PRIVACY POLICY

Last Updated: February 2026

At Skin Roast ("we," "us," or "our"), we take your privacy extremely seriously. We are a brutal AI diagnostic tool, but we are highly protective of the data you feed into our systems.

1. Age Restrictions (18+)

Skin Roast is strictly for adults aged 18 and older. We do not knowingly collect, store, or process personal data from children under 18. If you are under 18, do not use this Service.

2. Data We Collect & How We Use It

• Facial Images (NEVER STORED): When you upload a photo for analysis, it is sent securely to our AI for a one-time diagnostic scan. We do not save, store, or log your photos in our database. Once the report is generated, the image is discarded from our server memory immediately. It is never used for marketing or model training without consent.
• Questionnaire Data (STORED): Your answers regarding your age, skincare routine, skin problems, and bad habits are stored securely in our database. We retain this text data to generate your customized report, understand our audience, and improve our services.
• Email Addresses (STORED): Your email is securely stored to deliver your PDF report, identify your transaction, and send you critical service updates or relevant skincare intel. No spam.

3. Third-Party Processing

To deliver our brutal diagnostics, we securely transmit necessary data to industry-leading infrastructure partners:

• OpenAI: Used for analyzing the uploaded image and generating the clinical roast text. Data sent to OpenAI through our API is not used to train OpenAI's generalized models.
• Supabase: Used for secure, encrypted database storage of your text-based reports and questionnaire data. No photos are sent to or stored in Supabase.

4. Data Storage and Administrator Access

Your text data is stored securely in encrypted databases. We practice data minimization and strict access control:

• Strict Administrator Access: The stored questionnaire data is only accessible to authorized internal administrators (the Skin Roast team) to ensure report delivery, provide customer support, and understand overarching audience trends to improve our service.
• Email Storage: Your email address is stored securely solely for the purpose of identifying your transaction so we can deliver your report.

If you wish to have your data permanently wiped from our secure servers, you may request deletion by contacting us.

5. We Do Not Sell Your Data

Under no circumstances do we sell your personal information, facial scans, or email addresses to data brokers, advertisers, or any third party. Your misery is analyzed solely for your own entertainment and improvement.

6. Security & Disclaimer of Guaranteed Security

We implement commercially reasonable technical and organizational measures to protect your data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure. However, no internet transmission or electronic storage system is 100% secure. You acknowledge and agree that we cannot guarantee the absolute security of your information. Any transmission of personal info is at your own risk. We are not responsible for circumvention of any privacy settings or security measures.

7. International Data Transfers

By using the Service, you acknowledge that your information (such as questionnaire data and emails) may be transferred to, stored, and processed in the United States or other countries where our third-party infrastructure partners maintain facilities. The data protection laws in these countries may differ from those in your jurisdiction of residence. By submitting your data, you explicitly consent to these transfers and processing.

8. Contact

For data deletion requests or privacy inquiries, contact us at roast.lab.owner@gmail.com.