Privacy Policy

Drop Skincare LLC (“Drop Skincare,” “Drop,” “we,” “us,” “our”) is a skincare guidance app that helps you understand the products you already own, build a routine, and decide whether to add more. We cite the studies behind every ingredient flag we surface.

This Privacy Policy explains what data we collect, what we do with it, and the choices you have. It applies to:

• The Drop Skincare mobile app (iOS and Android).
• The website at drop-skincare.com, including public sharing pages and the logged-out compatibility checker.

Contact us:

• Privacy questions: privacy@drop-skincare.com.
• General support: support@drop-skincare.com.
• Mailing address: Drop Skincare LLC, c/o Registered Agents Inc, 8735 Dunwoody Place, Ste R, Atlanta, GA 30350.

We are based in Georgia, United States (single-member LLC). We process data globally where our subprocessors operate (see Section 6).

We collect what we need for the app to work, and nothing more.

2.1 Required for app function

• Anonymous account first — you can use Drop before giving us any contact information. Onboarding runs on an anonymous account (a random user ID with no email or phone attached), and everything below — your shelf, skin profile, pregnancy or breastfeeding status — is stored under that anonymous ID until you choose to save your account. Saving links the same ID to a contact identifier; nothing is copied or re-shared. Anonymous data gets the same protection and retention as everything else in this policy.
• Account identifier — an email address or a phone number, whichever sign-in method you choose when you save your account. Email sign-in uses a one-time code or sign-in link. Phone sign-in (a one-time SMS code) is offered where SMS delivery is available; when you choose it, your number is stored by our auth subprocessor (Supabase) and delivered to its SMS partner solely for the one-time-code exchange — not used for marketing, not shared elsewhere. If we add Apple or Google sign-in later, your Apple or Google ID would serve the same role and nothing else in this policy changes.
• Handle — a public-facing username you pick at signup.
• Skin profile— skin type, top concerns, sensitivities, age range (banded — we don’t collect exact date of birth), and pregnancy or breastfeeding status. The pregnancy and age fields are used only to exclude ingredients that aren’t appropriate for those contexts — not for advertising or recommendations.
• Inventory — products you tell us you own or have used.
• Routines — the morning and evening routines we build with you and any edits you make.
• Empties and wishlist— products you’ve finished and products you’d like to try.
• Effectiveness logs — when you started using a product and any check-in entries.
• Compatibility check history — recent results of the compatibility checker (saved for rate-limiting and so you can revisit recent checks).
• Affiliate click events — when you tap a recommendation link to a retailer. We log that the click happened so we can track revenue. The link you open is the same static link every user sees — it carries no identifier, cookie or other data about you, and nothing about your profile reaches the retailer or the affiliate network.

2.2 Optional, only with your explicit consent

• Photos for skin tracking. By default, photos stay on your device.Cloud sync is an opt-in toggle; if you don’t enable it, we never receive your photos.
• Geolocation only if we ever add a weather-aware feature, and only if you turn it on — nothing collects location today. Coarse precision only, never your exact location.
• Push notification token, if you say yes to the iOS or Android notification prompt.
• Optional gender identity, defaulted to “prefer not to say.” If you choose to share this, it’s used only for aggregate analytics; it is never used to filter recommendations or personalize the routine engine.

2.3 What we never collect

• Your exact date of birth (we use age ranges).
• Your real name (handles only).
• Your home or shipping address.
• Government IDs.
• Browsing history outside our app.
• Voice or biometric data.
• Health data from Apple Health or Google Fit (not in V1; if added later, with explicit consent).
• Data from third-party advertising or tracking SDKs (we don’t install any).

2.4 Inventory and ingredient-list photos

Different from skin-tracking photos. When you photograph your shelf, a product, or a product’s ingredient list, the photo is transient:

• The photo is sent to our AI provider, Anthropic (listed in section 6), to read it. Location and camera details (EXIF metadata) are removed before it is sent. Anthropic handles it under its API terms, under which what we send is not used to train AI models.
• Drop reads what it needs from the photo, then discards it: the product names from a shelf or product photo, the ingredient names from an ingredient-list photo.
• We do not store the photo on our servers.
• From an ingredient-list photo, we keep the ingredient names we read and the text of the list as we read it. We use them to fill in or check that product’s ingredient list in Drop’s shared catalog. Your copy is kept with your account, is in your data export, and is deleted when you delete your account. The catalog’s ingredient list does not show other users who contributed it, and it stays after you delete your account.

