Informativa sulla privacy

1. Scope and Controller

This Privacy Policy applies to personal data processed through acnie.net, the Skinlens skin analysis service, and the Acnie mobile application. It does not apply to third-party services we do not control.

Data controller: MONO APPS OU, Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551, email: contact@monoappshq.com.

2. Categories of Data We Process

• Account data: email, name, authentication metadata.
• Content data: quiz responses, photos, analysis results, and generated reports.
• Support data: messages and attachments you send to support.
• Technical/usage data: device, IP, logs, session events, crash diagnostics.
• Billing data: purchase and subscription metadata from app stores or payment partners such as Stripe.

We ask that you do not submit sensitive personal data in support or quiz fields unless strictly necessary.

3. Purposes and Legal Bases

• Service delivery: perform our contract with you.
• Security and abuse prevention: legitimate interests.
• Support and communications: contract and legitimate interests.
• Product analytics and improvement: legitimate interests, and consent where required.
• Legal compliance: compliance with legal obligations.

Where consent is the legal basis, you can withdraw it at any time without affecting prior lawful processing.

4. AI Processing (Images and Analysis)

When you upload a photo for skin analysis, we process that image to generate your requested output. This may include non-biometric face-related attributes (for example, orientation and landmarks) to align edits and analysis.

We process your quiz responses and optional photo to provide personalized skin assessment and care recommendations.

We do not create or store biometric identifiers such as face templates or faceprints.

We share AI inputs (including uploaded images and quiz data) with Google (Gemini) strictly to provide the requested processing. We do not permit use of your submitted content to train provider models and rely on vendor controls for limited retention and abuse monitoring.

5. Sharing and Processors

We do not sell your personal data. We share data only with trusted providers that process it under contract:

• Infrastructure providers for hosting and delivery (e.g. Vercel).
• AI providers for requested inference processing (Google Gemini).
• Analytics and diagnostics providers to monitor reliability and performance.
• Payment providers to manage subscriptions and purchases (Stripe, App Store).

We may also disclose data when required by law or in connection with corporate transactions.

6. International Transfers

Your data may be processed outside your country of residence. Where required, we implement appropriate safeguards such as contractual clauses and equivalent protection measures.

7. Data Retention

• Account data: while your account remains active and as needed for compliance.
• Uploaded image data: processed at analysis time; we do not permanently store photos on our servers.
• Analysis results: retained only as needed to provide the service and for legal compliance.
• Support communications: for a limited period needed to resolve requests and maintain records.
• Operational logs: for security, troubleshooting, and abuse prevention windows.

You may request deletion of your data, subject to legal or security retention obligations.

8. Privacy Rights and How to Exercise Them

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data, and to withdraw consent where applicable.

To exercise your rights, contact contact@monoappshq.com with a clear request and enough information for us to verify your identity. We respond within legally required timeframes and may request additional details to prevent unauthorized disclosure.

9. Cookies and Analytics Controls

We and our partners may use cookies and similar technologies for essential service operations, analytics, and performance monitoring. You can control cookie settings in your browser and device preferences.

10. Data Security

We apply technical and organizational safeguards to protect personal data, including access controls, encryption in transit, and security monitoring. No method of transmission or storage is completely secure.

11. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child submitted data to us, contact us and we will investigate and remove it where appropriate.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we update the "Last updated" date and publish the revised version here.

13. Contact Us

For privacy requests and questions, contact us at:

Email: contact@monoappshq.com
Company: MONO APPS OU
Address: Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551