Privacy Policy

Who we are

Gracie is an independent skincare comparison service available on the web (gracie.beauty) and as an iOS app. This policy explains what we collect and why. Questions: privacy@gracie.beauty.

What we collect

Skin profile — if you create one: your skin type, concerns, sensitivities, formulation preferences, and the products you swipe to calibrate. This is stored on your device and, if you sign in, synced to our database so it follows you across devices.

Account — if you choose to sign in: your email address (used for a one-time sign-in code). You can use most of Gracie without an account.

Scan & usage activity: the barcodes and searches you submit and whether we found a match, plus which products you view. Scan and view activity is stored without a personal identifier and used in aggregate to improve the catalog and rankings.

Waitlist: if you ask to be notified about the app, your email address.

Analytics: standard product analytics (e.g. PostHog) and, on the website, Google Analytics — to understand usage and improve the product.

How we use it

To provide the service: decode ingredients, calculate scores, and personalise matches to your skin profile.

To improve Gracie: the most-searched and most-requested products tell us what to add to the catalog next. This is done in aggregate.

To communicate: if you joined the waitlist, to tell you when the app launches.

We do not sell your personal data. We do not use your skin information to target advertising.

A note on skin data

Your skin concerns are personal. We treat them with care, use them only to personalise your experience, never sell them, and let you delete them at any time. Gracie provides ingredient-based information and is not medical advice — see our methodology and the disclaimer in the app.

Who processes data for us

We use trusted providers to run Gracie: Supabase (database and authentication), Algolia (search), Vercel (hosting), PostHog and Google Analytics (analytics), Resend (email), and Apple (App Store subscriptions and billing). Product information is sourced from Open Beauty Facts and public retailer listings; review summaries are derived from publicly available retailer reviews.

Your choices and rights

Delete your account and data: in the app, go to Profile → Account → Delete account. This permanently removes your account, skin profile, and synced data, and severs the personal link to your activity. You can also email privacy@gracie.beauty.

You can use Gracie without an account, clear your scan history in the app, and unsubscribe from emails at any time.

Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA), you may have rights to access, correct, or delete your data — contact us to exercise them.

Retention

We keep your profile and account data until you delete your account. Aggregate, de-identified usage data may be retained to improve the service.

Children

Gracie is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes

We may update this policy; we'll change the date below and, for material changes, notify you in the app or by email.