Privacy Policy
Last updated: September 2026
Skanna is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This policy explains what data we collect, how we use it, and your rights.
1. Data controller
The data controller is TORNEA Olga, sole trader, 8 Bis Rue Abel, 75012 Paris, France (SIREN 107762296). For any question, or to exercise your rights, email contact@skanna.skin, call +33 7 45 01 11 20, or use our contact form.
2. Data we collect
We collect: your Google account email and display name (for authentication); your skin profile (skin type, concerns, ingredients to avoid, budget preference); photos of ingredient labels you scan; optional skin photo for AI analysis; and usage statistics (number of scans and recommendations per period).
3. How we use your data
Your data is used exclusively to provide the Skanna service: to authenticate you, to personalise AI ingredient analysis to your skin profile, and to enforce usage limits. We do not sell your data to third parties, and we do not use it for advertising.
4. Data storage and security
Your data is stored in Supabase (PostgreSQL database and file storage) hosted in the European Union. Images are stored in a private Supabase Storage bucket with access restricted to your account. Payment processing is handled by Stripe, which is PCI-DSS compliant. All data is transmitted over HTTPS.
5. Third-party AI providers
Ingredient analysis uses Groq, Google Gemini, and DeepSeek APIs. Images and ingredient text are sent to these services solely to generate analysis results. These providers process your data under their own privacy policies. No persistent user profile is stored with these providers.
6. Data retention
Your account and scan data are retained for as long as your account is active. You can delete your account at any time from Settings, which permanently removes all associated data within 30 days.
7. Your GDPR rights
Under the GDPR, you have the right to: access your personal data; request correction of inaccurate data; request erasure of your data (right to be forgotten); object to processing; request data portability. To exercise these rights, delete your account in Settings or contact us via our contact form.
8. Cookies and analytics
Skanna uses only the essential session cookies required for authentication (provided by Supabase). We use no advertising or tracking cookies. Site traffic is measured with Vercel Web Analytics, which sets no cookies, collects no personal data and cannot identify you — only aggregated page-view statistics are recorded. No consent banner is therefore required.