Privacy Policy

What Sus Does

Sus scans skincare packaging, barcodes, product names, and ingredient lists so it can generate cosmetic-ingredient context for your skin profile. Sus is not medical software and does not diagnose, treat, or prevent any disease.

Information We Process

• Account or guest identifiers, authentication state, and basic app settings.
• Skin profile details such as skin type, concerns, sensitivities, goals, and preferred language.
• Scan inputs such as ingredient text, barcode values, OCR text, product names, brands, product categories, and optional product photo frames.
• Saved scan history, shelf items, favorites, comparison choices, and analysis metadata when you choose to save or sync them.
• Purchase and entitlement status from Apple and RevenueCat, including whether a subscription or pass is active. We do not receive your full payment card details.
• Your waitlist contact details, such as name, email, optional phone number, country, skin goal, consent choices, signup source, and basic browser metadata.
• An app-generated installation identifier used to protect free-scan limits. Our backend transforms it with a server-held HMAC secret before storage; quota tables do not store the raw identifier.
• Optional product-usage events such as app opens, scan funnel steps, paywall views, purchases, and website page categories. In the app they are linked to your Sus account ID. These events never include ingredient text, barcodes, product or brand names, photos, Skin ID answers, form content, prices, receipts, or payment details. From Sus 1.0.8, native analytics is off until you enable it: the app asks once, and you can change your answer in Settings. Earlier versions sent these events without asking; updating the app lets you choose. Website analytics is off until you allow it.
• Device, app, error, rate-limit, and security logs needed to keep the service reliable and prevent abuse. Short-lived free-scan traffic counters use an HMAC-pseudonymized network scope rather than storing a raw network address in quota tables.

How We Use Information

• Run product lookup, OCR cleanup, ingredient analysis, profile-specific scoring, and scan history features.
• Personalize scan results to your profile bucket, language, sensitivities, and goals.
• Operate subscriptions, free scan limits, purchase restore, and entitlement checks.
• Send waitlist and launch updates, plus product updates, when you opt in.
• Detect abuse, debug failures, measure reliability, and improve the app experience.
• Comply with legal, payment, security, and App Store requirements.

AI And Product Lookup

Ingredient text, product context, and optional product photos may be sent through our backend to OpenAI directly or to AI providers made available through OpenRouter. Which route is used can depend on availability and fallback behavior. Sus also uses product data sources such as Open Beauty Facts when a barcode or product search can resolve a formula. We use this to return structured cosmetic context, not to identify you personally.

When product-match evaluation is enabled, Sus may also send TypeSafe a limited, text-only description of a scanned product and a possible match: the scanned and candidate product brands and names, plus the candidate product type and a source label such as Sus cache, product bank, or Open Beauty Facts. Typed searches are excluded from this evaluation. The request is designed not to include product images, raw OCR text, ingredient lists, barcodes, account or guest identifiers, Skin ID or skin-profile data, or scan history. Before sending, our backend uses an allowlist and heuristic content checks intended to reject text that resembles contact details, URLs, long numeric identifiers, or free text. Those checks reduce risk but cannot guarantee that a product identity field contains no personal information. The evaluation runs after Sus has made its product-match decision and does not change the result shown to you.

A separate ingredient-reading evaluation may be enabled to measure possible OCR spelling matches. It sends TypeSafe only a shortlisted ingredient token and nearby names from our ingredient reference bank, not the photograph, full captured text, product identity, Skin ID, account identifiers, or scan history. Content and reference-distance checks limit what can be sent, but cannot guarantee that captured text contains no personal information. This evaluation is observation-only: suggestions do not replace your captured ingredients or change your grade. Diagnostic logs contain reference candidates and judgment metadata, not the captured token or user identifiers.

Please do not scan labels, notes, receipts, or photos containing private personal information. Scan the product packaging only.

Service Providers

Sus uses Supabase for authentication, database, edge functions, storage, waitlist records, and security controls; OpenRouter and model providers available through it, plus OpenAI directly, for AI analysis; TypeSafe for limited product-match and ingredient-reading evaluations when the respective feature is enabled; RevenueCat for purchase entitlement management; PostHog EU Cloud for optional product analytics; Apple for Sign in with Apple, App Store distribution, and in-app purchases; and Vercel for hosting the waitlist, support, and legal pages at getsusapp.com.

Your Choices

• You can use guest mode where available, but some features may require account, purchase, or device-linked entitlement checks.
• You can choose not to save a scan and remove saved items where the app offers deletion.
• You can enable or disable product analytics in the app’s Settings. The events are linked to your Sus account ID. Turning it off stops new analytics events and clears the analytics identity stored on that device.
• Website analytics is off until you allow it. You can change that choice here: Allow website analytics Do not allow website analytics.
• You can permanently delete your account and its data directly in the app: Settings > Delete account. This erases your account, saved scans, and Skin ID, and works for guest and Apple accounts alike. Subscriptions are managed by Apple and must be canceled separately.
• You can unsubscribe from marketing emails and skip optional SMS alerts. SMS launch texts are only used when you explicitly opt in.
• You can manage, cancel, or restore Apple subscriptions through your Apple ID and the App Store subscription settings.
• You can also request deletion of waitlist records, previously collected analytics, or other data by emailing hello@getsusapp.com.

Retention And Security

We keep information for as long as needed to provide Sus, honor your choices, maintain purchase records, debug reliability, prevent abuse, and meet legal obligations. We use reasonable technical and organizational safeguards, but no online service can guarantee perfect security.

Children

Sus is not directed to children under 13. If you believe a child has provided personal information, contact us and we will review the request.

Changes

We may update this Privacy Policy as Sus changes. The latest version will be posted at getsusapp.com/privacy.

Contact

Email hello@getsusapp.com for privacy, waitlist, subscription, scan, or deletion questions.