Privacy Policy

• Skin & health information you share in your intake conversation and advisor chats — skin type, concerns, life stage (including menopause stage), pregnancy or nursing status, sensitivities and reactions, and the medications or supplements you tell us you take. This is sensitive information, and we treat it that way.
• Photos you choose to share — if you use the “snap your shelf” feature, we process the photo to identify the products in it, then discard it. We do not store your photos.
• Account information — your first name and email address, and your password. If we offer Google sign-in and you choose it, we receive your name and email address from Google to create and access your account.
• Payment information — processed entirely by Stripe, our payment provider. We never see or store your card number or security code.
• Usage information — basic analytics about how our public pages are used (pages visited, device and browser type, general region), collected as described under “Analytics” below.

• To build and update your personalized skincare routine.
• To answer your questions in your ongoing advisor chats with context from your profile.
• To process your purchase and, if you continue past your first month, your monthly membership billing, and to provide customer support.
• To send you service emails (your report, receipts, renewal and billing notices, support replies) and, with your consent, check-in and marketing emails. Every marketing email includes a one-click unsubscribe link.
• To understand how our public marketing pages perform, so we can improve them.
• To keep the service secure and prevent fraud, and to comply with our legal obligations.

Some of what you share with us — your skin and health intake answers, including menopause stage, pregnancy or nursing status, symptoms, sensitivities and reactions, and the medications or supplements you tell us about, along with any photos you choose to add — is treated as “consumer health data” under laws such as Washington’s My Health My Data Act. We want to be plain about how we handle it:

• We ask for your consent first. Before your intake begins, we ask you to check a box that specifically agrees to our collecting this health information. That consent is separate from accepting our Terms and this Privacy Policy. You can decline — you simply won’t be able to generate a routine, since the routine is built from what you tell us.
• We use it only for your routine. Your health information is used solely to create and maintain your personalized routine and to answer your questions in the advisor chat — nothing else.
• We never sell it and never share it for advertising. The only outside services that touch it are the ones we need to run the product (our AI provider and our secure database host). We never sell it, and our AI provider’s commercial terms bar it from training its models on what you tell us. No advertising tracker of any kind runs anywhere on this site, and no analytics tracker of any kind runs on these pages. Our own product analytics are confined to our public marketing pages, which is explained in Analytics below, along with the nine days in August and September when that was not the case.
• You can delete it anytime. You can delete your health information from your account settings, and it is really deleted — including the record of the consent itself. We keep only a dated note that the deletion happened, identified by one-way hashes of your account ID and of the network address the request came from — no name, no email, and no health details. If you have any trouble, email us and a person will delete it for you.
• You can withdraw consent. Withdrawing consent stops any further collection; you can also delete what we already have, as described above.

Where the service is available. At launch, BlueOcean Skin is not available to residents of Washington or Nevada while we complete additional compliance work. Those states have their own consumer health data laws, and we would rather wait until we can meet them properly than sign you up first. If you live there, we’ll invite you as soon as we can.

Your $39 purchase includes your routine and your first month of advisor access. After the first month, membership continues at $12/month and renews automatically until you cancel. You can cancel anytime from your account settings, effective at the end of the current billing period. The full terms are in our Terms of Service, and we disclose them again at checkout before you pay.

If you use the shelf-photo feature, your photo is sent to our system (and our AI provider) only to read which products it shows, so we can build your routine around what you already own. We do not keep the image afterward and we do not use it for any other purpose.

Your routine and advisor answers are generated with the help of a third-party AI provider (Anthropic). The information you share is transmitted to them solely to produce your recommendations, under commercial terms that bar them from training their models on it. We do not authorize them to use it for anything else.

Analytics runs on our public marketing pages only — never on the pages where you enter or read your health information. An allowlist in our code names the public pages that may be measured. Every other page, including your intake, your routine, your advisor chat and your account, is excluded by default: a page has to be added to that list deliberately, and the health pages never are.

The tool is PostHog, a product analytics service. On the public pages it records which pages you visit and what you click, and it makes a session recording — a replay of your screen while you are on those pages. Everything you type is masked in that replay, password fields included. Visitors to the marketing pages stay anonymous — we do not identify you to PostHog, and we do not send PostHog your name or your email address.

