Privacy Policy

Last updated: March 8, 2026

MUSE-FIT ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the MUSE-FIT mobile application.

1. Information We Collect

We collect the following types of information:

Category	Data Collected	Purpose
Account Information	Email address, password (hashed)	Authentication and account management
Profile Data	Name, personal color type, style preferences	Personalized AI recommendations
Camera & Photos	Photos you take or select from gallery	AI makeup simulation, AR guide features
Face Data	Facial landmark coordinates (processed on-device)	AI makeup application and personal color analysis
Makeup Diary	Diary entries, saved looks, notes	Personal beauty log functionality
Purchase Data	Order history, shipping address, payment status	Order processing and fulfillment
Device Information	Device token for push notifications	Order updates and promotional notifications
Usage Data	App usage patterns, feature interactions	App improvement and analytics

2. Face Data Collection & Processing

This app processes the following face data for AI makeup simulation and personal color analysis:

[Data Collected]

Face photo — captured via front-facing camera or selected from the photo library
Facial landmark coordinates — geometric x/y positions of facial features (eyes, lips, cheeks, forehead, face contour) extracted by Google ML Kit Face Detection
Skin color values — RGB color values sampled from forehead and cheek regions

[Purpose of Use]

AI Makeup Simulation: Face landmark coordinates are used to accurately position virtual makeup colors (lip color, eyeshadow, blush) on the user's photo via pixel-level color blending.
Personal Color Analysis: Skin color RGB values from forehead and cheek regions are analyzed to determine warm/cool tone, brightness, and saturation, classifying the user into one of 8 personal color types with cosmetic recommendations.

[Processing Method]

All face data is processed entirely on-device using Google ML Kit. No face data is transmitted to external servers. We do not use any third-party AI services (OpenAI, Google Cloud Vision, AWS Rekognition, or any custom cloud API) for face processing.

[Storage & Retention]

Raw face data (face photo, landmark coordinates, skin RGB values): processed in device memory only and deleted immediately after analysis is complete. Not written to persistent storage on the device or any server.
Derived profile data (e.g., personal color type such as Spring/Summer/Autumn/Winter): may be stored locally on-device for personalization. This can be cleared by the user via app data deletion or account deletion request.

[Prior Consent — Explicit User Consent Required]

Before any face data processing begins, the app displays an in-app consent screen that clearly discloses: (1) what data will be collected, (2) the purpose of use, (3) the processing method (on-device only), and (4) the retention period. The user must provide explicit consent by checking two required checkboxes — consent to face data collection/use and confirmation of privacy policy review — before proceeding. Without consent, face processing features cannot be used.

[Device Permissions]

Camera: Required for AR makeup guide and live beauty analysis
Photo Library: Required to select and save your makeup looks
Notifications: Required for order status updates and personalized alerts

3. How We Use Your Information

Provide AI-powered makeup simulation and personal color analysis
Process and fulfill product orders
Deliver personalized product recommendations
Send order confirmations and shipping notifications
Improve our AI models and app experience
Maintain your makeup diary and beauty history

4. Data Storage & Security

Your data is stored securely using Supabase, a SOC 2 Type II compliant infrastructure provider. We implement industry-standard security measures including:

Encrypted data transmission (HTTPS/TLS)
Password hashing using cryptographic algorithms
Row-level security policies on all database tables
Regular security audits and access controls

5. Third-Party Services

We use the following third-party services, each with their own privacy policies:

Supabase — Backend database and authentication (privacy policy)
Firebase (Google) — Push notifications (privacy policy)
Google ML Kit — On-device face detection (no data sent to Google)

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following limited circumstances:

With service providers necessary to operate the app (as listed above)
With vendors/ambassadors on the platform (only order-related information necessary for fulfillment)
When required by law or to protect our legal rights
Face data is not shared with third parties.

7. Data Retention

We retain personal data only as long as needed for service operation and legal obligations:

Data Type	Retention Period
Account information	Until account deletion
Order / payment information	5 years (per e-commerce laws)
Raw face data (photo, landmark coordinates, skin RGB values)	Deleted immediately after on-device analysis — not stored
Derived personal color result (e.g., Spring/Summer/Autumn/Winter type)	Stored locally on device until user reset, app data deletion, or account deletion request
Access logs	3 months (per telecommunications law)

You may request account and data deletion at any time by contacting the email below. We process deletion requests within 30 days.

8. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Update inaccurate or incomplete data
Deletion: Request erasure of your personal data
Portability: Receive your data in a portable format
Opt-out: Disable push notifications at any time in device settings
Withdraw face data consent: You may decline or withdraw consent for face data collection at any time. Without consent, face-related features (AI makeup simulation, personal color analysis) will not be available, but all other app features remain accessible.

9. Children's Privacy

MUSE-FIT is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. International Users

MUSE-FIT is a global K-Beauty platform serving users worldwide. By using the app, you consent to the transfer and processing of your information in accordance with this Privacy Policy, regardless of your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via in-app notification or email. Your continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us:

privacy@musefit.app

MUSE-FIT — Global K-Beauty AI Platform