1. Information We Collect
Required:
- Apple ID information (email, name — as provided by Apple Sign In)
- Location data (home coordinates, air monitoring station name)
- Device push notification token
Optional:
- Skin journal photos
- Face wash records (date/time, duration, HP)
2. How We Use Your Information
- Deliver personalized face wash notifications based on air quality
- Detect arrivals home and track real-time pollution exposure
- Generate wash habit statistics and reports
- Send CRM push notifications (morning briefing, evening nudge, streak alerts)
3. Data Retention and Deletion
- Data is retained while your account is active.
- Upon account deletion, all data is permanently deleted within 30 days.
- Skin journal photos are stored encrypted in Supabase Storage.
4. Third-Party Service Providers
We share data with the following providers solely to operate the service:
- Supabase Inc. — User account and record storage
- Google LLC (Gemini API) — AI skin photo analysis (only results stored; original images are not retained)
- Faceplusplus (Face++ API) — Weekly skin age estimation
- Mixpanel Inc. — Anonymous app usage analytics
- Apple Inc. — HealthKit sleep data access, APNs push delivery
Providers may not use your data for any purpose beyond delivering these services.
5. HealthKit Data
- We access sleep analysis data (HKCategoryTypeIdentifierSleepAnalysis) for the Weekly Recap feature.
- HealthKit data is never transmitted to external servers; it is used on-device only.
- You can revoke HealthKit access at any time in Settings > Health > Apps.
6. Security
- All communications are encrypted with TLS 1.3.
- Supabase Row Level Security (RLS) ensures data isolation between users.
- Push tokens are stored server-side and authenticated via JWT signed with a P8 key.
7. Location Data
- Your home location is stored locally on-device in UserDefaults.
- Only the reverse-geocoded station name (e.g., "Gangnam-gu") is sent to the server.
- Background location access is used solely for geofencing (home arrival detection).
8. Your Rights
- You can delete your account and all data at any time in Settings > Account.
- Push notifications can be disabled in device Settings.
- Location permissions can be changed in device Settings.
9. Children
- This service is intended for users aged 14 and older.
- Users under 14 must have parental or guardian consent to register.
10. Contact
Privacy inquiries: privacy@mansa.ai