Privacy Policy
Last updated: October 18, 2026
Who We Are
This privacy policy applies to the MamaSkin website and mobile app (the "Service"), operated by Simone Parenti, trading as MamaSkin (the "Service Provider").
The Service helps users review cosmetic ingredients and product safety information during pregnancy and breastfeeding. It is informational only and not medical advice.
Personal Data We Process
- Account data: email address, authentication identifiers, sign-in provider metadata.
- Usage and technical data: IP address, app version, device type, operating system, in-app events, diagnostics, and crash data.
- Subscription and purchase data: entitlement and transaction status from app store billing processors (we do not receive your full payment card details).
- Support data: messages you submit, optional contact email, optional product identifiers, and support metadata.
- Pregnancy context and private check-in data: an optional due date, derived pregnancy week and trimester, daily feeling and energy, selected skin, body, wellbeing and symptom tags, timezone, and any optional private note.
- Website ingredient checker data: the ingredient text you submit and limited information used to prevent automated abuse.
- AI-related data: details are set out below under "AI Processing".
We do not collect precise GPS location data.
Pregnancy Context and Private Check-Ins
If you choose to use MamaSkin's pregnancy context and daily check-in features with a linked account, we collect the due date you provide and use it to calculate your current pregnancy week and trimester. We also collect your daily feeling, energy, selected skin, body, wellbeing and symptom tags, and any optional private note you enter. We use this information to save your private check-in history, show pregnancy-aware skincare context, and personalise your current skincare experience. General wellbeing tags are kept as journal context and are not used to diagnose a condition or choose product safety ratings.
This information is stored with our database service provider, Supabase, and is associated with your MamaSkin account so that it can be available across your devices. It is not used for advertising, sold, or sent as raw content to our product-analytics service. Access is restricted to your account. When you delete your MamaSkin account through the app, the associated pregnancy context and check-in records are deleted with it, subject to any retention required by law. Guest users cannot create a synced check-in history in this version.
MamaSkin is a skincare information and personal journaling companion, not a medical device or medical-monitoring service. It does not diagnose, treat, cure, or prevent medical conditions. Speak with a qualified healthcare professional for medical advice, diagnosis or treatment.
Cookieless Website Analytics
We use our Supabase backend to keep daily totals of page views, app-store button clicks and ingredient-checker activity. These counters contain only an event category, a broad page type, a button location and the destination store. They do not contain ingredient text, product names, full URLs, IP addresses or visitor identifiers. We do not use analytics cookies, browser storage or fingerprinting to recognise or follow visitors.
Separately, we keep daily totals for individual ingredient names and filtered unmatched ingredient-like names from successful website checks to understand demand and improve ingredient coverage. These name totals contain only the UTC date, whether a name matched our catalogue, a normalized name and a count. They do not retain the full pasted list, which names were submitted together, or any link to a visitor, account or request.
Website analytics respect Do Not Track and Global Privacy Control signals. The totals measure actions rather than unique people and cannot link a particular visitor’s checks to an app installation. Store links use fixed campaign parameters to help Apple and Google report aggregate website referrals.
Hosting and security providers may separately process limited technical request information to deliver the website and prevent abuse, including through Cloudflare Turnstile. Mobile-app analytics are described separately in this policy.
