Petal Privacy Policy
Last updated 3 October 2026
Who we are. Petal ("we") is based in Kosovo. Contact: hello@petalroutine.com. We are the controller of the personal data described here.
The short version
- We use your data to run Petal for you: to check products against your profile, keep your shelf and skin history, and sync Petal Plus.
- We never sell your data, show ads, or track you across other apps or websites. We don't use your data to train AI models.
- Skin concerns, the ingredients you avoid and your skin history can be health data, so we only store them if you agree, and you can remove them at any time.
- Photos you add to your skin history stay on your phone. They are only included in a PDF if you choose to.
- We count how the app is used (for example how many people open it each day), never your skin details or who you are. You can turn this off in the app.
What we collect and why
| Data | Why | Legal basis (GDPR / Kosovo Law No. 06/L-082) |
|---|---|---|
| Account: email, name, profile photo (optional), Sign in with Apple / Google identifiers, or an anonymous guest ID | Create and secure your account, show your photo in the app | Contract |
| Skin type, hair type, preferences (e.g. fragrance-free) and what you mainly use Petal for | Check products against your profile | Contract |
| Skin and scalp concerns (e.g. sensitive, eczema-prone), skin goals and ingredients you avoid | Personal matches. These can be health data, so we only store them if you explicitly agree in the app | Explicit consent (Art. 9(2)(a)); withdraw anytime in Profile → Privacy & data → "Remove my skin details" |
| Skin history ("My skin changed"): what you noticed, where, when it started, notes, check-ins, and the products and other changes you link to it | Show what changed before a reaction, daily check-ins, patterns, and the PDF you can export | Explicit consent (Art. 9(2)(a)) |
| Your shelf and routine: products you use or want, when you started or stopped them, how often, your notes and the price you paid | Your shelf, routine suggestions, "Like this, but…", Shelf check and your skin history | Contract |
| Prices you enter | Shown to other members only as an anonymous average price per product | Legitimate interests (helping members compare prices) |
| "Like this, but…" requests, check-in answers and the notes we learn from them | Better replacement suggestions for you | Contract |
| Products you scan, view, save and compare; product requests; products you add; ingredient lists you photograph; barcodes you match to a product | History, saved lists, "Recently checked", improving the catalogue for everyone | Contract; legitimate interests for catalogue improvements |
| Reviews and review photos you post | Shown publicly with your first name and last initial; your skin profile only if you switch on "Show my skin profile" | Contract; consent for the optional profile label |
| Petal Plus purchase details from Apple (transaction IDs, product, expiry, renewal status) | Unlock Plus and keep it in sync | Contract |
| Security data: App Check attestation, hashed IP address and hashed email in short-lived rate-limit counters, server logs | Prevent abuse and fraud, keep the service running | Legitimate interests |
| App usage: when you open the app and for how long, and a few actions (finishing onboarding, saving a routine, a scan finding a product, opening the Petal Plus screen, purchases), with a random app-install ID, device model, iOS version and country. Never your skin details, never linked to your account | Count active users and see which parts of Petal help, to improve it | Legitimate interests (Art. 6(1)(f)); turn it off anytime in Profile → Privacy & data → "Share usage data" |
Stays on your phone, never uploaded: photos you add to your skin history, and check-in reminders (they're local notifications). Photos you take to read a pack or an ingredient list are read on your phone; only the text is sent.
Not collected: your location, contacts or advertising identifier. App usage is never used for ads or shared with advertisers.
Where it's stored and who processes it
- Google Cloud / Firebase (hosting, database, authentication, storage). Data is stored in the EU (Firestore
eur3, Cloud Functions and Storageeurope-west1). Google may access data from other countries under its Data Processing Terms and the EU Standard Contractual Clauses. - Google Analytics for Firebase (app usage, as above), with advertising features turned off. Google processes it under its Data Processing Terms.
- Apple (App Store payments, Sign in with Apple, App Attest) and Google (Google Sign-In) process data under their own privacy policies when you use them.
- Product information comes from Open Beauty Facts; no personal data is sent to them.
How long we keep it
- Account data, shelf, skin history and reviews: until you delete them or your account (Profile → Privacy & data → Delete account). Deleting your account removes your profile, shelf, skin history, history, saved products, reviews and review photos.
- Removing your skin details deletes your concerns, avoid list, the "clear breakouts" goal and your skin history, including its photos on your phone.
- Guest accounts: deleted automatically after 30 days of inactivity.
- Rate-limit counters: deleted when their window ends (at most 24 hours).
- Server logs: kept up to 30 days.
- App usage: kept up to 14 months, then deleted by Google Analytics.
Your rights
You can access, correct, export, restrict, object to processing of, and delete your data, and withdraw consent at any time without affecting earlier processing. In the app: Profile → Privacy & data → Download my data, Remove my skin details, Delete account. Or email hello@petalroutine.com. You can complain to the Information and Privacy Agency of Kosovo or, if you are in the EU/EEA or UK, to your local data protection authority.
If you're in the US: depending on your state you may have similar rights (to know, access, delete and correct your data, and to opt out of its sale, which we never do). Skin concerns and skin history may be "consumer health data" under laws such as Washington's My Health My Data Act: we only collect them with your consent, use them only to provide Petal to you, never sell them, and delete them when you ask. Use the options above or email hello@petalroutine.com.
Children
Petal is not intended for anyone under 16. We don't knowingly collect data from children.
Changes
We will update this page and the date above, and tell you in the app about material changes.