Privacy Policy

NovaBeautix LLC (“NovaBeautix”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal information collected through our websites, mobile applications, business portals, digital services, and related systems.

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you access novabeautix.com, use the NovaBeautix consumer app (the personal skincare app for iPhone and Android, described in section 4A), use the NovaBeautix Scanner mobile application (a business app, described in section 4), or interact with other NovaBeautix services.

1. Who we are

NovaBeautix LLC is a Wyoming limited liability company and the operator of the NovaBeautix website, the NovaBeautix Scanner mobile application, and related business systems and services.

Our principal and mailing address is 1007 N Orange St., 4th Floor, Suite 5166, Wilmington, DE 19801, USA. Our website address is: https://novabeautix.com.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

• The NovaBeautix corporate website;
• The NovaBeautix consumer app for iPhone and Android;
• The NovaBeautix Scanner mobile application;
• NovaBeautix partner, warehouse, manufacturing, inventory, and administrative portals;
• Contact forms, support requests, account registration, and business communications;
• Other online services that reference this Privacy Policy.

3. Information we may collect

3.1 Information you provide

• Name, business email address, telephone number, company, role, and other contact information;
• Account registration and user profile information;
• Information submitted through contact forms, support requests, comments, or business communications;
• Inventory, production, warehouse, shipment, or product information entered into NovaBeautix systems;
• Authentication information required to access restricted business services.

3.2 Information collected automatically

• Internet Protocol address;
• Browser type, device type, operating system, and browser user-agent information;
• Date, time, and duration of visits;
• Pages, features, and services accessed;
• Login, security, diagnostic, and technical event information;
• Cookie and similar technology information, where applicable.

4. NovaBeautix Scanner mobile application

NovaBeautix Scanner is a secure business application intended for NovaBeautix employees, manufacturing partners, warehouses, authorized service providers, and other approved business users. Access requires an authorized NovaBeautix account.

4.1 Information processed by NovaBeautix Scanner

• User email address and account identifier;
• User role, organization, factory, warehouse, or business affiliation;
• Authentication tokens and session information;
• Barcode, QR code, serial number, product reference, and inventory scan results;
• Inventory, production, warehouse, quality-control, or product-validation records;
• Device and application information required for security, compatibility, troubleshooting, and reliable operation;
• Operational timestamps and audit information associated with authorized business activities.

4.2 Camera access

NovaBeautix Scanner requests permission to access the device camera solely to scan and interpret barcodes, QR codes, serial numbers, and other supported product identifiers. The camera is activated only when a user accesses a scanning feature. It is not intended to collect personal photographs or videos and is not used for advertising or behavioral profiling.

4.3 Data not intended to be collected

• Precise geographic location;
• Personal contacts or address books;
• Personal photos or videos stored on the device;
• Microphone or audio recordings;
• Health, biometric, financial, or payment information;
• Advertising identifiers for targeted advertising;
• Personal messages or call history.

4.4 Use of application information

• Authenticate authorized users;
• Validate products, serial numbers, barcodes, and QR codes;
• Support manufacturing, warehouse, inventory, and quality-control workflows;
• Synchronize authorized operational records with NovaBeautix backend systems;
• Maintain security, access control, traceability, and audit records;
• Investigate errors and improve application reliability;
• Comply with applicable legal, contractual, and business requirements.

4.5 Data transmission and security

Communications between NovaBeautix Scanner and NovaBeautix backend services are transmitted using HTTPS/TLS encryption. Authentication tokens and application information may be stored using security mechanisms provided by the device operating system and authorized technical infrastructure.

4A. NovaBeautix consumer app

The NovaBeautix consumer app is a personal skincare companion. It builds a skincare routine around your goals, environment and NovaBeautix devices, analyzes skin photos you choose to take, guides your rituals, and offers an AI assistant called Beautix. It is currently available to invited early-access users. It is a wellness and cosmetic-guidance tool: it does not diagnose, treat, or prevent any disease and does not replace advice from a physician or dermatologist.

4A.1 Information we collect through the app

Permissions on your device (camera, microphone and speech recognition, location, calendar, notifications) are requested only when you use the related feature. You can turn them off at any time in your device settings; the related feature will then stop working but the rest of the app will keep working.