Drop asks for your OK before it first sends a photo to Anthropic, and you can turn AI features off in the app under Me → Privacy.

• Account auth and core function — to give you a working app: routines, inventory, empties, wishlist, compatibility checks, effectiveness check-ins.
• Hard safety rules— pregnancy, breastfeeding, and age data filter the ingredients we recommend so you don’t see something contraindicated for your situation.
• Affiliate revenue — when you tap a recommendation link, we log the click so we know which recommendations earn revenue. We earn a commission when you buy through these links, at no extra cost to you. We never accept payment to recommend products.
• Product analytics(anonymized event counts, feature usage) — to understand which features people actually use, so we can improve the ones that matter and remove the ones that don’t. Processed by PostHog Cloud (EU region); the Data Processing Agreement is listed in section 6 and is signed before launch. Opt-out is available under Me → Privacy.
• Customer support — to answer your emails about your account.

We do not use your data for:

• Advertising of any kind.
• Targeted product recommendations based on demographic data.
• Selling, leasing, or sharing your data with anyone for their own marketing.
• Training AI models on your photos or content (without separate, explicit consent).

If you’re in the European Union, the European Economic Area, or the United Kingdom, GDPR and the UK GDPR apply. We rely on the following lawful bases:

• Contract (Art. 6(1)(b)) — processing necessary to provide the app: auth, inventory, routines, compatibility checks, etc.
• Consent (Art. 6(1)(a)) — photo cloud sync, push notifications, geolocation, marketing emails (if any).
• Legitimate interest (Art. 6(1)(f)) — pseudonymous product analytics (you can opt out), fraud prevention, and rate limiting on the public compatibility checker.

Special category data:skin condition information and pregnancy status may qualify as “health data” under GDPR Art. 9. Every one of these fields is optional — you can skip them and keep using the app, with fewer safety checks and less personalisation. Before any of them is sent to our AI subprocessor for routine generation, we ask separately: that consent is off by default, has to be switched on deliberately, is enforced on our servers rather than in the app, and can be withdrawn at any time in Me → Privacy. Withdrawing it stops the transmission; it does not delete what you have already saved, which you can export or erase separately.

Whatever country you’re in, you have these rights. EU/EEA, UK, and California users have formal legal rights backing them; we extend the same controls to everyone.

California (CCPA/CPRA):you have the rights above plus the right to opt out of “sale” or “sharing” of personal information. We don’t sell or share your data for cross-context behavioral advertising — the opt-out is honored by default. A “Do Not Sell or Share My Personal Information” link appears in the website footer.

We respond to verified rights requests within 45 days — usually much sooner.

We use a small set of subprocessors to run the service. We do not sell, lease, or share your data with anyone for their own marketing purposes.

International data transfers:Drop is offered in the United States only, so we don’t knowingly hold data about people in the EU, EEA or UK, and Standard Contractual Clauses aren’t our transfer mechanism. Where a subprocessor’s own terms include them we accept them, and our analytics processor is EU-resident regardless — both are prudence rather than reliance.

Our AI provider, in plain terms

Some features are built with an AI model run by Anthropic (our LLM provider, listed above). If you tapped “See how” in the app, this is the part you came for:

• Drop sends your data to Anthropic only when you use an AI feature, and only what that feature needs — your products and skin profile to build a routine, just the product name you typed for a lookup, the photo for a shelf scan or an ingredient list. Never in the background, and never sold.
• Under Anthropic’s API terms, what we send is never used to train AI models, and they keep it only for a limited period. Drop itself does not store the photos you take to add a product or read its ingredient list (see 2.4).
• Drop asks before your first AI send — one clear ask, at the moment you use an AI feature — and you can turn AI features off any time in the app under Me → Privacy. Without them, Drop falls back to its built-in rules.

