Privacy Policy - Cremate

Introduction

Cremate ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Cremate (the "App"). Cremate is an AI-powered e-commerce platform specializing in creams and skincare products with personalized recommendations. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

Personal Information

Account Information: When you create an account, we collect your name, email address, phone number, and password.
Profile Information: You may optionally provide additional information such as skin type, preferences, allergies, and skincare concerns.
Billing Information: Payment card details, billing address, and transaction history for processing purchases.
Shipping Information: Delivery addresses and contact details for order fulfillment.
Contact Information: If you contact our customer support, we may collect your email address and any other information you provide.

AI Face Analysis Information

Facial Images: Our AI feature analyzes your face in real-time to provide personalized product recommendations. IMPORTANT: We do NOT store, save, or retain any images of your face. Images are processed instantly on your device or temporarily in memory for analysis only and are immediately discarded after generating recommendations.
Analysis Results: We may store the results of the AI analysis (such as skin type, tone, and characteristics) to improve recommendations, but never the actual images.
Recommendation Data: Information about products recommended to you based on AI analysis.

Usage Information

App Usage: We collect information about how you use our App, including products viewed, searches performed, items added to cart, and purchases made.
Device Information: We may collect information about your device, including device type, operating system, unique device identifiers, mobile network information, and device settings.
Log Data: We automatically collect certain information when you use our App, including your IP address, browser type, pages visited, and the time and date of your visit.
Location Information: With your consent, we may collect your approximate location to suggest nearby stores or optimize shipping options.

Purchase and Transaction Information

Order History: Records of products purchased, order dates, amounts, and delivery status.
Reviews and Ratings: Feedback you provide on products and services.
Wishlist and Favorites: Products you save for future reference.

Communication Information

Customer Support: Records of your interactions with our customer service team.
Marketing Preferences: Your choices regarding promotional communications.

How We Use Your Information

We use the information we collect to:

Provide E-commerce Services: To process orders, manage your account, and deliver products you purchase.
AI-Powered Recommendations: To analyze your facial features (without storing images) and provide personalized product recommendations based on your skin type, tone, and characteristics.
Payment Processing: To securely process your payments and prevent fraudulent transactions.
Order Fulfillment: To ship products to your designated address and provide delivery updates.
Customer Support: To respond to your inquiries, resolve issues, and provide assistance.
Personalization: To customize your shopping experience, show relevant products, and remember your preferences.
Marketing Communications: To send you promotional offers, new product announcements, and skincare tips (you can opt-out anytime).
Analytics and Improvements: To understand how users interact with our App and improve our services, product selection, and recommendations.
Safety and Security: To detect, prevent, and address fraud, abuse, security issues, and other harmful activities.
Compliance: To comply with legal obligations, enforce our terms of service, and protect our rights.

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

With Your Consent

We may share your information when you explicitly consent to such sharing.

Service Providers

Payment Processors: We share payment information with secure payment processing services (such as Stripe, PayPal) to complete transactions.
Shipping Partners: We share delivery addresses with shipping carriers to fulfill your orders.
Cloud Services: We use cloud infrastructure providers to host our App and store data securely.
AI Services: Facial analysis may utilize AI/ML services for processing, but no images are stored by us or our providers.
Analytics Providers: We use analytics services to understand app usage and improve user experience.
Customer Support: We may use third-party customer service platforms to manage support requests.

Business Partners

Product Vendors: We may share necessary information with brands and suppliers to fulfill orders and handle product-specific inquiries.
Marketing Partners: With your consent, we may share limited information with marketing partners for promotional purposes.

Legal Requirements

We may disclose your information if required to do so by law, court order, or in response to valid requests by public authorities.
To enforce our terms of service, investigate potential violations, or protect against legal liability.

