Privacy Policy
The short version
- Face analysis runs on your phone. Camera frames and the photos you try looks on are never uploaded.
- Your Beauty Profile (skin depth, undertone, face shape, eye shape) stays on your phone unless you turn on Store my face profile in cloud.
- We do not sell your data, show ads, or use advertising or tracking tools.
- You can delete your account and everything we hold about you from Profile › Delete account.
What we collect and why
| Data | When | Why |
|---|---|---|
| Email address | You sign in with email | To send your one-time sign-in code and identify your account |
| Name, email and profile photo from Google | You sign in with Google | To create your account and show your name and photo |
| Country, currency, language, when you last opened the app | While you use the app | To show prices and local stores, and keep your settings |
| Beauty Profile (skin depth, undertone, face shape, eye shape) | Only if you turn on "Store my face profile in cloud" | To keep your profile across devices. It is deleted from our servers as soon as you turn the setting off |
| Your kit (products you own) and saved looks (which look and shades you chose, not photos) | When you add them | To back them up |
| Your location | Only when you open Nearby salons and allow location | To find salons near you. We use it for that search and do not store it. Our hosting provider's request logs may hold it for up to 7 days |
| Your display name | When you sign in with email | Sent to DiceBear to draw your avatar |
Camera and photos
The camera and any photo you choose are processed on your phone to find your face and draw makeup on it. They are not sent to us. A try-on image leaves your phone only when you share it yourself or save it to your Photos.
Who processes data for us
- Supabase hosts our database and sign-in, in the European Union (Ireland).
- Google provides Google sign-in.
- DiceBear draws avatars from a display name.
- Our email delivery provider sends sign-in codes from noreply@appdhis.com.
- Some product images load from third-party image hosts, which see your device's IP address as any website would.
- Google Play and the App Store handle any purchases. We never see your payment details.
How long we keep it
We keep your account data until you delete your account. Deleting it removes your account, profile, Beauty Profile, kit and saved looks from our servers straight away. Backups held by our hosting provider expire within 7 days.
Your choices and rights
- Delete face data: Profile › Privacy & face data › Delete all my face data.
- Delete everything: Profile › Delete account, or see how to request deletion without the app.
- Get a copy: Profile › Privacy & face data › Download a copy of my data, or email us.
Under Kenya's Data Protection Act, 2019 you have the right to be told how your data is used, to access it, to have it corrected or deleted, and to object to its processing. If you live in the EU or UK, the GDPR or UK GDPR gives you similar rights. To use any of them, email support@appdhis.com. You can also complain to the Office of the Data Protection Commissioner in Kenya, or to the data protection authority where you live.
Legal bases: providing the service you asked for (account, backup, prices), your consent (camera, location, cloud copy of your Beauty Profile), and our legitimate interest in keeping the service secure.
Age
Kosmeta is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you think someone under 18 has given us data, email us and we will delete it.
Changes
If we change this policy, we will update the date at the top, and tell you in the app if the change is significant.
Contact
Appdhis, Kenya · support@appdhis.com