature can no longer operate — withdrawing permission to process facial images prevents future scans. Withdrawal does not undo processing that lawfully occurred beforehand.

Synvora is intended for adults. You must be at least 18 to create an account, and we ask you to confirm that when you sign up. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will take appropriate steps, which may include deleting the information and the account. Parents or guardians with concerns may contact hello@synvoraskin.com.

Synvora requests camera access to capture images for skin scans and product scans. You can manage this in your device settings. Disabling it prevents scan features from working; the rest of the app remains usable.

This site sets a synvora_ref cookie (30 days) and a matching browser localStorage entry when you arrive via a referral link, so credit reaches the right person even if you sign up later, and stores your waitlist position locally. We use Vercel Analytics for anonymous, aggregate page-view counts — no cookies, no cross-site tracking.

The app uses local storage to keep you signed in and remember settings, and PostHog to record the product events described in Section 3. None of this is used for advertising or shared with ad networks.

Where you have opted in we may send promotional emails, and you can unsubscribe from any of them. We may still send non-promotional messages about your account, purchases, privacy, security, or material changes.

Participation in beta programs, surveys, or usability testing is voluntary. Where research involves facial images or sensitive skincare information beyond providing the ordinary Services, we will disclose that and seek consent.

We may create aggregated or de-identified information for analytics and product development, taking reasonable measures to reduce the risk of re-identification.

Synvora links to retailers and other services we do not control. Their practices are governed by their own policies.

We may update this Policy. If changes materially affect how sensitive personal information is handled, we will provide notice and obtain additional consent where required. The date at the top identifies the current version.

Synvora Skin, 4423 4th Avenue, Regina, SK, S4T 0J4, Canada — hello@synvoraskin.com. You may also contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.