What happened between August 25 and September 2, 2026. For those nine days we deliberately switched that allowlist off and ran analytics, including session recording, on every page — the intake and routine pages among them. We disclosed it here at the time. That is over: the allowlist is back on, and recording no longer reaches any page where you share your skin and health information. If you used BlueOcean Skin during that window and want any recording of your visit deleted, email support@blueoceanskin.com and we will delete it; deleting your account deletes it too.

We keep one alternative wired up behind PostHog: Vercel Web Analytics, which runs only if PostHog is not configured. It is cookieless and counts visits on our public pages alone — it records the page address, the referring site, and coarse device and country information, and it is never given your name, your email, or anything you tell us about your skin. Only one of the two ever runs at a time.

What we do not do, in beta or out of it. We do not use Google Analytics, and we do not run any advertising pixel — no Meta/Facebook pixel, no ad network of any kind, on any page. We never have. We do not sell your personal information, we do not share it for cross-context or targeted advertising, and nothing recorded here is given to advertisers, product companies, or data brokers. The recordings are used by us, to improve the product, and for nothing else.

If that ever changes again. If we decide to record health pages in future — for a group of testers who have agreed to it in writing, for example — we will ask those people separately and specifically, and we will update this section and its date before it starts, not after. You can ask us to delete any recording of you at any time by emailing support@blueoceanskin.com, and deleting your account deletes them too.

We share data only with the vendors required to operate, and each receives only what it needs:

• Stripe — payments and subscription billing.
• Anthropic — the AI that generates your routine and advisor answers.
• Supabase — secure account login and data storage.
• Vercel — website and application hosting.
• PostHog — product analytics and session recording on our public marketing pages only. It receives nothing from the pages where you enter or read your health information, and it is never given your name or your email address. See Analytics above.
• Resend — delivery of the email we send you: account and billing notices, and any reminder you have asked for. It receives your email address and the contents of those messages, and reports back whether one bounced.
• Google — our email and workspace, including any support message you send us, and sign-in if we offer it and you choose it. We do not send Google any analytics about your use of BlueOcean Skin.

Each service provider is bound by a written agreement to use your information only to perform services for us. We may also disclose information if required by law, or in connection with a merger, acquisition, or sale of assets (you will be notified of any such change).

• We never sell your personal information.
• We never share your skin or health profile, or anything you tell our advisor, with advertisers, product companies, or data brokers.
• We never run advertising trackers — no ad pixel, no ad network — on any page of this site, including the pages where you share your skin and health information. Our own product analytics do not run there either; see Analytics.
• We have no affiliate relationships — no product company pays us or receives your data.

• Access or delete your data: email us and we’ll provide a copy of your information or delete your account and profile, typically within 30 days.
• Correct your profile: update it anytime through your account or by asking your advisor.
• Unsubscribe: every marketing and check-in email has a one-click unsubscribe link; service emails (receipts, billing notices, your report) are sent only as needed.
• Limit sensitive information: we use your skin/health information only to provide the service you asked for. We do not use it to profile you for advertising or unrelated purposes.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of its sale, sharing for targeted advertising, or profiling that produces legal or similarly significant effects. These rights may be limited in some cases by law.

Because there is not yet a uniform industry standard for Do-Not-Track (DNT) browser signals, we do not currently respond to them. If we begin sharing data for targeted advertising in the future, we will honor recognized opt-out preference signals (such as Global Privacy Control) as required by law, and we will update this policy accordingly.

We keep your profile for as long as you have an account with us, then delete it, subject to limited legal, billing, and fraud-prevention needs. Shelf photos are not retained. Data is encrypted in transit and at rest. No internet service can guarantee perfect security, but we take reasonable measures appropriate to the sensitivity of what you share with us.

BlueOcean Skin is intended for adults and is not directed to anyone under 18. We do not knowingly collect information from anyone under 18. If we learn we have collected information from someone under 18, we will deactivate the account and delete the information.

If we make material changes to this policy, we’ll note it here and update the date above. Continued use after changes means you accept the updated policy.

Questions or requests:
support@blueoceanskin.com
BlueOcean Skin, c/o Court Services of Michigan, Inc.
22027 Park St, Dearborn, MI 48124