4A.2 Skin photos, face images, and biometric information

To run a Skin Insight analysis, the app sends the photo you selected to our secure cloud storage and then to our analysis provider, Perfect Corp. (“Perfect Corp.”), which processes it to produce skin metrics. The analysis reads visible skin characteristics (such as texture, pores, hydration signals, redness, and dark circles). We do not use your face to identify or verify who you are, we do not create a face template for recognition, and we do not use your photos to train our own or third-party AI models. Before the photo is sent, your device checks the framing and quality of the photo and may use on-device face detection to check that a face is visible and centered; that check runs on your device and is not stored.

Because a photo of your face can be considered sensitive or biometric information in some places (for example under certain US state laws and under the GDPR), we ask for your consent before you use Skin Insight and we use the photo only for the purpose above. By default we do not keep your photo: your photo and the images derived from it (such as overlays and visual reports) are deleted from our systems as soon as the analysis finishes, and we keep only your scores and written insights. You can choose to save your photos so you can compare your progress over time (Profile → Privacy and permissions → Skin Insight photos); you can turn this off and delete the saved photos at any time, and you can also delete them by deleting your account (section 4A.6). You can withdraw consent by not using the feature.

Face data summary

• What face data we collect: only the photo of your face that you take or choose for a Skin Insight, and the skin metrics (scores and written insights) computed from it. On the server, a face-detection step returns the position of the face and a few reference points (for example forehead, cheeks, chin, nose) so results can be drawn on the photo; this is not a face template and is not used to identify you.
• Use: only to produce your Skin Insight and show your progress. We do not use face data to identify or verify you, for advertising, or to train AI models, and we do not sell it.
• Who receives it: our secure cloud storage (Google Cloud / Firebase, United States); Perfect Corp. (skin analysis, processing in Japan); and Google Cloud Vision (face position and reference points only, returned to us and not kept by us beyond the analysis). Face data is never sent to the Gemini generative-AI service or to any other third party.
• Retention: by default the photo and derived images are deleted from our systems when the analysis finishes. If you choose to save photos, they are kept until you turn the option off or delete your account, and are deleted automatically three (3) years after upload. Perfect Corp. generally retains submitted images for up to 30 days after each session under its terms.
• Deletion: turn off Profile → Privacy and permissions → Skin Insight photos (deletes saved photos), or delete your account (section 4A.6), or e-mail privacy@novabeautix.com.

4A.3 AI features and who processes your information

The app uses service providers that process information on our behalf and under contract. We do not sell your personal information and we do not share it for advertising.

• Google Cloud / Firebase (United States): hosting, authentication, database, file storage, push messaging, and server functions.
• Perfect Corp.: analysis of the skin photos you submit. Perfect Corp. acts as our service provider and processes the image to return results. Its cloud processing takes place on infrastructure in Japan, and under its terms it uses submitted images only to provide the service (not to improve its own products without our agreement) and generally retains them for a limited period (up to 30 days after each session) before deleting them.
• Google (Gemini API and Cloud Text-to-Speech): generative AI that writes explanations, translations, tips and assistant replies from the text and routine context we send, and converts Beautix replies to speech. We send the text you type and the routine context needed for the request (such as your goals, skin type, and relevant safety answers), but not your name, e-mail address, or photos. Please do not type information into the assistant that you do not want processed this way. Before the first use of any of these AI features, the app tells you what is sent and to whom and asks for your permission; if you decline, nothing is sent to Google for these features and the rest of the app keeps working. You can withdraw permission at any time in Profile → Privacy and permissions → AI features (Google Gemini). Google processes this data on our behalf under its API / Cloud terms, which provide data-protection commitments equivalent to ours, and we do not use it for advertising.
• Google Cloud Vision (face detection): when you submit a Skin Insight photo, the image is sent to Google Cloud Vision from our servers only to locate the face and a few reference points; see “Face data summary” in section 4A.2.
• SendGrid (Twilio): delivery of your e-mail verification code.
• Sentry: crash reports and error diagnostics, linked to your account identifier and not to your name or e-mail address. Like most diagnostic services, it may infer an approximate region from the network connection.
• Apple and Google: sign-in with Apple or Google if you choose it, and in-app purchases through the App Store or Google Play.
• Weather, air-quality, and geocoding services (for example Open-Meteo and OpenStreetMap): receive the approximate coordinates or city needed to return local conditions.
• Shopify: if you buy a NovaBeautix product or receive a creator or promotional benefit, order and discount-code information is processed through our Shopify store.
• NovaBeautix partner and creator programs: if you were invited through our Creator Hub or early-access program, we use your e-mail address to confirm your access.

