Privacy Policy | Acnie Skin Scanner

1. Scope and Controller

This Privacy Policy applies to personal data processed through our website at https://acnie.net, the Skinlens skin analysis service, and the Acnie mobile application. It does not apply to third-party services we do not control.

Data controller: MONO APPS OU, Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551, email: contact@monoappshq.com.

2. Categories of Data We Process

• Account data: email, username, authentication metadata.
• Content data: photos, images, quiz responses, chat messages, product scan inputs, and generated outputs.
• Support data: messages and attachments you send to support.
• Technical/usage data: device, IP, logs, session events, crash diagnostics.
• Billing data: purchase and subscription metadata from app stores or payment partners.

We ask that you do not submit sensitive personal data in support or prompt fields unless strictly necessary.

3. Purposes and Legal Bases

• Service delivery: perform our contract with you.
• Security and abuse prevention: legitimate interests.
• Support and communications: contract and legitimate interests.
• Product analytics and improvement: legitimate interests, and consent where required.
• Legal compliance: compliance with legal obligations.

Where consent is the legal basis, you can withdraw it at any time without affecting prior lawful processing.

4. AI Processing (Images and Chat)

When you upload a photo for skin analysis or product review, we process that image to generate your requested output. This may include non-biometric face-related attributes (for example, orientation and landmarks) to align edits and analysis.

When you use AI chat features, we process your chat inputs and conversation context to generate responses and provide requested assistance.

We do not create or store biometric identifiers such as face templates or faceprints.

We share AI inputs (including uploaded images and chat prompts) with OpenAI strictly to provide the requested processing. We do not permit use of your submitted content to train OpenAI models and rely on vendor controls for limited retention and abuse monitoring.

5. Sharing and Processors

We do not sell your personal data. We share data only with trusted providers that process it under contract.

• Infrastructure providers for hosting and delivery.
• AI providers for requested inference processing.
• Analytics and diagnostics providers to monitor reliability and performance.
• Payment providers to manage subscriptions and purchases.

We may also disclose data when required by law or in connection with corporate transactions.

6. International Transfers

Your data may be processed outside your country of residence. Where required, we implement appropriate safeguards such as contractual clauses and equivalent protection measures.

7. Data Retention

We retain personal data only for as long as needed for the purposes described in this policy.

• Account data: while your account remains active and as needed for compliance.
• Uploaded image data: while the related content exists in your account or service context.
• Chat content: retained only as needed to provide chat functionality, safety monitoring, and legal compliance.
• Support communications: for a limited period needed to resolve requests and maintain records.
• Operational logs: for security, troubleshooting, and abuse prevention windows.

You may request deletion of your data, subject to legal or security retention obligations.

8. Privacy Rights and How to Exercise Them

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data, and to withdraw consent where applicable.

To exercise your rights, contact contact@monoappshq.com with a clear request and enough information for us to verify your identity.

We respond within legally required timeframes and may request additional details to prevent unauthorized disclosure.

If your request is denied, you may ask for a review by replying to our decision with supporting information.

9. Cookies and Analytics Controls

We and our partners may use cookies and similar technologies for essential service operations, analytics, and performance monitoring.

You can control cookie settings in your browser and device preferences. Where required by law, we request consent before using non-essential cookies or tracking technologies.

You may also opt out from specific analytics tools through provider opt-out pages and browser add-ons when available.

10. Data Security

We apply technical and organizational safeguards to protect personal data, including access controls, encryption in transit, and security monitoring. No method of transmission or storage is completely secure.

11. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child submitted data to us, contact us and we will investigate and remove it where appropriate.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we update the "Last updated" date and publish the revised version here.

13. Contact Us

For privacy requests and questions, contact us at:

Email: contact@monoappshq.com
Company: MONO APPS OU
Address: Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551