Privacy Policy
Last updated: June 5, 2026
This Privacy Policy explains what information CuCu (“we,” “us”) collects when you use the CuCu mobile app and website, how we use it, and the choices you have. We keep it as plain-spoken as the app itself.
1. Information we collect
- Account email — used for passwordless sign-in with a one-time code.
- Optional display name and profile photo — only if you choose to add them.
- Skin profile — your selected skin type, skin concerns, and ingredient preferences/filters.
- Scan history — the products you scan or look up in the app.
- Saved products and folders — the items you save to your beauty shelf and how you organize them.
- Technical and diagnostic data — such as device type, app version, and crash or error logs that help us keep CuCu reliable.
2. Camera and photos
CuCu uses your camera and photo library only to scan product barcodes, identify products, and read ingredient lists. Photos are processed for these purposes and are not used for anything else. You can use the app’s core features without granting photo library access — the camera is enough for scanning.
3. How we use your information
- Provide core app features — scanning, product lookup, and your beauty shelf.
- Analyze ingredients and generate safety scores.
- Personalize warnings based on your skin profile.
- Save your history and preferences across devices.
- Keep the app secure, prevent abuse, and improve reliability.
We do not sell your personal data, and we do not use it for third-party advertising.
4. Storage and sharing
Your data is processed and stored with a small number of service providers who help us run CuCu:
- Backend hosting — our backend provider (Supabase) stores account data, skin profiles, scan history, and saved products, protected with access controls.
- Processing providers — ingredient recognition and analysis are performed by processing providers on our behalf to identify products and read ingredient lists.
- Subscriptions — CuCu+ purchases are handled by Apple, Google, and our subscription platform (RevenueCat). We never see or store your payment card details.
These providers process data only to deliver their service to CuCu. We never sell or rent your personal information.
5. Data security
We use industry-standard safeguards, including encryption in transit, access controls, and row-level security on our database, to protect your information. No system is 100% secure, but we design CuCu so that the minimum necessary data is collected in the first place.
6. Data retention and deletion
We keep your data for as long as your account is active. When you delete your account — in the app or by email — your account and associated personal data (skin profile, scan history, saved products, folders) are permanently removed. See the Delete Account page for step-by-step instructions. Email deletion requests are processed within 30 days.
7. International users
CuCu is operated from North America, and your data may be processed in countries other than your own. Wherever it is processed, we apply the protections described in this policy.
8. Children’s privacy
CuCu is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
9. Your rights and choices
- Access and update — view and edit your skin profile and account details in the app at any time.
- Delete — delete your account in the app (Profile → Delete account) or by emailing us.
- Guest mode — you can use core scanning without creating an account at all.
- Depending on where you live, you may have additional rights (such as access, portability, correction, or objection). Email us to exercise them.
10. Changes to this policy
If we make meaningful changes, we’ll update the “Last updated” date above and, for significant changes, notify you in the app. Continued use of CuCu after changes means you accept the updated policy.
11. Contact
Questions about privacy? Email us at support@cucu-ai.com.