We may also disclose information to authorities when required by law, to protect rights and safety, or in a corporate transaction, as described in section 11. AI-generated content may contain errors; please use judgment and consult a professional for medical concerns.

4A.4 How we use information from the app

• To create and secure your account, and to give access only to invited users during early access;
• To generate, adjust and explain your skincare routine, schedules, and reminders;
• To run Skin Insight analyses, track your progress, and recommend adjustments;
• To operate the Beautix assistant, voice commands, and AI-generated explanations;
• To manage devices, credits, purchases, rewards, and support requests;
• To keep the service secure, prevent fraud and abuse, diagnose errors, and improve reliability;
• To comply with legal obligations.

We do not use sensitive information, face images, or health-related answers for advertising or marketing, and we do not track you across other companies’ apps or websites.

4A.5 How long we keep information

• Account, profile, routine, and usage data: while your account is active, until you delete it.
• Skin photos and visual results: not kept by default (deleted when the analysis finishes). If you choose to save them, they are kept until you turn the option off or delete your account, and are deleted automatically three (3) years after they were uploaded.
• Skin Insight scores and insights (no images): until you delete your account, so you can see your history and progress.
• Providers: Perfect Corp. generally retains submitted images and results for up to 30 days after each session under its terms. Other providers keep data as described in their policies and our contracts.
• Beta feedback: anonymous, so it is kept even after you delete your account, because it cannot be linked to you. Please do not include personal information in it. The record that a reward was already given is a one-way hash of your e-mail address, kept only to prevent repeat claims.
• E-mail verification records and security logs: up to 90 days.
• Purchase and transfer records: kept as required by law and store rules, and anonymized when you delete your account.
• Backups: deleted data may remain in encrypted backups for a limited period before being overwritten.

4A.6 Your choices and deleting your account

You can delete your account and data directly in the app: Profile → Privacy and permissions → Request account and data deletion. You can also follow the instructions at novabeautix.com/delete-account or e-mail privacy@novabeautix.com. Deletion removes your account, profile, routine, history, skin photos and analysis results, device registrations, assistant conversations, and notifications. Purchase records and records involving another person (for example a device transfer) that we must keep are anonymized. You can also change or withdraw permissions in your device settings and turn off notifications in the app. Feedback you sent during the Beta is anonymous and not linked to your account, so it is not deleted with it.

4A.7 Children

The NovaBeautix consumer app is intended for adults and is not directed to children. You must be at least 18 years old to use it (or the age of majority where you live). We do not knowingly collect information from children, and we delete it if we learn that we have.

4A.8 Security

Information is encrypted in transit (HTTPS/TLS) and at rest by our cloud provider. Access to personal data is restricted by account-based rules, server-side checks, and role-based access for our team, and sensitive operations are logged. No system is completely secure, and we cannot guarantee absolute security.

4A.9 Additional information for residents of certain regions

• United States (including California, Colorado, Connecticut, Texas, Virginia, Washington, and other states): See also our Consumer Health Data Privacy Policy. depending on where you live, you may have the right to know, access, correct, delete, and obtain a copy of your personal information, to opt out of its sale, sharing for targeted advertising, or profiling, and to limit the use of sensitive information. We do not sell personal information and do not share it for cross-context behavioral advertising. We process sensitive information (such as face images and skincare-related health answers) only to provide the features you request, and only with your consent where required. We will not discriminate against you for exercising your rights. To exercise a right, use the in-app deletion option or write to privacy@novabeautix.com; we may need to verify your identity, and you may use an authorized agent.
• European Economic Area, United Kingdom, and Switzerland: NovaBeautix LLC is the controller of your personal data. We rely on contract (to provide the app), consent (for photos, sensitive answers, location, voice, calendar, and notifications; you can withdraw it at any time), and legitimate interests (security, fraud prevention, and service improvement). You have the right to access, rectify, erase, restrict, object, and port your data, to withdraw consent, and to lodge a complaint with your data-protection authority. Data is processed in the United States and, for skin-photo analysis, in Japan; where required we use appropriate safeguards such as standard contractual clauses.
• Brazil (LGPD): you have the rights provided by the Lei Geral de Proteção de Dados, including confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, and revocation of consent. Requests can be sent to privacy@novabeautix.com.

