Privacy & Disclaimers
Clarity over claims.
Important: not medical advice
Hey Beauty provides cosmetic and wellness guidance only. We do not diagnose, treat, cure or prevent any medical or dermatological condition.
- Our guidance is not a substitute for evaluation by a dermatologist, physician or qualified healthcare professional.
- Product recommendations are cosmetic-grade or wellness-oriented; they are not pharmaceuticals.
- Image-based observations describe visible appearance only — they are not clinical measurements.
- If you have a skin condition, allergy, are pregnant or breastfeeding, or take medication, consult a qualified professional before changing your routine or starting supplements.
- Stop use and seek advice if any product causes irritation or an adverse reaction.
Controller
The data controller is Hey Beauty Labs (see Imprint). Contact for privacy questions: privacy@heybeauty.life.
What we collect
Email, name, quiz answers (skin type, environment, sleep, stress, goals), order history, and — only if you opt in — facial photos for the optional Photo Analysis (Beta).
Uploaded photos
Photo upload is strictly opt-in. Before any image is captured or uploaded, you give explicit consent (Art. 6 (1) (a) GDPR). Photos are stored privately in your account, accessible only by you, used solely to compute your personal visual review, and never shared, sold or used to train third-party models. You can remove individual images or every image at any time from Account → Skin Journey.
Automated processing & recommendations
Your quiz answers — and, if provided, image observations — are processed by a transparent rules engine that matches your profile to formulas in our edit. Each recommendation carries a plain explanation of why it was suggested. This processing produces guidance only; it does not produce legal effects within the meaning of Art. 22 GDPR. You can at any time request human review of any recommendation by contacting privacy@heybeauty.life.
Analytics providers
Analytics is off by default and only enabled after you explicitly consent. We currently use:
- First-party event logging — anonymous page views, quiz completion and checkout funnel events stored on our own infrastructure (Lovable Cloud / Supabase, EU region).
- [Additional analytics provider, if added] — to be listed here with provider name, purpose, data processed and processing location before going live.
We do not use third-party advertising cookies and do not sell personal data.
Who can see your data
Only you. Your protocol, photos, orders and wishlist are scoped to your account by database-level access rules (Row-Level Security). Operational processors (payment, email delivery, hosting) act under data-processing agreements and only access what is necessary to deliver the service.
Retention periods
- Photos & image observations: up to 180 days, then automatically removed (earlier if you delete them yourself).
- Quiz answers & routine: kept while your account is active; removed on account deletion.
- Saved carts: 90 days of inactivity, then cleared.
- Pending (unpaid) orders: 30 days, then cleared.
- Paid orders & invoices: retained for the statutory accounting period (commonly 10 years in Germany under § 147 AO / § 257 HGB).
- Account & profile: kept until you delete your account.
Deletion requests & your rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw consent at any time (without affecting the lawfulness of prior processing). Self-service options:
- Delete individual photos or your full image history in Account → Skin Journey.
- Reset or retake your analysis from Account → Skin Journey.
- Delete your full account in Account → Delete my account — this removes photos, image observations, quiz answers, cart, wishlist and profile.
- Manage analytics consent under Account → Preferences.
For any other request — including data export — write to privacy@heybeauty.life. You also have the right to lodge a complaint with a supervisory authority.