How We Use Personal Data and Lawful Bases
| Purpose | Typical Data | Lawful Basis (UK GDPR) |
|---|---|---|
| Provide core app features (accounts, product lookup, favourites, scans, safety results) | Account, usage, scan inputs, technical data | Contract (Art. 6(1)(b)) |
| Provide optional AI Helper chat feature | Prompt text, ingredient/product context, AI response metadata | Consent (Art. 6(1)(a)) and Contract (Art. 6(1)(b)) |
| Provide AI-assisted scan identification and related scan outputs | Scan image data, OCR text, product context, technical metadata | Contract (Art. 6(1)(b)) and Legitimate interests (Art. 6(1)(f)) |
| Provide the website ingredient checker and prevent automated abuse | Submitted ingredient text and limited anti-abuse request information | Contract (Art. 6(1)(b)) and Legitimate interests (Art. 6(1)(f)) |
| Analytics, reliability monitoring, product improvement | Usage events, device/app data, crash diagnostics | Legitimate interests (Art. 6(1)(f)) |
| Billing, entitlement checks, accounting and compliance | Subscription status, store transaction identifiers | Contract (Art. 6(1)(b)) and Legal obligation (Art. 6(1)(c)) |
| Support handling, abuse prevention, legal claims management | Support messages, account identifiers, technical logs | Contract (Art. 6(1)(b)), Legitimate interests (Art. 6(1)(f)), and where applicable Legal obligation (Art. 6(1)(c)) |
Website Ingredient Checker
When you use the public ingredient checker, the text you paste is sent to a MamaSkin server-side function so it can be matched against our maintained ingredient rules and evidence records.
Your full submitted list is processed to return your result and is not retained or added to MamaSkin's product catalogue. After a successful check, individual catalogue ingredient names and conservatively filtered unmatched ingredient-like names may contribute to separate anonymous daily totals. Repeated names count at most once per check. We filter out obvious contact details and general messages before counting unmatched names; please submit ingredient lists only and leave out personal details. This collection respects Do Not Track, Global Privacy Control and the website analytics preference sent by the checker.
We use Cloudflare Turnstile to reduce automated abuse. Limited technical security logs are separate from the anonymous name totals. The name totals contain no IP address, user or visitor identifier, request identifier, or individual submission history.
AI Processing
AI Helper (Mia) - optional feature
- AI Helper can be enabled or disabled in Account -> Privacy & Legal -> AI data sharing.
- When enabled and used, we send your AI prompt text plus relevant ingredient/product context to our AI processor to generate a response.
AI-assisted scan processing - part of scan functionality
- When you use scan features that require AI identification, we may send scan image data, extracted scan text (OCR text), and limited technical metadata to deliver scan results.
- This scan-related AI processing is separate from the optional AI Helper chat toggle.
AI processor
Google Gemini (Google Privacy Policy).
AI retention
We do not intentionally store full AI Helper prompts and responses in our application database as part of normal feature use. Operational logs may include limited request metadata (for example timing, status, and error diagnostics). Processing by Google Gemini is subject to Google's own terms and privacy policies.
Product Ratings and Reviews
If you choose to submit a product rating or written review, we process your rating, review text, the product reviewed, timestamps, and an internal account identifier linked to your account or guest session.
To display reviews publicly without showing your real name, we generate a display name and avatar key for your public review profile.
Written reviews may be reviewed for moderation before publication. We may also receive and process user reports about reviews that may be spam, offensive, misleading, or otherwise violate our review guidelines.
To help protect the Service from spam and abuse, we may process limited anti-abuse signals such as hashed IP information, hashed review text, write-rate events, report events, and moderation status.
We use this information to provide the review feature, enforce our review guidelines, investigate abuse, moderate reported content, and protect the safety and integrity of the Service. Publicly visible review information is limited to your generated display name, avatar, rating, review text, and review date.
Third-Party Processors and Recipients
We use trusted third parties to operate the Service, including hosting, authentication, analytics, crash monitoring, subscriptions, and AI features.
- Supabase (backend, auth, storage)
- Cloudflare (Turnstile abuse prevention for the website ingredient checker)
- Expo (app platform services)
- Sentry (error and crash monitoring)
- Amplitude (product analytics)
- RevenueCat (subscription management)
- Google Gemini (AI processing)
- Apple App Store and Google Play (billing and transaction records)
International Transfers
Some of our processors operate internationally, including outside the UK. Where required, we use recognised transfer safeguards such as adequacy regulations and contractual transfer mechanisms (for example UK IDTA or the UK Addendum to SCCs), plus appropriate supplementary security measures.
You can request further information about relevant transfer safeguards by contacting us at [email protected].
Retention
- Account data: retained while your account is active, then deleted or anonymised within a reasonable period unless needed for legal, security, or dispute handling.
