CuffiFlow Privacy Policy

Effective Date: April 18, 2026 · Audience: 17+ · Operator: CuffiFlow Team
We do not sell personal information
Location only with your permission
No face recognition or biometrics
AI Features (if used): processed on our servers, not shared, then deleted

1) Who we are / Contact

Controller/Operator: CuffiFlow Team

Email: rolzmjhclz7743@outlook.com

2) Scope

This Privacy Policy applies to information processed in connection with the CuffiFlow app and related services (the “Services”). It does not apply to third‑party websites, apps, or services that may be linked or integrated, which are governed by their own policies.

3) Age / 17+ audience

The Services are intended for users aged 17 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

4) Information we collect

We collect information in three ways: (A) information you provide, (B) information collected automatically, and (C) information collected with your permission (such as location).

4.1 Information you provide

  • Account information: name, username, email address.
  • Customer support: the content of messages you send to us (including attachments) and related contact details.
  • Skincare content you choose to store: product photos, product names, notes, impressions, routines, and logs you create in the App.

4.2 Information collected automatically

  • Device information: device model, OS version, language, time zone, and device identifiers (or similar).
  • Usage analytics: features used, screens viewed, interactions, and diagnostic events.
  • Crash logs: crash reports and technical diagnostics to improve stability.

4.3 Location information (only if you allow)

If you grant permission, we may collect approximate or precise location to support location-based features (if available) and improve the Services. You can disable location access at any time in your device settings.

4.4 Cookies and similar technologies

If the Services include web-based components (such as a login or embedded web views), we may use cookies, local storage, and similar technologies (which may include web beacons) to keep you logged in, remember preferences, and measure performance and usage.

5) Optional AI-assisted features (if you choose to use them)

Some features may offer AI-assisted processing (for example: helping summarize notes, extract product details from an image, or generate structured logs) (“AI Features”).

Your control

  • You choose whether to upload text or images to use AI Features.
  • You can choose not to use AI Features and continue using the core Services.

Processing and deletion

  • If you choose to use AI Features, submitted text/images are processed on CuffiFlow’s own servers solely to generate the output you request.
  • We do not share submitted text/images with any third party for AI processing.
  • We delete submitted text/images from the AI processing pipeline immediately after processing completes (or as soon as technically feasible).

No training / marketing use

  • We do not use submitted text/images for advertising.
  • We do not use submitted text/images to train marketing models.

If you save generated outputs into your account or logs, those saved outputs may be retained until you delete them or delete your account (see Data Retention).

6) Photos, face data, and biometrics

  • We do not perform face recognition.
  • We do not collect or create biometric identifiers or biometric information for identification.
  • Photos you add are for your skincare archive and logs. Where a feature performs one-time processing, the input is processed and then deleted from processing as described above.
  • By default, photos/logs may be stored locally on your device and/or synced to your account depending on your settings and use of cloud features.
  • We do not use your photos for training or marketing.

7) How we use information (purposes)

  • Provide and maintain the Services (accounts, syncing, core functionality).
  • Personalize your experience (preferences, saved settings).
  • Improve the Services (analytics, debugging, feature development).
  • Security and fraud prevention.
  • Customer support.
  • Legal compliance and enforcement.

We do not sell personal information.

8) How we share information

We share information only as necessary and with appropriate safeguards:

  • With your consent or at your direction.
  • Service providers (processors) who help operate the Services under contracts and instructions.
  • Legal, safety, and rights reasons (e.g., comply with law, protect users and the Services).
  • Business transfers (e.g., merger, acquisition, or sale of assets) as permitted by law.

We aim to share the minimum amount of information needed for the stated purpose.

9) International data transfers

Your information may be processed in countries other than where you live. When we transfer personal data internationally, we use appropriate safeguards, which may include Standard Contractual Clauses (SCCs) or equivalent mechanisms, as required by applicable law.

10) Data retention

  • Account data: retained for the life of your account.
  • After account deletion: delete or anonymize within 30 days (unless legal obligations require longer).
  • Usage analytics: retained up to 12 months.
  • Support communications: retained up to 6 months.

11) Security

We use reasonable safeguards designed to protect information, including encryption in transit and (where applicable) at rest, access controls, regular reviews, and backups/monitoring.

No system can be 100% secure. You are responsible for keeping your account credentials confidential.

12) Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict/object, or withdraw consent (e.g., location permissions).

How to exercise your rights

Email rolzmjhclz7743@outlook.com with your request. We will respond within 5 business days. We may need to verify your identity before fulfilling certain requests.

13) Changes to this policy

We may update this Policy from time to time. We will update the Effective Date and, where appropriate, provide additional notice in the App. Your continued use of the Services after an update means you accept the updated Policy to the extent permitted by law.

14) Important notice

This Privacy Policy is provided for informational purposes and does not constitute legal advice. If you need legal guidance, consult a qualified attorney.