Sus privacy

Privacy Policy

Last updated: July 18, 2026

Sus is built for quick, personal skincare context without turning your routine into a data grab. This page explains what we collect, why we need it, and how to reach us.

Scans stay purposeful

We process label text, barcodes, and optional product photos to find ingredients and explain the result.

Your profile matters

Skin type, concerns, sensitivities, and goals help Sus personalize a product score instead of showing everyone the same answer.

You stay in control

Delete your account and its data anytime in the app: Settings > Delete account. For privacy or support requests, email hello@getsusapp.com.

What Sus Does

Sus scans skincare packaging, barcodes, product names, and ingredient lists so it can generate cosmetic-ingredient context for your skin profile. Sus is not medical software and does not diagnose, treat, or prevent any disease.

Information We Process

Account or guest identifiers, authentication state, and basic app settings.
Skin profile details such as skin type, concerns, sensitivities, goals, and preferred language.
Scan inputs such as ingredient text, barcode values, OCR text, product names, brands, product categories, and optional product photo frames.
Saved scan history, shelf items, favorites, comparison choices, and analysis metadata when you choose to save or sync them.
Purchase and entitlement status from Apple and RevenueCat, including whether a subscription or pass is active. We do not receive your full payment card details.
Your waitlist contact details, such as name, email, optional phone number, country, skin goal, consent choices, signup source, and basic browser metadata.
An app-generated installation identifier used to protect free-scan limits. Our backend transforms it with a server-held HMAC secret before storage; quota tables do not store the raw identifier.
Device, app, error, rate-limit, and security logs needed to keep the service reliable and prevent abuse. Short-lived free-scan traffic counters use an HMAC-pseudonymized network scope rather than storing a raw network address in quota tables.

How We Use Information

Run product lookup, OCR cleanup, ingredient analysis, profile-specific scoring, and scan history features.
Personalize scan results to your profile bucket, language, sensitivities, and goals.
Operate subscriptions, free scan limits, purchase restore, and entitlement checks.
Send waitlist and launch updates, plus product updates, when you opt in.
Detect abuse, debug failures, measure reliability, and improve the app experience.
Comply with legal, payment, security, and App Store requirements.

AI And Product Lookup

Ingredient text, product context, and optional product photos may be sent through our backend to OpenAI directly or to AI providers made available through OpenRouter. Which route is used can depend on availability and fallback behavior. Sus also uses product data sources such as Open Beauty Facts when a barcode or product search can resolve a formula. We use this to return structured cosmetic context, not to identify you personally.

Please do not scan labels, notes, receipts, or photos containing private personal information. Scan the product packaging only.

Service Providers

Sus uses Supabase for authentication, database, edge functions, storage, waitlist records, and security controls; OpenRouter and model providers available through it, plus OpenAI directly, for AI analysis; RevenueCat for purchase entitlement management; Apple for Sign in with Apple, App Store distribution, and in-app purchases; and Vercel for hosting the waitlist, support, and legal pages at getsusapp.com.

Your Choices

You can use guest mode where available, but some features may require account, purchase, or device-linked entitlement checks.
You can choose not to save a scan and remove saved items where the app offers deletion.
You can permanently delete your account and its data directly in the app: Settings > Delete account. This erases your account, saved scans, and Skin ID, and works for guest and Apple accounts alike. Subscriptions are managed by Apple and must be canceled separately.
You can unsubscribe from marketing emails and skip optional SMS alerts. SMS launch texts are only used when you explicitly opt in.
You can manage, cancel, or restore Apple subscriptions through your Apple ID and the App Store subscription settings.
You can also request deletion of waitlist records or other data by emailing hello@getsusapp.com.

Retention And Security

We keep information for as long as needed to provide Sus, honor your choices, maintain purchase records, debug reliability, prevent abuse, and meet legal obligations. We use reasonable technical and organizational safeguards, but no online service can guarantee perfect security.

Children

Sus is not directed to children under 13. If you believe a child has provided personal information, contact us and we will review the request.

Changes

We may update this Privacy Policy as Sus changes. The latest version will be posted at getsusapp.com/privacy.

Contact

Email hello@getsusapp.com for privacy, waitlist, subscription, scan, or deletion questions.