PERBETE Privacy Policy

Last updated: October 3, 2026

This policy explains what PERBETE collects, why, how long we keep it, and what you can do about it.

"PERBETE", "we" and "us" mean the operator of PERBETE. The service is the website at perbete.com and any app that links to this policy.

Our Face and health data policy explains face photos from the camera and your health answers in more detail. Where this policy and that one differ on face or health data, that one wins.

1. The short version

• We use your answers to suggest skincare products by their ingredients.
• Some answers are about your health. We treat them as sensitive.
• The camera is optional. If you say yes, your photos are encrypted and deleted after 3 years, or sooner if you ask.
• We do not sell your personal information. We do not share it for targeted advertising.
• You can ask to see, fix or delete your information.
• PERBETE is for people 13 and older.

2. What we collect

2.1 What you tell us in the quiz

All quiz questions except your main skin concern are optional. You can skip them.

We call the bold rows sensitive information. Section 5 explains how we treat it.

2.2 Your account

You can use PERBETE without an account. If you sign in, we use Supabase to handle sign-in. You can sign in with your email address, or with a sign-in provider such as Google. We show only the sign-in buttons that are switched on.

When you sign in with a provider, we receive from it:

• a user ID,
• your email address,
• your name, if the provider shares it.

We show your name on the site to greet you. On My Page you can also type the first name you'd like us to call you. It's optional. It is kept with your answers: in your browser, and on our server when you are signed in. It is never used to choose your products, and it is taken out of the de-identified copy in 2.2A.

When you are signed in, we save your quiz answers on our server so they follow you to other devices. We save only the quiz fields listed in 2.1, plus the first name above if you typed one.

When you agree to our Terms and this Policy while signed in, we record which version you agreed to, where you agreed (for example, the sign-in screen) and when. We use this record only to show what you agreed to.

2.2A A de-identified copy of each finished quiz

When you finish the quiz, we keep a de-identified copy of your answers to find where our suggestions go wrong and to improve them. It holds your answers, your age in years (90 and over is stored as "90+"), the month (not the day or time), the order in which you changed answers during the quiz, the camera's estimate and your correction, and your free-text note after we automatically remove email addresses, phone numbers, web addresses and street-address-like text. It does not hold your name, email address, IP address, a device identifier, or a link to your account.

Our promise: we will not try to re-identify anyone from these copies, and any company that handles them for us is bound by contract to the same promise. This is what makes the copy de-identified under Washington law (RCW 19.373.010(10)).

2.3 The camera (optional)

The camera never turns on unless you slide to agree. One slide saves your answers and starts your AI skin read; sliding it means you consent to our Face and health data policy, which says what we collect, why, and for how long, and agree to our Terms and this Privacy Policy. If you tap Skip for now, nothing from the camera is sent.

If you slide to agree:

• Your browser sends a few photos of your face to our server.
• Our server estimates your age range and a gender estimate from them. Your browser also measures skin tone and sends that number.
• We keep up to 3 photos, encrypted, and the numbers we measured.
• We keep the answers you choose after the camera suggests them, so we can see where the camera was wrong.
• We keep a record of your consent: what you agreed to, which version of the text you saw, when, and in which language.

We use the photos to fill in answers you can change, to improve our recommendations, and to make our camera more accurate. We keep your photo together with your answers, your location and that day's weather to improve our recommendations. Photos are deleted 3 years after your last visit, or sooner if you ask. We do not use them to identify you.

To read a photo, our server first finds where your face is, so it can cut out the face area and check that you are facing the camera. While it does this, it notes where a few features are, such as your eyes and nose, for a moment in memory. We never store those positions. We keep only the photos (encrypted) and the numbers listed above, including photo quality.

2.4 Collected automatically

• Browser storage. We store your quiz answers, your camera consent ID and a camera delete key, and a few screen settings in your browser (localStorage). This is how the site remembers you without an account. Clearing your browser data removes them.
• Sign-in cookie. If you sign in, Supabase sets a cookie that keeps you signed in.
• A device ID. Your browser sends a random ID with some requests. We use it to count one free formula per person per day.
• IP address. Our server uses your IP address to limit how many requests one connection can make. This protects the site from abuse. We do not store your IP address in our database. Our hosting providers (section 4) may keep it in their server logs for a limited time, under their own rules.
• Your rough area, for local weather. On the weather step we use your internet connection (your IP address) to guess the city you're near, so we can show the weather, UV and air around you. It's only a rough guess: a nearby city, never your street or home. We use it just to look up the weather and don't keep your IP address for it. Not right? Tap Change and pick your place, or skip it. Your browser remembers the place you choose, so you don't have to pick it again.
• Region from IP (planned, not built). We may later use your IP address to estimate your US state, so we can show the right consent screen for your state. We will update this policy before we do.

