Privacy Policy

1. Introduction
Derma Code AI (“we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you access or use our AI-driven skincare cycle management platform. By using the Service, you consent to the data practices described in this Policy.
 
2. Information We Collect
We collect only the data necessary to provide and improve our Service.
2.1 Personal Information

• Name

• Email address

• Phone number

• Shipping address

• Account login credentials

This information is used for membership management, communication, and service fulfillment.
2.2 Skin Analysis Data

• Photos voluntarily uploaded by the user

• Self-reported skin characteristics

• Lifestyle survey responses

• Environmental inputs (city/region)

Uploaded skin images are used solely for AI analysis and cycle management.
We do not use facial recognition technology, biometric identification systems, or identity verification mechanisms.
2.3 Environmental & Location Data
We collect city or region information to provide localized environmental context such as:

• Temperature

• Humidity

• UV index

• Air quality indicators

We do not collect real-time GPS tracking data.
2.4 Payment Information
Payments are processed through secure third-party payment gateways.
Derma Code AI does not store full credit card details on its servers.

3. How We Use Your Information
We use collected information strictly for the following purposes:
3.1 AI-Based Personalization
To generate individualized Full Reports and Reset Protocols.
3.2 Service Operation
To:

• Manage membership credits

• Process payments

• Coordinate international shipping

• Deliver digital reports

3.3 System Improvement
We may use anonymized and aggregated data to improve system accuracy and performance.
No personally identifiable information is used for AI system refinement without anonymization.
3.4 Communications
To send:

• Service updates

• Membership notifications

• Climate-based skincare alerts

• Administrative messages

Users may opt out of marketing communications at any time.

4. Data Security & Retention
4.1 Security Measures
We implement industry-standard safeguards including:

• SSL/TLS encryption

• Secure cloud infrastructure

• Restricted access controls

Access to sensitive data is limited to authorized technical personnel.
4.2 Data Retention
Skin analysis data and reports are retained:

• During the active membership period

• For operational continuity

Users may request deletion of their skin images and analysis history at any time.
Upon verified request, such data will be permanently removed, except where retention is legally required.

5. Third-Party Service Providers
We do not sell or rent personal data. Information may be shared only with:

• Payment processors

• Logistics providers (e.g., DHL Express)

• Secure cloud hosting providers

• Infrastructure and analytics service providers

All partners are contractually obligated to protect user data.

6. International Data Transfers
As Derma Code AI operates internationally, user data may be processed and stored in the Republic of Korea or other jurisdictions where our cloud infrastructure providers operate. By using the Service, you consent to such international data transfers. We implement reasonable safeguards to protect transferred data.

7. Your Rights
Users have the right to:

• Access their personal data

• Request correction

• Request deletion

• Withdraw consent for data processing

Withdrawal of consent may limit access to AI analysis features.
Requests may be submitted through your account dashboard or by contacting support.

8. Children's Privacy
The Service is not intended for individuals under the age of 18.
We do not knowingly collect personal information from minors.

9. Governing Law
This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Republic of Korea.

10. Updates to This Policy
We reserve the right to modify this Privacy Policy at any time.
Continued use of the Service after updates constitutes acceptance of the revised Policy.