• Active accounts — while your account is active and for as long as needed to provide the service.
• Deleted accounts — soft-deleted immediately when you click delete; fully purged from primary databases within 30 days. Encrypted backups follow a grandfather-father-son cycle — daily dumps are kept for 7 days, weekly copies for 4 weeks, and monthly copies for up to 12 months before being overwritten. Your data is gone from anything we query the day the purge runs; the backup tail is retention we cannot selectively edit without corrupting the restore chain, and it is overwritten on the cycle above.
• Anonymous compatibility checker history — 30 days, then deleted.
• Event analytics — 6 months, then deleted or aggregated to anonymous counts.
• Affiliate click history — retained as anonymized aggregates for revenue accounting.
• Correction notes — when a verdict you saw changes, we keep the note that explains the change for 90 days from the day Drop detects the change, then delete it, unless a legal hold applies.
• Legal hold — if you, someone acting for you, or a regulator makes a written complaint, claim or legal demand about a verdict Drop showed you or a correction to one (by email, by letter or in an app store review, for example), we keep your correction notes, and the record of the verdicts you saw for the same products, until the matter is closed, even past 90 days. We keep only those records, not your profile, and only to establish, exercise or defend legal claims (GDPR Art. 17(3)(e)). If you delete your account while a hold is open, the rest of your data is deleted as usual, and we keep only a reduced copy of those records: the products, the verdicts Drop showed, the ingredient rules behind them and the dates. It holds nothing about pregnancy, a condition, an allergy or your age, and your account is replaced in it by a one-way code. We delete it when the matter is closed. Telling us in the app that a verdict still looks wrong is feedback, not a complaint, and does not start a hold.

Drop is for users 13 and older; we do not knowingly collect data from anyone under 13, and the app is not directed at children. The app is rated 12+ in the App Store. Saving an account requires confirming you are 13 or older (stated on the sign-in screen, and required by our Terms of Service §2). Onboarding may ask for an age range; selecting the “Under 18” band enables age-appropriate ingredient filtering (no retinoids, etc.) without affecting your ability to use the app.

If you believe a child under 13 is using Drop, email privacy@drop-skincare.com and we will delete the account.

• Encryption in transit — TLS 1.3 for all network traffic.
• Encryption at rest — handled by our infrastructure provider (Supabase) for the database and object storage.
• Auth — one-time codes (or a sign-in link) via email or SMS, through Supabase Auth. We do not store passwords ourselves.
• Principle of least privilege — only the systems that need access to a piece of data have it. Row-level security in the database scopes per-user data to its owner.
• No credentials in the client app — secrets stay on the server.
• Subprocessor incidents— if any subprocessor reports a breach affecting your data, we’ll notify you per the timeline GDPR requires (without undue delay, and at most 72 hours for material breaches).

We don’t use advertising or behavioral tracking cookies, and the website itself loads no analytics or tracking scripts — no Google Analytics, no Facebook Pixel, no PostHog script, no ad-tech of any kind. Pages like the compatibility checker and public sharing links render and run without client-side tracking.

• Strictly-necessary cookies only — a session cookie that keeps you logged in if you have an account, and on the compatibility checker a short-lived cookie holding a random id so we can rate-limit abuse of that free tool (it identifies a browser session, not a person, and is never used for tracking). Because these are the only cookies we set and none are used for tracking, no cookie-consent banner is required.
• Product analytics live in the app, not in your browser — the pseudonymous, aggregate feature-usage analytics described in section 3 are collected server-side from the mobile app (processed by PostHog Cloud, EU region; DPA status is listed in section 6), with an opt-out under Me → Privacy. When you use a tool on this site (rating a routine, the compatibility checker, a share card), our server records an anonymous count of that use — no cookie, no identifier, no script in your browser. Nothing analytic runs in your browser when you visit this site.

If we change this policy in any material way, we’ll:

1. Update the “Last updated” date at the top.
2. Notify active users by email (via Resend) at least 14 days before the change takes effect.
3. Post a notice in the app’s “What’s new” surface.

For minor changes (typo fixes, link updates), we’ll just update the page.

• Privacy questions and rights requests: privacy@drop-skincare.com.
• Postal mail: Drop Skincare LLC, c/o Registered Agents Inc, 8735 Dunwoody Place, Ste R, Atlanta, GA 30350.
• EU/UK representative: not designated, because Drop is offered in the United States only. App Store and Play availability are restricted to US territories, and GDPR Art. 3(2) turns on whether a service targets the Union rather than whether it can be reached from it — Drop is English-only, USD-only, carries US retailers and markets on US channels. If we ever widen availability, we appoint a representative first.
• Your controls don’t depend on where you live: export, deletion, correction and withdrawal of consent are available to everyone, worldwide. We offer them because it’s the right way to handle someone’s data — not because a particular law compels us to.

We respond within 48 hours for general questions and within 45 days for formal rights requests.