Privacy Policy

• Skin & health information you share in your intake conversation and advisor chats — skin type, concerns, life stage (including menopause stage), sensitivities and reactions, and the medications or supplements you tell us you take. This is sensitive information, and we treat it that way.
• Photos you choose to share — if you use the “snap your shelf” feature, we process the photo to identify the products in it, then discard it. We do not store your photos.
• Account information — your first name and email address, and your password. If you sign in with Google, we receive your name and email address from Google to create and access your account.
• Payment information — processed entirely by Stripe, our payment provider. We never see or store your card number or security code.
• Usage information — basic analytics about how our public pages are used (pages visited, device and browser type, general region), collected as described under “Analytics” below.

• To build and update your personalized skincare routine.
• To answer your questions in your ongoing advisor chats with context from your profile.
• To process your purchase and, if you continue past your first month, your monthly membership billing, and to provide customer support.
• To send you service emails (your report, receipts, renewal and billing notices, support replies) and, with your consent, check-in and marketing emails. Every marketing email includes a one-click unsubscribe link.
• To understand how our public marketing pages perform, so we can improve them.
• To keep the service secure and prevent fraud, and to comply with our legal obligations.

Some of what you share with us — your skin and health intake answers, including menopause stage, symptoms, sensitivities and reactions, and the medications or supplements you tell us about, along with any photos you choose to add — is treated as “consumer health data” under laws such as Washington’s My Health My Data Act. We want to be plain about how we handle it:

• We ask for your consent first. Before your intake begins, we ask you to check a box that specifically agrees to our collecting this health information. That consent is separate from accepting our Terms and this Privacy Policy. You can decline — you simply won’t be able to generate a routine, since the routine is built from what you tell us.
• We use it only for your routine. Your health information is used solely to create and maintain your personalized routine and to answer your questions in the advisor chat — nothing else.
• We never sell it and never share it for advertising. The only outside services that touch it are the ones we need to run the product (our AI provider and our secure database host), which are contractually barred from selling it or using it to train their models. No advertising or analytics trackers run on the pages where you share it — see Analytics below for exactly what runs where.
• You can delete it anytime. You can delete your health information from your account settings, and it is really deleted. We keep only a small record that you gave consent (with the date), which contains no health details. If you have any trouble, email us and a person will delete it for you.
• You can withdraw consent. Withdrawing consent stops any further collection; you can also delete what we already have, as described above.

Where the service is available. At launch, BlueOcean Skin is not available to residents of Washington State while we complete additional compliance work. If you’re in Washington, we’ll invite you as soon as we can.

Your $39 purchase includes your routine and your first month of advisor access. After the first month, membership continues at $12/month and renews automatically until you cancel. You can cancel anytime from your account settings, effective at the end of the current billing period. The full terms are in our Terms of Service, and we disclose them again at checkout before you pay.

If you use the shelf-photo feature, your photo is sent to our system (and our AI provider) only to read which products it shows, so we can build your routine around what you already own. We do not keep the image afterward and we do not use it for any other purpose.

Your routine and advisor answers are generated with the help of a third-party AI provider (Anthropic). The information you share is transmitted to them solely to produce your recommendations, under terms that prohibit them from using your data to train their models or for any purpose other than serving you.

On our public marketing pages (our homepage, pricing, articles, sample report, and these legal pages) we use Vercel Web Analytics to count visits and see which pages people find useful. It is cookieless and first-party: it records the page address, the referring site, and coarse device and country information — never a name, an email, or anything you tell us about your skin.

We do not use Google Analytics, and we do not run any advertising pixel (such as the Meta/Facebook pixel). We never have. We do not sell your personal information, and we do not share it for cross-context or targeted advertising. If we ever add an analytics or advertising tool, we will update this policy first.

Analytics is switched off entirely on the pages where you enter or view your skin and health information — the intake conversation, your routine, your routine card, the advisor chat, your check-ins, and your account pages. This is enforced in our code by an allowlist, not left to a setting: any page that is not explicitly a public marketing page is excluded automatically. Your medications, menopause stage, pregnancy status, and skin concerns are never sent to any analytics or advertising network.

We share data only with the vendors required to operate, and each receives only what it needs:

• Stripe — payments and subscription billing.
• Anthropic — the AI that generates your routine and advisor answers.
• Supabase — secure account login and data storage.
• Vercel — website and application hosting.
• Google — our email and workspace, including any support message you send us, and sign-in if we offer it and you choose it. We do not send Google any analytics about your use of BlueOcean Skin.

Each service provider is bound by a written agreement to use your information only to perform services for us. We may also disclose information if required by law, or in connection with a merger, acquisition, or sale of assets (you will be notified of any such change).

• We never sell your personal information.
• We never share your skin or health profile, or anything you tell our advisor, with advertisers, product companies, or data brokers.
• We never run advertising or analytics trackers on the pages where you share your skin and health information.
• We have no affiliate relationships — no product company pays us or receives your data.

• Access or delete your data: email us and we’ll provide a copy of your information or delete your account and profile, typically within 30 days.
• Correct your profile: update it anytime through your account or by asking your advisor.
• Unsubscribe: every marketing and check-in email has a one-click unsubscribe link; service emails (receipts, billing notices, your report) are sent only as needed.
• Limit sensitive information: we use your skin/health information only to provide the service you asked for. We do not use it to profile you for advertising or unrelated purposes.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of its sale, sharing for targeted advertising, or profiling that produces legal or similarly significant effects. These rights may be limited in some cases by law.

Because there is not yet a uniform industry standard for Do-Not-Track (DNT) browser signals, we do not currently respond to them. If we begin sharing data for targeted advertising in the future, we will honor recognized opt-out preference signals (such as Global Privacy Control) as required by law, and we will update this policy accordingly.

We keep your profile while your account is active and for a reasonable period afterward for support, billing, and legal purposes, then delete it. Shelf photos are not retained. Data is encrypted in transit and at rest. No internet service can guarantee perfect security, but we take reasonable measures appropriate to the sensitivity of what you share with us.

BlueOcean Skin is intended for adults and is not directed to anyone under 18. We do not knowingly collect information from anyone under 18. If we learn we have collected information from someone under 18, we will deactivate the account and delete the information.

If we make material changes to this policy, we’ll note it here and update the date above. Continued use after changes means you accept the updated policy.

Questions or requests:
support@blueoceanskin.com
BlueOcean Skin, c/o Court Services of Michigan, Inc.
22027 Park St, Dearborn, MI 48124