Privacy Policy

This policy explains what personal data ShadeLoom collects, why, who it passes through, how long it's kept, how it's protected, and what rights you have over it.

What we collect

• Account information — your email address, a securely hashed password (we never store your actual password), your name, and a profile photo.
• Skin-tone scan photos and results — photos you take or upload to be scanned, and the shade match and AI-generated undertone assessment produced from them.
• Assistant chat messages — the questions you ask ShadeLoom's in-app assistant and its replies, so it can refer back to earlier parts of a conversation.

We don't collect anything beyond what's needed to run these features — no advertising trackers, no analytics profiling, no data sold to third parties.

Why we collect it

Every piece of data above exists to power a specific feature you use directly: your account information lets you sign in and identifies your data; your scan photos and results are what the shade-matching and AI features are built around; your chat messages let the assistant hold a real conversation instead of starting from nothing every time.

Who your data passes through

Running these features means some of your data passes through a small number of infrastructure providers that host, store, or process it on our behalf, under their own confidentiality and security obligations. This is not the same as sharing or selling your data to a third party for their own purposes — none of these providers use your data for anything except delivering the service back to us.

• Database hosting (MongoDB Atlas) — stores your account, scan, and chat data.
• Photo storage (Cloudinary) — hosts your profile photo and scan photos.
• AI processing (Groq) — processes scan photos and chat messages to generate undertone assessments, shade suggestions, and assistant replies.
• Email delivery — sends account-related emails (sign-up confirmation, password reset, deletion-request notifications) on our behalf.
• Application hosting (Vercel) — runs the servers this app runs on.

How long we keep it

We keep your data for as long as your account is active. You can request deletion of your account and all associated data at any time — from within the app, or from this page without needing to open the app. A request is reviewed and, once approved, your data is permanently deleted within 30 days.

Security

Passwords are hashed, never stored in plain text. Sign-in uses short-lived access tokens with a separate, revocable refresh token, so a single leaked token doesn't give indefinite access. Data in transit is encrypted (HTTPS).

Your rights

• Access — you can view your account information at any time in the app.
• Correction — you can update your name and profile photo directly in the app.
• Deletion — request permanent deletion of your account and all associated data via the app or this page.

If you have a question about your data that isn't covered by the options above, contact us at the email below.

Children's privacy

ShadeLoom does not restrict who can create an account, but the app is not directed at children and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at the email below and we will delete it.

Changes to this policy

If this policy changes in a way that affects how your data is handled, we'll update the date at the top of this page.

Contact

Questions about this policy or your data: aqsahamzadev@gmail.com