• Usage analytics (PostHog). We see which pages people open, where they click and scroll, and where they leave, so we can fix confusing screens. Some visits are recorded as a screen replay. In replays every typed field and all text on the page are hidden, and photos, video and the camera screen are not recorded. We never record a replay for someone whose birth year shows they are under 18. We do not use it for advertising. It stays off if your browser sends Global Privacy Control or Do Not Track, and you can turn it off with the switch at the end of this page.

• Error reports (Sentry). When a page breaks, an error report is sent so we can fix it: what broke, the page address without its query codes, your browser and device type, and the server calls just before the error. It never includes your quiz answers, what you tapped, your account details or photos, and it is not used for analytics or advertising.

We do not use advertising trackers.

2.5 Waitlist

If today's free formulas are gone, you can join a waitlist. If you give an email address, we store it with the date. We do not email waitlist members yet.

2.6 Product photos, barcodes and reviews

• Product photo search and barcode scans. When you search with a photo of a product or scan a barcode, we may keep the photo, the barcode number and the product we found. We use them to recognize more products and to fill in product details. These are pictures of products, not of you, so please keep faces out of the frame. If a person shows up anyway, we keep the photo as it is: we never measure or recognize faces in it, and we never use it to build or train any face tool, including our camera. If you delete your account or your photos, we keep the product photos but remove their link to your account. You can also ask us to delete them: privacy@perbete.com.
• Purchase proofs for coins. You can send a photo of a product you bought to earn coins. Sending a receipt or an order screen is off for now. The parts below about receipts and order screens apply once we turn that option on. From a product photo, an AI reads only the brand, the product name and, if one is printed, the batch code. From a receipt or an order screen, it reads only the store, the date, the total (with tax and subtotal), the currency, the order number and the items (see section 4). We also check the photo's capture date and whether it looks edited, made by AI or copied from the web. The AI is told to skip anything personal it sees, such as names, addresses, card numbers and loyalty numbers, so we do not save them as data; they stay only inside the photo until the photo is deleted (section 6). We use what it reads to check the purchase, add your coins, put the products on your shelf and stop the same purchase being used twice. Our team may look at a photo you send to confirm a purchase or prevent misuse, for example when the AI is not sure. Purchase-proof photos, including product photos you send for coins, go only to OpenAI and Google, never to any other reader (section 4). A photo may show a person, for example a hand holding the product. We keep the photo as it is. We never measure or recognize faces in it, and we never use it to build or train any face tool, including our camera. Whatever your age, we do not sell this information, share it for ads or use it for ads.
• Reviews. When you post a review, we keep your words, your stars, any photo you add and the name you choose to show. Before a review shows to others, an AI reads the words first (see section 4); if it is not sure, or cannot run, our team checks it. You see your own review right away, marked as being checked.

3. How we use it

• To make recommendations. Your answers decide which ingredients and products we suggest, and which we leave out. For example, a pregnancy answer changes which ingredients we flag. A skin cancer answer makes us leave out products with an ingredient that has an official cancer classification.
• To improve our models. When the camera guesses something and you correct it, the difference helps us make the camera more accurate. We use this only if you agreed to the camera.
• To run and protect the service. Sign-in, keeping your answers, rate limits, fixing bugs.
• To follow the law.

We do not:

• sell your personal information,
• share it for cross-context behavioral (targeted) advertising,
• sell, rent, trade or otherwise profit from face photos or face data,
• give you rewards, coins or payment for face photos.

4. Who we share it with

We share information only with service providers that run parts of PERBETE for us, under contract:

We do not use any other AI reader today. If we add one, we will list it here, with what it gets, before it gets anything.

We may also share information if the law requires it, to protect people's safety, or as part of a merger, a sale, or a move of PERBETE to a new company. If that happens, we will tell you first, your information stays under this policy, and face photos and face data are never sold.

Retailer links. Our product pages link to retailers such as Amazon. Some Amazon links are affiliate links: if you buy, we may earn a commission. As an Amazon Associate, PERBETE earns from qualifying purchases. When you click, you leave PERBETE. The retailer's privacy policy applies there. We do not send your quiz answers to retailers.

5. Sensitive and health information

Your pregnancy, allergy and skin cancer answers can be "consumer health data" under Washington's My Health My Data Act and Nevada law (SB 370). Your skin tone, ancestry and health answers can be "sensitive personal information" under California law. Face photos are biometric information under Illinois BIPA and similar laws.

