Privacy.

The short version

BUÉE keeps the data needed to run your account and uses privacy-focused traffic analytics. No ads, no third-party advertising cookies and no sale of personal data.

What we collect

Four kinds of things, all of them yours:

• Your email address — used only to sign you in and, if you ever lose access, to get you back in. We never email you marketing.
• Profile data you choose to provide — username, display name, bio, skin type and concerns. All of it is public by design; write your bio accordingly.
• Private recommendation preferences — your broad skincare experience level, budget and onboarding choices. They are visible only to you and used to adjust guidance and discovery.
• What you post — public logs, ratings, reviews and routines, plus private journal entries and any photos you upload. Visibility is stated where you publish.

One aggregate, anonymous exception: when anyone follows an outbound “buy” link, we increment a click counter for that product and retailer. The counter stores no user id, no session and no IP. Outbound buy links are affiliate links (see our terms), which may earn BUÉE a commission at no cost to you.

We use Vercel Analytics for aggregate traffic and product-usage measurement. Onboarding analytics may include the broad experience level you selected, never free text or your identity. Essential cookies keep your session, language and display preferences.

Who touches the data

Two infrastructure providers process data on our behalf:

• Supabase — our database, authentication and photo storage. Your data is hosted in the European Union, in Frankfurt (eu-central-1).
• Vercel — hosting, the CDN and aggregate traffic analytics.

Nobody else. We do not share, rent or sell your data to any other party.

How long we keep it

Until you delete your account. Deletion removes your profile and attached content from the active service; encrypted infrastructure backups may retain copies for their limited technical retention period.

Your rights

You can access, correct and delete your data. Access and rectification are self-serve: everything you have given us is visible on your profile and editable in Settings. Deletion is self-serve too — the “Delete my account” button at the bottom of Settings removes your account and all of your content, immediately and permanently.

Contact

A dedicated privacy inbox is not active yet. Until it is published here, the self-service access, editing and deletion tools are the fastest way to exercise your rights.