- Support records: retained while handling your request and for a limited follow-up period to manage support quality and legal risk.
- Ingredient checker inputs: processed for the duration of the request and not retained in the product catalogue. Limited anti-abuse information is kept for a short period.
- Analytics and crash data: retained according to configured retention settings in our analytics and monitoring providers.
- Billing records: retained as required by app stores and applicable tax/accounting laws.
- AI consent status: stored locally on your device until changed, app data is cleared, or the app is removed.
Your Rights
Under UK GDPR, you may have rights to:
- access your personal data;
- correct inaccurate data;
- request erasure in certain cases;
- restrict or object to certain processing, including processing based on legitimate interests;
- data portability where applicable;
- withdraw consent at any time where processing relies on consent (this does not affect prior lawful processing).
To exercise your rights, contact [email protected]. We may need to verify your identity before completing a request.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact [email protected] and we will investigate and take appropriate action.
Security
We use technical and organisational safeguards designed to protect personal data, including access controls, provider security measures, and operational monitoring. No system is perfectly secure, but we work to reduce risk and respond to incidents appropriately.
Automated Decision-Making
We do not use solely automated decision-making that produces legal effects or similarly significant effects about you.
Changes to This Policy
We may update this policy from time to time. The latest version will always be posted on this page with the updated date.
Contact
Email: [email protected]
Service Provider: Simone Parenti (sole trader, trading as MamaSkin)
MamaSkin in ChatGPT and Codex
ChatGPT integration section added: 17 October 2026.
When you use MamaSkin through ChatGPT or Codex, the OpenAI product sends the cosmetic product name or ingredient text needed for the check, a pregnancy, breastfeeding or combined information display choice, and temporary references needed to return or reuse the result. Choosing an information display does not require you to disclose your personal health status. Send only cosmetic product names and ingredient lists, not medical history, symptoms, due dates, identification documents, payment details or credentials.
This integration does not connect to your MamaSkin account or access favourites, routines, private health profiles, support requests or other customer records. We match requests against MamaSkin catalogue records. Submitted ingredient lists are not added to the catalogue, and the conversation is not saved in MamaSkin customer tables. MamaSkin provides recorded cosmetic ingredient information rather than a personalised clinical assessment.
Cloudflare hosts the tools and embedded interface. Supabase supplies catalogue information through a restricted read-only gateway. OpenAI provides the conversation and processes its records under the terms, privacy settings and data controls of the product you use. These are separate from the AI-sharing controls in the MamaSkin mobile app.
Temporary selections and results are available for up to five minutes and may become unavailable sooner after a restart. The service releases its saved-result reference at expiry. OpenAI conversations and rendered results follow OpenAI's own retention and data controls. Anyone given the complete temporary result references could access the saved catalogue result during that short period; the references grant no MamaSkin account access.
To enforce capacity limits and diagnose failed checks, MamaSkin retains operational events containing a timestamp, event kind, numerical sequence and numerical operation or request reference when needed. These events contain no product names, ingredient text, IP addresses, account identifiers or temporary flow/result references. They are retained for the operating lifetime of the admission ledger, without automatic deletion. The service stops admitting new requests at 500,000 retained events; operations admitted earlier may still add a completion event.
The Worker does not deliberately log request bodies or account metadata, and its application logs and traces are disabled. Providers may separately process network, service and security information under their service and privacy terms. Supabase normally makes service logs available to us for seven days under our existing Pro plan; this is an operator-access window, not a guarantee that all provider records are erased after seven days. The integration does not configure a separate log-export destination. Provider information is available at https://www.cloudflare.com/privacypolicy/ and https://supabase.com/privacy.
Disconnecting MamaSkin stops future use of the integration; it does not erase conversation records held by OpenAI. Use OpenAI's data controls for those records. Our existing sections on international transfers, applicable rights and contact details also apply. Contact https://www.mamaskin.app/support for questions about MamaSkin's processing. Do not send medical history, credentials or a full chat transcript with a support request.
This privacy policy is effective as of 2026-08-18