Privacy Policy

Information We Collect

Account Information

You sign in to Sumi using Clerk, Inc., our authentication provider. Depending on the sign-in method you choose (Sign in with Apple or Google), Clerk may collect your email address, a stable user identifier, and basic provider metadata. We do not receive your Apple or Google password. See Clerk's Privacy Policy.

Skin Profile

During onboarding you provide information about your skin (skin type, primary concerns, routine size). This profile is stored in your private Sumi account and is used only to personalize your in-app experience.

Scans and Face Photos (Face Data)

When you take a scan, Sumi uses your device camera to capture a face photo. Before any photo leaves your device, we ask for your explicit consent within the app on a dedicated privacy screen that names the AI provider that receives it.

The face photo is a standard 2D selfie image. Sumi does not use Face ID, the TrueDepth camera, facial geometry, or any biometric face-recognition technology, and we never use your face photo to identify you. Face photos are used only to generate skin marker readings (for example hydration, redness, and texture), and they are shared solely with Google LLC (Gemini) to perform that analysis. The full-resolution face photo is processed transiently and is not stored by Sumi after the analysis response is returned; only a downscaled thumbnail (described below) is retained, and you can delete it at any time.

• AI analysis: The scan photo is sent over an encrypted connection to a Cloudflare Worker we operate, which forwards the image to Google LLC's Gemini API for skin marker analysis (e.g. hydration, redness, texture readings). The analysis response is returned to your device. The original photo is not stored by Sumi after analysis; it is processed to deliver the analysis response.
• Thumbnail: A small, downscaled thumbnail of your scan is uploaded through authenticated Convex media routes and stored in a private Cloudflare R2 bucket. Convex stores the thumbnail metadata and ownership record so only your signed-in account can request it. You can delete any scan at any time from within the app.
• Marker readings, notes, and routine answers: The numeric marker readings, any notes you add, and your routine-followed answers are stored in your private Convex account alongside thumbnail metadata.

Routine and Product Data

Products you add and routine information you record are stored in your private Convex account so they can sync across your devices. Product thumbnails, if you add them, use the same private Cloudflare R2 thumbnail storage described above.

Subscription Information

Sumi Pro subscriptions are sold through Apple's App Store and managed through RevenueCat. RevenueCat receives:

• An app user identifier linked to your Sumi account
• Purchase history, subscription status, and entitlement information
• Basic device information (OS version, device model, country)

RevenueCat does not receive your photos, scans, or skin data. See RevenueCat's Privacy Policy.

Information We Do NOT Collect

• We do not collect your name unless you provide it
• We do not collect location data
• We do not use third-party advertising trackers or ad SDKs
• We do not sell or share your data with third parties for advertising
• We do not operate a public feed, social graph, leaderboard, or comparison feature

How We Use Your Information

• Skin analysis: Your scan photos are analyzed by Google Gemini (via our Cloudflare Worker) to produce skin marker readings.
• History and trends: Your thumbnails, marker readings, notes, and routine answers are stored so you can see how your skin changes over time.
• Personalization: Your skin profile is used to tailor in-app guidance, routine framing, and the order in which markers are presented.
• Authentication: Clerk identifiers are used to sign you in and keep your data linked to the right account.
• Subscription management: RevenueCat is used to verify your subscription status and unlock Pro features.
• Local notifications: Reminders and streak nudges are scheduled on-device only (no push servers).

Consent

During onboarding, Sumi presents an in-app privacy and AI-consent screen before you can complete the skin quiz or take any scan. By tapping "I agree & continue" on that screen, you explicitly consent to the processing of your photos and notes for skin analysis as described in this Policy. You can withdraw consent at any time by deleting your account from within the app.

Data Retention

• Full-resolution scan photos: Processed for AI analysis and not stored by Sumi after the analysis response is returned.
• Thumbnails: Stored in private Cloudflare R2 until you delete the related scan/product or delete your account.
• Marker readings, notes, routines, thumbnail metadata, and profile: Stored in your private Convex account until you delete them or delete your account.
• Authentication data: Retained by Clerk per their data retention policy for as long as your account exists.
• Subscription data: Retained by RevenueCat per their data retention policy.

Account Deletion

You can delete your Sumi account from within the app at any time. Deleting your account removes your skin profile, scans, marker readings, notes, routines, and products from our backend. Subscription records held by RevenueCat and authentication records held by Clerk are deleted or anonymized according to their respective policies. To request a manual deletion or export, email [email protected].

Third-Party Services

Sumi uses the following third-party services. Each provider protects your data as described in their respective privacy policies:

AI Training

We do not use your scan photos, marker readings, or notes to train Sumi-owned AI models, and we do not authorize third-party AI providers to use your scan data to train their models. Where provider controls are available, we configure them to prevent service data from being used for model training.

Children's Privacy

Sumi is not directed at children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with information, please contact us and we will delete it.

Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. You can exercise most of these rights directly in the app (Settings → Account). For anything you can't do in-app, email [email protected] and we will respond within 30 days.

Security

All data transmitted between the Sumi app, our Cloudflare Worker, Convex, Clerk, and RevenueCat is sent over TLS-encrypted connections. The Cloudflare Worker authenticates AI requests using a shared bearer secret. Convex authenticates private thumbnail requests using your signed-in Clerk token plus ownership checks. Private R2 thumbnail objects are not exposed through public bucket URLs. We follow industry-standard practices to protect your information, but no system is completely secure — please use a strong device passcode and a unique email account.

International Transfers

Our service providers may process your data in the United States and other countries. By using Sumi you understand that your data may be transferred to and processed in countries outside your country of residence.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by an in-app notice.