Privacy Policy

Last updated: October 8, 2026

1. Who we are

Hazel ("we," "us," "our") is operated by theeditorcompany, LLC. We can be reached at hello@hazelskin.co.

2. What this policy covers

This Privacy Policy describes how we collect, use, store, and disclose information when you use the Hazel mobile application (the "App") and the hazelskin.co website.

3. Information we collect

We aim to collect the minimum information needed to operate the App. Most of what you enter into the App stays on your device.

Local app data:

• Your first name, if you enter one during onboarding
• Your stated skin concerns (e.g., "hormonal breakouts," "sensitive skin")
• Your scan history and saved products
• Your notification preferences
• Your free-tier scan count and first-scan allowance (also stored in iCloud Keychain when available)

Information transmitted when you scan a product:

• The product barcode is sent to our product database (Supabase) to look up the matching product
• When you scan an ingredient label with the camera, text is recognized on your deviceusing Apple's Vision framework — the image itself never leaves your device

Information transmitted when you contribute a product:

• The barcode, recognized ingredient text, and (optional) product name, brand, and category you provide
• Contributions may be submitted anonymously (we do not require an account)

Information transmitted when you subscribe:

• Subscription state, anonymous user identifier, receipt data, and basic device information are handled by RevenueCat and Apple for purchase processing

Pseudonymous in-app analytics:

• We use PostHog to understand app usage, measure onboarding and subscription conversion, diagnose failed lookups, and improve product coverage. Events include a persistent random identifier, event name, timestamp, subscription tier, app and device metadata, and event details such as product identifiers, ingredient identifiers, search outcomes and result counts, result availability, and interactions with scans, saved products, onboarding, and subscription screens. Onboarding events can include whether a name was provided and the number of concerns selected; the current app does not send your entered name or selected skin type in those events. Search analytics do not include the text you type. Diagnostic events include lookup duration, failure outcomes, and error codes. PostHog derives approximate location (such as country, region, or city) from your IP address; we do not collect precise GPS location. The identifier is stored in iCloud Keychain where available and may persist across reinstalls or sync across your devices. These events are linked to your persistent identifier. This is pseudonymous data, not a promise of complete anonymity. We do not use it for advertising profiles or tracking across unrelated apps and websites.

Information we do NOT collect:

• Photos or images from your camera or photo library
• Precise location, your contacts, or your Apple payment card details
• Contacts, microphone audio, health records, or browsing history
• Advertising identifiers (IDFA), cross-app tracking SDKs, or any data used to profile you for ads
• "Session replay" video, screen recordings, or keystrokes

If you contact support, we receive your email address and the information you choose to send. Please avoid sending unnecessary sensitive information. Website and API hosting providers also process connection information, such as IP addresses and request logs, to deliver and secure the service.

4. How we use information

We use information to:

• Look up scanned products and return their ingredient scores
• Improve our product database when you contribute a scan
• Process subscription purchases and restore prior purchases
• Measure usage and conversion, troubleshoot issues, and improve the App
• Respond to support requests and comply with legal obligations

We do not sell or share your personal information to third parties for advertising. The App uses the PostHog analytics SDK as described above.

5. Camera and photos

The App uses your device camera to scan barcodes and ingredient lists. Images are not transmitted to our servers or to any third party. Barcode decoding and ingredient-text recognition (OCR) both run locally on your device using Apple's AVFoundation and Vision frameworks. Only the resulting barcode digits or recognized text (if you choose to contribute) are sent to our database. The App does not access your photo library.

5a. Notifications

Notifications shown by the App (scan reminders and subscription reminders) are scheduled and delivered locally on your devicevia Apple's UserNotifications framework. No push notification servers are involved, and no notification content is transmitted off-device. You can disable notifications at any time in the App's Settings or in iOS Settings.

6. Acne Trigger Score — important disclaimer

The Acne Trigger Score is informational only and is not medical advice. Scores reflect publicly available research on ingredients commonly associated with acne, weighted by our scoring methodology. Individual reactions to ingredients vary. We are not a medical provider and the App is not a substitute for diagnosis or treatment by a licensed dermatologist.

7. Service providers (sub-processors)

We rely on a small set of service providers to operate the App. The data each receives is limited to what they need for their function:

• Supabase, Inc. — hosts our product and ingredient database and stores anonymous user contributions. Receives: scanned barcodes (for lookup), and contributed scan data (barcode, recognized ingredient text, optional product/brand/category).
• RevenueCat, Inc. — processes subscription state, receipt validation, and entitlement checks. Receives: an anonymous user identifier, Apple receipt data, and basic device metadata as required for purchase verification.
• PostHog Inc. — processes the pseudonymous identifiers, usage events, event properties, and device/app metadata described in section 3. Network requests also expose connection information to service providers. We do not enable session replay or use advertising identifiers for these analytics.
• Apple Inc. — processes all App Store payments, handles subscription billing, and (when iCloud Keychain is enabled by you) syncs your in-app scan quota and anonymous device identifier across your devices.

We do not share information with brand owners, advertisers, or data brokers. We may also disclose information when required by law, legal process, or to prevent harm, or in connection with a corporate transaction (merger, acquisition), in which case successor entities will be bound by this policy.

Product lookups may also use Open Beauty Facts and Open Food Facts. Those services receive the lookup request, such as a barcode, and connection information.

8. Data retention

Most of your data — your name, scan history, saved products, and preferences — is stored only on your device in local storage (SwiftData and UserDefaults). Deleting the App removes its local app storage, but does not necessarily remove Keychain records, backups, or information already sent to service providers.

Anonymous product contributions you submit are retained indefinitely as part of our community-maintained product database (with personally identifying information removed). Subscription records are retained by Apple and RevenueCat according to their own policies for accounting and audit purposes.

Analytics and support records are retained while needed for the purposes described here, subject to our service-provider retention settings and legal requirements. Contact us about access or deletion of those records. Deleting the App does not itself delete previously collected analytics.

9. Your rights

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Object to or restrict processing
• Data portability
• Withdraw consent

To exercise these rights, contact hello@hazelskin.co. Note that because most of your data is stored only on your device, the fastest way to exercise deletion rights is to delete the App, which removes local app storage but may leave Keychain data and backups. For data held by us or our providers (including analytics, contributions, support correspondence, and subscription records), email us and we will respond within 30 days.

If you are located in the EU/UK, our legal bases for processing are: (a) performance of a contract, (b) legitimate interests in operating and improving the App, and (c) consent where applicable.

If you are located in California, you have rights under the CCPA/CPRA, including the right to know, delete, and opt out of "sale" of personal information (we do not sell).

10. Children

The App is not directed at children under 13. We do not knowingly collect data from children under 13. If we learn we have, we will delete it.

11. Security

We use industry-standard safeguards (encryption in transit, access controls). No system is fully secure; we cannot guarantee absolute security.

12. International transfers

Information may be processed in countries other than your own, including the United States. Where required, we put in place appropriate safeguards (e.g., Standard Contractual Clauses).

13. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated through the App or this website, and we will request consent where required.

14. Contact

Questions? hello@hazelskin.co