← lavabella

LavaBella Privacy Policy

Effective date: July 2, 2026 Last updated: August 4, 2026

LavaBella ("we") makes a skincare companion app. This policy explains what we collect, why we collect it, and the choices you have. It is written in plain language on purpose. Questions go to [email protected].

LavaBella is built primarily for the United States. Wherever you open the app, your data is processed in the United States.

1. What we collect

We collect only what the app needs to work. This is the full inventory.

Account and identity. Your email address. Your password, stored hashed by our authentication provider — we never see it in plain text. Your Apple or Google sign-in identifiers, if you sign in that way. Your display name. Your date of birth, used to tailor treatment suitability. Your city, which you enter yourself. Timestamps for when your account is created and changed.

Skin profile. Your skin type, your skin's sun-reaction type (Fitzpatrick phototype) if you choose to add it, the concerns you select, and the consent acknowledgments you give during onboarding.

Face scans. The most sensitive data in the app. Section 2 covers it in full.

Product cabinet. Label photos you choose to capture are sent to Google Cloud Vision to read the ingredient text, then discarded. The extracted text is then sent to Anthropic to sort it into a product name, brand, and ingredient list — text only, never the photo. We keep the resulting product name, brand, and ingredient list. Label photos only — never face photos. The app asks your permission before the first label scan.

Coach conversations. Your messages to Lava, the in-app coach, are processed by Anthropic (Claude) to generate replies. The coach also receives your derived numeric skin scores — never images. Your messages are additionally processed by OpenAI to detect signs of distress, so the app can respond with care and surface support resources, and to summarize a long conversation so the coach can carry context forward. The app asks your permission before your first message.

Routines. Your daily routine is written by Anthropic. To build it, we send your skin profile (skin type, concerns, contraindications, pregnancy setting, climate), your latest scan scores, and the product and ingredient names in your cabinet — numbers and names only, never images. The app asks your permission before the first routine is built.

Activity. Generated routines, completions, streaks, and daily activity. Treatment interests and readiness-quiz answers. Booking requests, which are shared with the specific partner clinic you ask to book.

Notifications and weather. Your Expo push token and your notification preferences. Weather-based SPF guidance uses your city name only, sent to WeatherAPI.

Analytics and diagnostics. Usage events (PostHog) and crash reports (Sentry). This is first-party only — we don't track you across other apps or websites, and we never share your data with advertisers or data brokers.

Emails. Transactional email — welcome, verification, password reset, deletion confirmation — is delivered through Resend.

2. Face scans

Photos you take in the scan flow are stored privately, with access controls. They are analyzed by our own computer-vision pipeline, which runs on Modal — a cloud GPU provider that executes our code. The output is a set of derived numeric scores (for example redness, hydration, texture) and a small thumbnail.

Face scan images are never sent to any third-party AI service. Not Anthropic. Not OpenAI. Not Google.

Your scans are deleted when you delete your account.

3. Service providers

These companies process data on our behalf. Each receives only what its row describes.

Each provider processes this data under a contract that limits use to providing its service to us, prohibits use for the provider's own purposes — including training AI models — and requires protection of your data to a standard at least equal to this policy.

Before anything is sent to Anthropic, OpenAI, or Google Cloud Vision, the app tells you what will be sent and who will receive it, and asks your permission. You can decline, and that feature stays off.

4. What we never do

We never sell your personal data. There are no ads in the app. We do not share your data with data brokers.

5. Retention and deletion

We keep your data while your account is active.

Deleting your account — Profile → Settings → Delete account — permanently removes your profile, scans, thumbnails, cabinet, conversations, and activity.

Label photos are discarded right after the ingredient text is read.

Residual copies in encrypted backups roll off within 30 days.

6. Your rights and choices

You can access, correct, or delete your data at any time — in the app, or by writing to [email protected].

You can revoke consent in two ways: turn off notification categories in the app, or delete your account.

7. California residents

If you live in California, you have the right to know what personal information we collect, the right to delete it, and the right not to be discriminated against for exercising either. We do not sell your personal information, and we do not "share" it as the CCPA defines that term.

8. Outside the United States

If you use LavaBella from outside the United States, your data is processed in the United States.

9. Children

LavaBella is for people 13 and older. If you are under 13, do not create an account. If we learn an account belongs to a child under 13, we delete it.

10. Changes to this policy

If we make a meaningful change, we update the date at the top and let you know in the app before it takes effect.

11. Contact

[email protected]. A real person reads it.