For this information:

• Every one of these questions is optional.
• Each question says on the spot why we ask.
• We use it only to make your recommendations and, for camera data, to improve our camera.
• We do not sell it or use it for advertising.
• You can delete it (section 7).

Your shelf and purchase proofs. The products you save, or show us you bought, can hint at your skin or health, for example an acne treatment. We treat this list the way we treat health information: we use it only for your recommendations, your coins and to stop fraud, and we never sell it or use it for ads.

Your consent to face and health data. Washington, Nevada and some other states ask for your consent before we collect consumer health data. One consent covers your face photos and your health answers. Its line names our Face and health data policy and says what we use the data for, who handles it and how to take your consent back. You give it on the camera screen with the slide that starts your AI skin read; if you skip the camera, with the Agree and see my routine button. If you sign in first, the line under the sign-in button covers your health answers, and your face photos always get their own slide on the camera screen. Every health question is still optional, so you can skip any of them. You can take your consent back at any time by emailing privacy@perbete.com. From then on we stop collecting face photos and health information from you, and we delete what we hold unless the law requires us to keep it. De-identified quiz copies (2.2A) have no link to you, so they stay. Washington residents also have a right to a separate Consumer Health Data Privacy Policy. Ours is the Face and health data policy.

6. How long we keep it

7. Your choices and rights

Anyone can:

• Delete camera data on My Page, under *Settings & privacy*: tap *Delete my photos and camera data*. This works from the browser where you took the photos, because the delete key is stored only there. From another device, contact us.
• Delete your account on My Page, at the bottom of *Settings & privacy*. You can restore it for 30 days. After that we delete your account and what is linked to it: saved answers, shelf, coins, check-ins and face photos. A few things stay, with no name and no link to you: your reviews (no longer shown), what we read from purchase proofs and their fingerprints, product photos from search, and de-identified quiz copies (2.2A). Records of which Terms you agreed to stay for 10 years, under a code instead of your account number, and longer only while the law makes us keep them for a dispute. Section 6 has the details.
• Change or clear answers by retaking the quiz or clearing your browser data.
• Email us to delete your photos, camera data, answers or account from any device: privacy@perbete.com (also on My Page, under *Settings & privacy* > *More options*).
• Ask us to see, correct or delete your information: privacy@perbete.com.

California residents (CCPA/CPRA) have the right to:

• know what personal information we collect, use and disclose,
• delete it,
• correct it,
• limit our use of sensitive personal information (we already use it only to provide the service),
• opt out of sale or sharing (we do not sell or share),
• not be treated differently for using these rights.

Washington and Nevada residents can confirm whether we collect their consumer health data, see it, delete it, and withdraw consent.

Illinois residents: we collect face photos only with your written consent on the camera screen, keep them no longer than the schedule above, and never profit from them.

Other states such as Virginia, Colorado, Connecticut, Texas and Oregon give similar rights. Wherever you live, you can ask us to see, correct or delete your information, and we will answer.

We may keep some information after a delete request when the law allows it, for example to meet a legal duty or to prove what you agreed to if there is a dispute. Section 6 lists what stays and for how long.

We will verify requests before acting on them. You can use an authorized agent. We answer within the time the law requires. If we deny a request, you can appeal by emailing privacy@perbete.com.

8. Children

PERBETE is for people 13 and older. The birth year picker does not offer years under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 gave us information, contact us and we will delete it.

For users aged 13 to 17:

• Before your answers are saved or the camera turns on, you confirm that your parent or guardian says it's OK.
• We never record a screen replay for someone whose birth year shows they are under 18 (2.4).
• We never sell a teen's information or use it for advertising.
• A parent or guardian can ask us to see or delete a teen's information: privacy@perbete.com.

9. Security

• Face photos are encrypted before they are stored (Fernet: AES-128 with an integrity check). The key is kept out of our code.
• Data travels over encrypted connections (HTTPS).
• Your saved answers can be read only with your own sign-in token.

No system is perfectly secure. We will notify you and the authorities of a breach as the law requires.

10. Where data is stored

Our service providers in section 4 store and process data for us. They may do this in the United States or in other countries where they operate.

The AI readers in section 4 may process what we send in other countries.

11. Changes

We may update this Policy from time to time. We'll post the new version here with its date; continuing to use PERBETE means you accept it. If a change would use information we already hold in a materially different way, we'll tell you first (by email or a notice in the app), and ask again for consent where the law requires.

12. Contact

PERBETE · privacy@perbete.com