4B. Cosmetic purpose, no medical advice, and responsibilities

4B.1 What NovaBeautix is and is not

NovaBeautix is a cosmetic and personal-care guidance service. NovaBeautix does not provide any clinical or medical indication. The NovaBeautix app, website, devices, and other services are not medical devices and are not intended to diagnose, treat, cure, mitigate, or prevent any disease, infection, allergy, or skin condition, or to replace the advice of a physician, dermatologist, or other qualified professional.

All sessions, routines, rituals, device programs and settings, schedules, tips, ingredient suggestions, Skin Insight results and summaries, assistant (Beautix) answers, notifications, and any other recommendation generated by the NovaBeautix app or by any other NovaBeautix source are cosmetic in character: they relate to the appearance, comfort, and everyday care of healthy skin.

4B.2 Skin Insight and AI-generated content

Skin Insight is not a medical or dermatological skin assessment. It is a cosmetic, photo-based reading of visible characteristics that gives you insights to improve and better adapt your cosmetic routine. Its purpose is to let you follow how those characteristics change over time. It cannot detect or rule out skin diseases or other medical conditions. Results may be inaccurate: lighting, camera quality, makeup, freshly washed skin, the angle and distance of the photo, and other factors can influence them. We recommend taking your photo in soft natural light, with clean skin and no makeup or filters, with your face centered, and in similar conditions each time; the app shows these tips before your first Skin Insight. Only upload photos of yourself. If you notice a changing mole, a persistent or painful lesion, bleeding, or any other concerning change, contact a healthcare professional. Text, explanations, translations, and replies produced with artificial intelligence may contain errors or be incomplete; they are not professional advice.

4B.3 Active ingredients, devices, and their scientific basis

NovaBeautix does not sell, brand-endorse, or recommend specific active-ingredient products. Using its knowledge base, NovaBeautix indicates the type of active ingredient (the active principle) that the published scientific documentation associates with a cosmetic goal; choosing, buying, and using a product that contains it is your decision. The knowledge base is built from published sources, such as peer-reviewed cosmetic-science and dermatology literature, cosmetic ingredient safety assessments (for example those of the Cosmetic Ingredient Review), regulatory documents and monographs, technical standards, device clearances, and manufacturer instructions. We combine them with safety rules that restrict or exclude suggestions for situations you tell us about. The sources are listed publicly at novabeautix.com/science-sources. Scientific support does not guarantee a result: outcomes vary from person to person, and no outcome is promised.

NovaBeautix does not assume responsibility for misuse, whether of an active ingredient or product, or of a NovaBeautix device. Misuse means use contrary to the product’s or device’s instructions and manual, to the warnings and contraindications shown in the app, or to the advice of your healthcare professional.

4B.4 Your responsibility

• Do not accept or follow a recommendation if you are allergic or sensitive to an ingredient, material, or product, or if the recommendation may not be suitable for any other clinical situation. This includes, for example, pregnancy or breastfeeding, an implanted medical device such as a pacemaker, recent procedures (such as peels, lasers, or injections), a skin condition (such as rosacea, eczema, psoriasis, or active acne), sunburn, open wounds, and the use of medication that affects the skin (such as isotretinoin).
• If you are unsure, consult a physician or dermatologist before using any product, ingredient, or device suggested by NovaBeautix.
• Perform a patch test before using a new product, follow product and device instructions, and stop use and seek care if you notice irritation, pain, swelling, or any adverse reaction.
• Answer the app’s questions truthfully and keep your profile up to date, because the safety rules depend on the information you give us.
• Sun protection and the guidance of a healthcare professional remain your responsibility; recommendations in the app are not a substitute for either.
• Report any adverse reaction or safety concern to contact@novabeautix.com. In an emergency, contact your local emergency services.

4B.5 NovaBeautix’s responsibility

NovaBeautix is responsible for operating the service carefully. In particular, we commit to: applying built-in safety rules that restrict or block suggestions for the conditions you declare in the app (such as pregnancy, a pacemaker, isotretinoin use, or known allergies); using conservative defaults and device limits; explaining why something is suggested; providing a way to contact us about safety concerns and correcting errors we identify; and protecting your information as described in this policy.

Because suggestions depend on information you provide and on factors we cannot observe, we cannot guarantee that a suggestion is suitable for you. To the maximum extent permitted by applicable law, NovaBeautix is not responsible for outcomes that result from not following instructions, from ignoring contraindications or warnings, or from information that was inaccurate or omitted. Nothing in this policy excludes or limits any liability or consumer right that cannot be excluded or limited by law.

