Legal
Privacy Policy
Last updated: April 17, 2026
1. Introduction
EnvyAI ("we," "our," or "us") operates the EnvyAI mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App. By using EnvyAI you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Information you provide directly:
- Name and email address when creating an account
- Skin profile preferences including skin type, goals, concerns, allergies, and budget
- Photos you submit for skin analysis and shade matching
- Messages sent through the AI Skin Consultant chat feature
- Support inquiries sent to our support email
Information collected automatically:
- App usage data including features accessed, screens viewed, and interactions
- Device information and crash reports for app improvement
- Approximate location (city/region level) if you grant permission, used only for climate-based skincare recommendations
- Subscription and purchase status through RevenueCat
3. How We Use Your Information
We use the information we collect to:
- Provide AI-powered skin analysis, shade matching, and personalized skincare recommendations
- Process your photos through Anthropic's Claude AI API for analysis purposes
- Manage your account and subscription
- Send scan results, routine recommendations, and product suggestions
- Improve the App's performance and fix technical issues
- Respond to your support requests
- Comply with legal obligations
4. Third-Party Services
EnvyAI uses the following third-party services that may collect and process your data:
Firebase (Google LLC) — We use Firebase for user authentication, database storage, cloud functions, analytics, and crash reporting. Your data is stored on Firebase servers. Firebase Privacy Policy: https://firebase.google.com/support/privacy
Anthropic — Photos you submit for skin analysis and shade matching are transmitted to Anthropic's Claude AI API for processing. Photos are used only to generate your analysis and are not stored by Anthropic beyond what is necessary to complete the request. Anthropic Privacy Policy: https://www.anthropic.com/privacy
RevenueCat — We use RevenueCat to manage in-app subscriptions and purchases. RevenueCat processes your purchase history and subscription status. RevenueCat Privacy Policy: https://www.revenuecat.com/privacy
Apple — Purchases are processed entirely by Apple. We never have access to your payment card information or financial details. Apple Privacy Policy: https://www.apple.com/legal/privacy
5. Photos and Skin Data
Photos you submit for analysis are:
- Transmitted securely to Anthropic's Claude AI API for processing
- Stored in Firebase Storage associated with your account so you can view past scans
- Never sold to third parties
- Never used for advertising purposes
- Never used to train AI models without your explicit consent
You may delete your account at any time, which permanently removes all stored photos and scan data from our servers.
6. Data Retention
We retain your data for as long as your account is active. When you delete your account all personal data including photos, scan history, shade profiles, and account information is permanently deleted from our servers within 30 days.
7. Data Security
We implement industry-standard security measures to protect your information including encrypted data transmission (HTTPS/TLS), Firebase security rules restricting data access to authenticated users only, and secure API key management. However no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.
8. Children's Privacy
EnvyAI is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information please contact us at Email Support and we will delete such information.
9. Your Rights
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate personal information
- Request deletion of your personal information by deleting your account in the app
- Opt out of analytics collection by contacting us
10. California Privacy Rights (CCPA)
If you are a California resident you have additional rights under the California Consumer Privacy Act including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell your personal information. To exercise your rights contact us at Email Support.
11. International Users
EnvyAI is operated from the United States. If you are located outside the United States your information may be transferred to and processed in the United States where data protection laws may differ from those in your country. By using the App you consent to this transfer.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy. Continued use of the App after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy please contact us at:
Email: Email Support
Website: https://envyai.app/support