illuminateAI Privacy Policy

illuminateAI myMatch app and App Clip · Updated October 7, 2026

01Introduction

We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how illuminateAI, Inc. ("we") collects, uses, discloses and safeguards information when you use the illuminateAI myMatch app and App Clip (together, "the app").

The app is a shade finder: it uses your phone's front camera to measure your skin tone and recommend the closest shade of a product. By using the shade finder, you consent to the use of your camera so that we can measure your skin tone and recommend products.

02Face data and how the app uses it

Camera images. The app uses your phone's front (selfie) camera to measure the colour of select regions of your face (cheeks, forehead and jawline). The measurement is made on your phone. In normal use, photographs and video of your face never leave your phone, and we do not collect, keep, disclose or share them.
Depth and face position. On phones with a TrueDepth camera, the app uses depth data and the positions of your facial features to check that your face is at the right distance and angle. This is processed on your phone only. In normal use it is never uploaded, kept or shared.
No identification. We do not use face data for facial recognition, identity verification, advertising or marketing, and we never sell it.
On-phone storage. The app keeps the files of each scan on your phone so that a scan can be uploaded for debugging if you choose to (section 04). Scans that are not uploaded are deleted from your phone after 7 days.

03What leaves your phone in normal use

Skin colour measurement. When a scan finishes, the app sends two numbers that describe your skin tone, the retailer and product you were looking at, and a random session ID to our recommendation service. The service returns the recommended shade. No image, depth data, facial feature positions, name, email address or device identifier is sent.
The retailer you came from. The recommendation is handed back to the retailer's web page that opened the app and, where the retailer has set it up, to the retailer's own server. It identifies you only by the random session ID. Pages the retailer shows inside the app are the retailer's own and are covered by the retailer's privacy policy.
Request records. Our servers record each request's time, IP address, app and phone software version, retailer, product and session ID, to keep the service working and to prevent abuse.
App settings. The app may download its own settings and assets from our servers. These requests carry no information about you.
No third-party AI services. Your data is processed only by illuminateAI's own software, on your phone and on servers we operate. We do not send it to any third-party AI service.

04Debug data collection, only with your consent

The app has a developer screen that our engineers use to diagnose problems. Nothing is uploaded from it unless you open its upload screen, read the consent screen shown in front of it every time, tap I agree, and then tap Upload now. If you choose No thanks, nothing is uploaded and the app works as normal.

What is uploaded: the scans stored on your phone at that moment. Each scan includes photographs and camera frames of your face (including raw camera images), TrueDepth depth data, the positions of your facial features, colour measurements, the phone model, the app's settings and a random ID for your phone.
Who receives it: illuminateAI, Inc. only. It is stored on our own servers, hosted by Amazon Web Services. It is not sold or shared with anyone else, and only illuminateAI engineers can access it.
Why: to find and fix problems, and to train and improve our shade-matching products.
How long: it is permanently deleted when it is no longer needed for these purposes, and at the latest within three years of your last interaction with us.
Deletion sooner: email info@illuminateai.io with the ID shown on the consent screen, and we will delete the data uploaded from your phone.
Supervised studies: in studies we run on our own devices, paid participants are told about this collection and sign a written consent form before taking part.

We share the skin tone measurement and the recommendation, identified only by a random session ID, with the retailer whose page you came from (section 03).
We use trusted service providers to run our services. Our servers are hosted by Amazon Web Services.
We may share information if required by law, to protect our rights and interests, or in the event of a merger, acquisition or asset sale.

06Data security

We maintain technical, administrative and physical safeguards to protect information against accidental, unlawful or unauthorized disclosure, access or use, and we restrict access on a need-to-know basis. No method of electronic storage is 100% secure.

07Retention and deletion

Recommendations: the recommendation stored for the retailer's page is deleted after 1 day.
Request records: deleted after 30 days.
Scans on your phone: deleted after 7 days unless uploaded. Deleting the app or App Clip removes them at once.
Debug uploads: permanently deleted when no longer needed, and at the latest within three years of your last interaction with us, or sooner on request (section 04).

08Your rights and choices

You have the right to:

access and update your information;
request deletion of your data;
opt out of data collection where permitted by law;
be informed of the purpose and duration of data collection at the time of consent.

09Changes to this policy

We may update this policy to reflect changes in our practices. We will indicate at the top of this page when it was most recently updated, and post a notice through our services for any significant change.

10Contact us

For questions about this policy or to exercise your rights, email info@illuminateai.io.

By using the app you consent to the collection, use and processing of information as described in this privacy policy. Debug data is uploaded only with the separate consent described in section 04.