Privacy Policy

Last updated: 2026-05-28

Kaya helps you scan your skin and skincare products, and builds a personalized routine. Kaya is a cosmetic / beauty app and not a medical device. Scores, summaries, and tips are for cosmetic guidance only and not medical advice.

Photos you capture

When you take a selfie for a skin scan, the image is sent to OpenAI for analysis and is discarded after the response is returned. We do not store your photos on our servers, and they are not used for advertising or model training. The same applies to the front photo and any link you provide for a product scan, which we send to OpenAI together with a web search for the product’s published ingredient list. Only the scores and the AI-generated text response — not the photo — are stored on your device.

What we process

• Skin scan results (numeric scores, AI-generated summary and tips) — stored on your device.
• Your routine, the products you add, and daily water / sleep entries — stored on your device.
• Subscription status (provided by Apple) — used only to unlock paid features.
• Crash and diagnostic information — only if you have enabled “Share with App Developers” in your iOS device settings.

We do not collect your name, email address, location, contacts, or device identifiers (other than what Apple provides as part of the subscription system). We do not sell your data.

Where data lives

Almost everything Kaya stores stays on your iPhone. If you enable iCloud for Kaya, your scan results, routine, and product library are synced through your private iCloud account, which Apple manages — we cannot read it. No content is uploaded to our own servers.

Third-party services

• OpenAI — processes your photos and prompts to generate the skin assessment, the routine, and the product fit analysis. Requests are sent under our API account; OpenAI’s API data is not used to train their models by default.
• Apple — handles all subscription purchases, restores, and family sharing settings.
• swiftlabs.studio API — a thin proxy operated by us that forwards your AI request to OpenAI. The proxy attaches our API key, returns the response, and does not log the request body.

Your rights (GDPR)

You can access, correct, or delete all of your Kaya data at any time. The simplest way: open Profile → Reset onboarding to clear everything on the device, or delete the app to remove all local data. If you have used iCloud sync, delete the Kaya data in your iCloud settings. For any further request — including under EU / UK data protection law — email support@swiftlabs.studio and we will respond within 30 days.

Children

Kaya is not directed to children under 13 and is not designed for them.

Changes to this policy

If we update this policy, we will change the date above. Significant changes will also be announced in the app.

Contact

Questions about privacy: support@swiftlabs.studio.