5. Comments

When visitors leave comments, we may collect the information entered in the form, the visitor’s IP address, and browser user-agent string to support spam detection and website security. An anonymized string created from an email address may be provided to Gravatar. After approval, a Gravatar profile image may be publicly visible with the comment.

6. Media

If you upload images to the website, avoid images containing embedded location data, including EXIF GPS information. Other visitors may be able to download and extract location information from publicly available images.

7. Cookies and similar technologies

Our website may use cookies and similar technologies for essential functionality, sessions, preferences, security, and understanding website use. Comment preference cookies may remain for up to one year. A temporary login-page cookie may test browser support and is generally discarded when the browser closes. Login and interface cookies vary by selected settings. A cookie identifying edited or published content may expire after one day.

8. Embedded content from other websites

Pages may contain videos, images, maps, articles, or social-media content. Embedded content behaves as if you visited the third-party website directly. Those parties may collect information and monitor interactions according to their own privacy policies.

9. How we use information

• Provide, maintain, and secure NovaBeautix products and services;
• Authenticate users and manage accounts;
• Respond to inquiries, support requests, and business communications;
• Process operational, inventory, manufacturing, warehouse, and product-validation activities;
• Prevent fraud, misuse, unauthorized access, and security incidents;
• Comply with legal, regulatory, accounting, and contractual obligations;
• Improve website, application, and service performance;
• Maintain internal records and business continuity.

10. Legal bases for processing

Where applicable, we process information based on contract or requested services, legitimate business interests, legal or regulatory obligations, and consent where required by law.

11. Who we share information with

NovaBeautix does not sell personal information. For the NovaBeautix consumer app, the providers we use are listed in section 4A.3. We may share information when reasonably necessary with authorized employees and contractors; manufacturing, warehouse, logistics, and service partners; cloud, security, authentication, communications, and technical providers; professional advisers, auditors, insurers, or legal representatives; authorities under valid legal process; or a successor entity in a corporate transaction subject to applicable protections. Password-reset processes may include technical information such as an IP address.

12. International data transfers

NovaBeautix operates internationally. Information may be processed or stored outside its country of collection. Where required, we apply appropriate contractual, technical, and organizational safeguards.

13. How long we retain information

We retain information only as reasonably necessary for the purposes described, legal and contractual requirements, disputes, security, and enforcement. Comments and metadata may be retained indefinitely. Account information may remain while active and for a reasonable period afterward. Operational and traceability records may be retained for business, contractual, product-lifecycle, or legal requirements.

14. Data security

NovaBeautix applies reasonable administrative, technical, and organizational measures, which may include access controls, authentication, encrypted communications, audit logs, secure infrastructure, and role-based restrictions. No electronic system is completely secure, and absolute security cannot be guaranteed.

15. Your privacy rights

Depending on location and law, you may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or submit a complaint to a data-protection authority. Rights may be limited where retention is required for legal, security, contractual, administrative, or operational purposes.

16. Account deletion and access requests

Consumer-app users can delete their account and data in the app or at novabeautix.com/delete-account (see section 4A.6). Authorized users of business services may request access, correction, deactivation, or deletion by contacting NovaBeautix below. Deletion may not immediately remove business records that must be retained for legal, audit, security, contractual, product-traceability, or operational purposes.

17. Children’s privacy

NovaBeautix Scanner and business services are intended for authorized professional and business users, and the NovaBeautix consumer app is intended for adults (18 or older). None of them is directed to children, and we do not knowingly collect children’s information.

18. Automated spam detection

Comments, form submissions, and other website interactions may be checked through automated spam-detection, security, or fraud-prevention services.

19. Third-party services

We may use third-party infrastructure for hosting, authentication, security, email, application distribution, monitoring, and operations. Providers process information only as necessary and are subject to contractual and privacy obligations.

20. Changes to this Privacy Policy

NovaBeautix may update this policy as services, technology, operations, or legal obligations change. The updated version will be posted here with a revised effective date. Continued use indicates acknowledgment where permitted by law.

21. Contact us

For questions, privacy requests, account deletion requests, or concerns:

NovaBeautix LLC
1007 N Orange St., 4th Floor, Suite 5166
Wilmington, DE 19801, USA
Website: https://novabeautix.com
Email: privacy@novabeautix.com