Privacy Policy
Last updated: July 3, 2026
This Privacy Policy explains how Ceramonies collects, uses, discloses, and protects personal information when you use our websites, applications, and related services (collectively, the "Service").
1. Information We Collect
We collect information you provide to us, including your name, email address, skin profile, skincare routine and application logs, reaction scores, and journal photos you choose to upload. We also collect account, device, and usage information needed to operate, secure, and understand the Service.
2. How We Use Information
We use personal information to provide and personalize the Service, maintain your account and skincare history, generate routine guidance and insights, process subscriptions, respond to support requests, monitor performance, improve features, prevent fraud and abuse, and comply with legal obligations.
3. How We Disclose Information
We disclose information only as needed to operate the Service, complete transactions, comply with law, protect rights and safety, or complete a business transaction. Our service providers include Supabase and Vercel for application infrastructure and storage, PostHog for product analytics, Stripe for web payments, and RevenueCat, Apple, and Google for mobile subscriptions. These providers process information for the services they perform for us. We do not sell your personal information.
4. Analytics
We use PostHog to understand how people use the Service and to improve product performance. Input masking is enabled so text entered into input fields is masked in analytics recordings. PostHog may process device and usage information on our behalf. We do not use the Service to sell personal information for advertising.
5. Payments
Stripe processes payments made on the web. RevenueCat, Apple, and Google help manage mobile subscriptions and purchases. Ceramonies receives transaction and subscription details needed to provide paid features, but we do not store full payment card numbers. Payment providers handle your information under their own privacy policies.
6. Security and Account Isolation
We use administrative, technical, and organizational safeguards designed to protect personal information. Data is encrypted in transit and at rest by our infrastructure providers. Supabase Row-Level Security policies limit access to account-scoped records so authenticated users can access only rows associated with their own user ID. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
7. Data Retention and Deletion
We retain personal information while your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may delete your account using the account deletion feature. Account deletion removes your associated data and uploaded files from our systems, subject to limited retention where required by law or necessary for security, fraud prevention, or transaction records.
8. Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to or restrict certain processing. You may update some information in the Service or contact us to submit a request. We may need to verify your identity before completing a request.
9. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.
10. International Data Processing
We and our service providers may process information in countries other than the one where you live. Those countries may have different data protection laws. Where required, we use appropriate safeguards for cross-border processing.
11. Changes to This Policy
We may update this Privacy Policy as the Service or applicable laws change. We will post the updated policy here and revise the date above. If changes are material, we will provide additional notice when required by law.
12. Contact Us
Questions or privacy requests may be sent to support@ceramonies.com.