Safety and Security

We may share information to protect the rights, property, or safety of Cremate, our users, or others.
To detect and prevent fraud, security breaches, or harmful activities.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

AI Face Analysis and Image Privacy

Your Privacy is Our Priority: We want to be completely transparent about our AI face analysis feature:

No Image Storage: We DO NOT store, save, or retain any photographs or images of your face. Ever.
Real-Time Processing: Facial analysis happens in real-time, either directly on your device or in temporary memory for immediate processing only.
Immediate Deletion: Any image data used for analysis is immediately and permanently deleted after generating recommendations.
Analysis Results Only: We only retain the analytical results (such as detected skin type, tone, and characteristics) to provide you with personalized recommendations, never the actual images.
Optional Feature: Using the AI face analysis feature is completely optional. You can browse and purchase products without using this feature.
Control: You have complete control and can choose when to use the AI analysis feature.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption: We use industry-standard encryption (SSL/TLS) to protect data in transit and at rest.
Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment processors.
Access Controls: We restrict access to personal information to authorized personnel only.
Regular Security Audits: We conduct regular security assessments to identify and address vulnerabilities.
Secure Infrastructure: Our systems are hosted on secure, reliable cloud infrastructure with robust security measures.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. Please use a strong password and keep your account credentials confidential.

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

Account Information: Retained while your account is active and for a reasonable period afterward to comply with legal obligations.
Transaction Records: Retained for accounting, tax, and legal compliance purposes (typically 7 years).
Facial Images: NOT retained - immediately deleted after analysis as explained above.
Analysis Results: Retained to provide personalized recommendations unless you request deletion.
Marketing Communications: Retained until you opt-out or request deletion.
Support Communications: Retained for quality assurance and to resolve ongoing issues.

You can request deletion of your data at any time by contacting us (see "Your Rights and Choices" section).

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

Access: You may request access to the personal information we hold about you.
Data Portability: You may request a copy of your information in a structured, machine-readable format.

Correction and Deletion

Correction: You may update or correct your account information through the App settings.
Deletion: You may request deletion of your personal information and account. Note that some information may be retained for legal or legitimate business purposes.

Communication Preferences

Marketing Opt-Out: You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any promotional email or adjusting your notification settings in the App.
Push Notifications: You can disable push notifications through your device settings.

AI Feature Control

Disable AI Analysis: You can choose not to use the AI face analysis feature at any time.
Camera Permissions: You can revoke camera access through your device settings.

Other Rights

Objection: You may object to certain processing of your personal information.
Restriction: You may request restriction of processing in certain circumstances.
Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, please contact us using the information provided below.

Children's Privacy

Cremate is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your own, including countries that may not have the same data protection laws. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards, such as:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions recognizing equivalent data protection
Binding Corporate Rules for transfers within our organization
Your explicit consent for specific transfers

Third-Party Services and Links

Our App may integrate with or contain links to third-party websites, services, or payment processors. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

Third-Party Services We Use

Payment Processors: Stripe, PayPal, or other payment services (subject to their respective privacy policies)
Analytics: Google Analytics, Firebase Analytics, or similar services
Cloud Infrastructure: AWS, Google Cloud, or similar providers
AI/ML Services: For facial analysis processing (no images stored)
Shipping Providers: For order tracking and delivery

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content:

Essential Cookies: Required for the App to function properly, including authentication and shopping cart functionality.
Analytics Cookies: Help us understand how users interact with our App to improve our services.
Preference Cookies: Remember your settings and preferences for a personalized experience.
Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.

You can control cookies through your device settings, but disabling certain cookies may affect App functionality.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the new Privacy Policy in the App with an updated "Last Updated" date
Sending you an email notification (if you have an account)
Displaying a prominent notice in the App

Your continued use of the App after such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: fanusdigitalco@gmail.com

Additional Information for Specific Regions

European Union (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

Right to access, rectify, erase, restrict processing, object to processing, and data portability
Right to withdraw consent at any time
Right to lodge a complaint with your local supervisory authority
Right to receive information about automated decision-making and profiling

Our legal basis for processing your data includes: consent, contract performance, legal obligations, and legitimate interests.

California (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to know what personal information we collect, use, disclose, and sell
Right to delete personal information (subject to certain exceptions)
Right to opt-out of the "sale" or "sharing" of personal information
Right to correct inaccurate personal information
Right to limit use of sensitive personal information
Right to non-discrimination for exercising your privacy rights

Note: We do not "sell" personal information as defined by CCPA.

United Kingdom (UK GDPR)

If you are located in the United Kingdom, you have rights similar to those under EU GDPR, and you may lodge a complaint with the Information Commissioner's Office (ICO).

Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. If you have questions about privacy rights specific to your location, please contact us.

By using Cremate, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein. Thank you for trusting Cremate with your skincare journey!