Privacy Policy

Last updated: March 30, 2026

Lua ("we", "us", "our") is a skincare routine tracker app. Your privacy matters to us. This policy explains what data we collect, how we use it, and your rights.

What Data We Collect

  • Skin photos: Photos you take for skin analysis. These are processed locally on your device and sent to our AI provider for analysis. Photos are not stored on any server after processing.
  • Skin profile data: Your skin type, concerns, goals, age range, and analysis scores. Stored locally on your device.
  • Routine data: Products and routines you set up. Stored locally on your device.
  • Skin diary photos: Progress photos you take are stored locally on your device only.

Data Storage

All personal data is stored locally on your device using SQLite. We do not operate user accounts, do not collect email addresses, and do not maintain a central database of user information.

Third-Party Services

  • Anthropic: We use Anthropic's AI to analyze skin photos. Photos are sent securely for processing and are not retained by Anthropic after analysis is complete.
  • RevenueCat: We use RevenueCat to manage subscriptions. RevenueCat processes purchase data through Apple's App Store.
  • SerpApi: We use SerpApi to fetch product images when you search for skincare products. Only product search queries are sent; no personal data is shared.

What We Do Not Collect

  • We do not collect email addresses or require user accounts.
  • We do not track your location.
  • We do not sell or share personal data with advertisers.
  • We do not use analytics or tracking SDKs.

Your Rights (GDPR / CCPA)

Because your data is stored locally on your device, you have full control over it at all times. You can:

  • Access your data: All your data is visible within the app.
  • Delete your data: Uninstalling the app removes all locally stored data. You can also clear data from the app's settings.
  • Opt out: You can choose not to take photos or use AI analysis features.

If you are a resident of the EU/EEA or California, you have additional rights under GDPR or CCPA respectively. Since we do not maintain server-side personal data, most data subject requests are fulfilled by the local-only nature of our storage.

Children's Privacy

Lua is not intended for children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the app and on this page with an updated date.

Contact Us

If you have questions about this privacy policy, contact us at support@trylua.app.