Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy applies to consumers in Nevada — anyone who is a Nevada resident or whose consumer health data is collected in Nevada — and supplements our Privacy Policy. It is provided under the Nevada Consumer Health Data Privacy Law (SB 370). Skin Intelligence is not available to Washington residents, and we restrict access from Washington IP addresses, so the Washington My Health My Data Act does not apply; if that ever changes we will update this policy first.

Skin Intelligence is a cosmetic skincare guidance app. It is not a medical device and does not diagnose, treat, cure, monitor, or prevent any skin disease or condition. Where these laws apply, your facial images and skin-appearance scores may be treated as "consumer health data," and this policy describes what Nevada law adds. How your facial images are processed, shared, retained, and deleted, and how we respond to a security incident involving them, is set out in our separate Biometric Data Policy.

Providing this notice does not make Skin Intelligence a health or medical service; it remains a cosmetic skincare app. We publish it because some state privacy laws may treat certain data we handle as "consumer health data," so you know how it is handled if they do.

We handle two categories of data that these laws may treat as consumer health data:

We use this data solely to generate the cosmetic skin-appearance results you request and to show you how your scores change over time. We do not use it for advertising or profiling.

Routine preferences you choose in the app — including any pregnancy- or nursing-related cosmetic filter (such as Maternity & Nursing) — are handled entirely on your device. They are not collected, shared, or sold as consumer health data and are never transmitted to Skin Intelligence servers. When you generate a routine, the only signal these preference selections produce that leaves your device is the resulting list of excluded ingredient identifiers: it does not name any preference or reason, is held in memory for that request only, and is never stored. We do not attempt to infer why an ingredient was excluded. Other data used to build your routine is described in our Privacy Policy (Section 3).

We collect this data directly from you: facial images are captured by you through the in-app camera, and the skin-appearance scores are derived from those images by our AI processing providers at the moment you request a scan.

To generate your scores, we share your facial images with the following AI processing providers, solely to perform the analysis you request:

Your photos are never stored, logged, or retained by Skin Intelligence, and our providers retain nothing once your results are generated. Our Biometric Data Policy sets out how the images are processed and what the providers return; the full retention terms, and the single exception where an automated child-safety system flags an image, are in our Privacy Policy.

Category of third parties with whom we share consumer health data: AI processing providers (OpenAI and Google), as named above.

Affiliates: we have no affiliates that receive your consumer health data.

We do not sell your consumer health data, and we do not share it for any purpose other than performing the cosmetic analysis you request, except for the automated child-safety reporting described in our Privacy Policy.

No third party collects your consumer health data over time and across different websites or online services when you use Skin Intelligence. We do not use advertising networks, cross-site trackers, or third-party analytics that identify you.

Your facial images and skin-appearance scores are stored on your device only, unless you enable optional cloud backup to your own personal iCloud (iOS) or Google Drive (Android). They are not stored on Skin Intelligence servers. You can delete individual scans or all scan data at any time from within the app.

We collect and share your consumer health data only with your consent. At sign-up, before your first scan, consent to capture and process your facial images and consent to share them with our AI providers are presented as separate, unbundled items that you must each select before you can continue. You may withdraw your consent at any time in the app (Profile → Privacy & Data); our Biometric Data Policy explains what withdrawal does and does not delete.

If you are a Nevada resident, or your consumer health data is collected in Nevada, you have the right to:

Review and correct: because your facial images and skin-appearance scores are stored on your device, you can review them in the app at any time, correct them (by re-scanning, or by editing your skin type and skin tone), or delete them yourself. For anything you cannot complete in the app, email privacy@skinintelligence.ai.

You can exercise these rights directly in the app, or by emailing privacy@skinintelligence.ai. We will respond within the time the law requires — currently 45 days for a request, extendable once by a further 45 days, with notice. As our own voluntary commitment, we aim to complete deletion requests within 30 days. If we deny your request, you may appeal by emailing privacy@skinintelligence.ai with the subject "Privacy Appeal." Within 45 days of receiving your appeal, we will tell you in writing what we decided and the reasons. If we deny your appeal, we will give you the contact information for the Office of the Nevada Attorney General so you can complain: Bureau of Consumer Protection — online at ag.nv.gov/Complaints/File_Complaint/, or by phone at (702) 486-3132.

If we make a material change to this policy or to how we handle your consumer health data, we will notify you in the app and, where required, ask you to re-accept before you continue using the scan feature.

Skin Intelligence Inc. 329 Howe St #2031, Vancouver, BC V6C 3N2, Canada Email: privacy@skinintelligence.ai