soybean is a personal skincare companion app. We take your privacy seriously — your skin journey is personal, and we treat your data that way. This policy explains what we collect, how we use it, and what rights you have.
What we collect
When you create an account and use soybean, we collect:
- Account information — your name, handle, email address, and password (encrypted)
- Profile details — birthday and skin type, provided voluntarily at signup
- Journal entries — your daily skin notes, labels, ratings, and photos you choose to log
- Product data — products you add to your shelf, including purchase dates, prices, and usage periods
- Consent record — the date and time you agreed to these terms
How we use your data
Your data is used to:
- Power your personal journal, shelf, and stats within the app
- Sync your data across devices via Supabase (our cloud storage provider)
- Generate your personal stats — spending trends, product history, skin progress
We may also use anonymized, aggregated data — for example, average spend by skin type or most-used product categories across all users. This data cannot identify you individually.
What we do not do
- We do not sell your personal data to third parties
- We do not share your individual journal entries or product data with anyone
- We do not use your data for advertising
- We do not share personally identifiable information with any third party except as required by law
Data storage
Your data is stored securely via Supabase, which runs on AWS infrastructure and is SOC 2 compliant. Data is encrypted in transit and at rest. We store data in the region you are served from.
Your rights
You have the right to:
- Access your data — you can view everything in the app at any time
- Export your data — contact us and we will provide a copy
- Delete your data — you can delete your account and all associated data at any time through the app or by contacting us
- Correct your data — update your profile directly in the app
If you are located in the EU or California, you have additional rights under GDPR and CCPA respectively. We honor all deletion and access requests within 30 days.
Children
soybean is not intended for users under the age of 13. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it promptly.
Changes to this policy
We may update this policy as the app evolves. We will notify you of material changes via the app. Continued use of soybean after changes take effect constitutes acceptance of the updated policy.