Privacy Policy

We collect the least data we can. Your File — the skin profile you build here — lives on your device by default and only leaves it if you choose to sign in. We don't sell your data, and we never share your personal File with brands or retailers.

Nothing, until you act. You can browse cards without an account. We don't store anything about you on our servers just for looking around.

Your File — on your device. The signals you tap to build your File (skin type, concerns, and sensitivities such as allergies) are saved in your own browser. Some of this is health-related; see Your File below.

If you create an account. We store your email address and an encrypted password (we never see it), and a synced copy of your File so it's available on your other devices.

Automatically. Basic analytics (page views and session data via Vercel Analytics) and standard server logs.

• No payment information — no purchases happen here
• No advertising profiles
• No tracking you across other websites
• No account required — you can use your whole File without ever signing in

Your File is the set of signals you choose to tap — skin type, concerns, and sensitivities. Some of these (like allergies, or later pregnancy) are health-related information, so we handle the File carefully:

• Local by default. It lives only in your browser's local storage. We can't see it.
• Synced only if you sign in. Signing in is the moment a copy is saved to your account, so your File follows you to your other devices. Before that, it never leaves your device.
• Never sold, never shared. We don't sell your File and never share your individual File with brands or retailers.
• Only personalizes your own view. Your File is used to flag products against what matters to you — nothing else.
• We may use aggregated, anonymized, non-identifying statistics (e.g. "X% of visitors flagged fragrance") for product improvement only.
• You can clear your File at any time (in the app, or by clearing your browser). If you're signed in, you can also delete the synced copy — see Your rights.

We earn a commission when you buy through a retailer link on a product card. This is disclosed on every single card — because that's the whole point.

When you click an affiliate link, the retailer may set their own cookies and collect data under their own privacy policy. We don't control that.

We will never accept payment from a brand to influence how its products are presented, rated, or ranked.

Local-first. By default, your File and the things you save live in your own browser — on your device, not our servers.

If you sign in. Your email and a synced copy of your File are stored in Supabase, a secure cloud database, tied to your account and encrypted in transit and at rest. Signing in is what triggers that sync; until then, your File stays on your device.

• Access: You can request a copy of your data at any time.
• Deletion: You can delete your account and the synced copy of your File — and you can clear the on-device copy yourself at any time.
• Correction: You can update your email and your File whenever you like.
• Portability: You can request your data in a readable format.

To exercise any of these rights, email us at hello@iheartclean.beauty.

This site is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it.

If we make material changes we'll notify you with a notice on the site (and by email if you have an account). The date at the top of this page always reflects the most recent update.

Questions? hello@iheartclean.beauty