Privacy Policy

This policy explains what the publisher of Pandu (“Pandu,” “we,” “us”) collects when you use Pandu, what we do with it, and the choices you have. Pandu is the mobile app and the website at yourpandu.com. Together we call them the “Service.”

1. Who we are

The person or legal entity identified as Pandu’s publisher in its Google Play listing is the data controller for the personal information described here. You can reach the publisher through the Pandu support form.

2. What we collect

Things you give us

• Account info: your email address, and a name or nickname if you choose to share one.
• Skin profile:answers you give during onboarding — skin type, sensitivities, concerns, goals, and the routine and product details you choose to share.
• Your routine: the steps you build, the products you save to your shelf, and the daily check-ins you tap off.
• Face scans:photos you take of your skin so Pandu can show your progress over time. See §4.
• Product scans: photos of product labels or barcodes when you ask Pandu to check a product.
• Guided panda conversations: answers you choose in onboarding or other guided check-ins.
• UV place:the city or town you select for a live UV check and that place’s approximate coordinates. Pandu does not request your device’s precise location for this feature.
• Support and launch-list requests: your reply email and the message or signup details you submit on our website.

Things we collect automatically

• Device and app info: device model, OS version, app version, language, timezone.
• Usage events: screens viewed, actions taken (open, scan, complete a step), session length. Used to understand how Pandu is working. Product analytics does not record screen video, camera frames, text input, or face-scan images.
• Crash reports: stack traces and bounded diagnostic context when the app crashes. Crash reporting does not attach screenshots, view text, or session replay.
• A random per-install identifier. We do not use an advertising identifier and we do not ask for cross-app tracking permission.

Things we do not collect

We do not collect precise location, your contacts, microphone audio, or your camera roll beyond the specific photos you choose to share with the app.

3. How we use what we collect

We use the information above to:

• Run the Service: sign you in, save your routine, sync between devices.
• Show your logged progress and surface ingredient or formula signals that may be relevant to the skin concerns you selected. These signals do not predict your reaction.
• Generate short panda messages from limited routine context such as your selected skin concerns, routine step names, and check-in timing. The current app does not send a free-text chat message. See §6.
• Send morning or evening routine reminders you have enabled.
• Retrieve the current and daily maximum UV index for the city you select.
• Diagnose crashes and improve the app.
• Detect and prevent abuse, fraud, and security incidents.
• Comply with our legal obligations.

We do not sell your personal information. We do not run third-party ads inside Pandu. We do not share your data with advertisers or data brokers.

Legal bases (UK / EEA users). Where GDPR applies, we rely on: your consent (face scans, optional profile fields, push notifications); performance of our contract with you (account, routine, shelf, billing); legitimate interest (security, fraud prevention, debugging, basic product analytics); and legal obligation (responding to lawful requests).

4. Face scans

Face scans use your device camera to capture a front-facing photo of your skin. On supported devices, the app may use on-device face-detection or face-alignment APIs only to help you position one face inside the capture guide before taking the photograph. We do not retain, transmit, or use face geometry to build any biometric template. Only the uploaded photograph and the resulting written analysis are saved to your account.

Face scans get extra care.

• They are encrypted in transit and at rest, and tied only to your account.
• We use them to draw your visual timeline and generate the visual skin-pattern analysis you request. A single-photo analysis is an estimate and is not a diagnosis.
• We do not sell or share face scans with advertisers.
• We do not use face scans for biometric identification or to recognise you across other services.
• On-device face geometry or landmarks, when available, are used in-memory only to confirm capture positioning and render the live guide. They are not retained or transmitted.
• The photograph is sent to our AI provider (Anthropic) to generate the requested analysis. Do not submit a scan if you do not want the photograph processed by that provider. See §6.
• You can delete any individual scan in Scan History. Deleting your account starts removal of scans and related active account data; service-provider backups age out under the providers’ retention processes.

5. Children

Pandu is not for children under 13 (or under 16 in the EU and UK). We do not knowingly collect personal information from people in those age groups. If you think a child has given us information, use the support form and we will delete it.

6. Who we share information with

We disclose information only to vendors that help us operate Pandu, as described below, and require them to handle it for those service purposes under their applicable agreements and data-protection terms.

We may also share information when required by law, in response to lawful requests from public authorities, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

If the Pandu business goes through a merger, acquisition, or sale of part of the business, your information may be transferred as part of that deal. We will notify you before your information becomes subject to a different privacy policy.

7. International transfers

We and our vendors may process data in countries outside the country where you live. Where required, we rely on Standard Contractual Clauses or equivalent lawful transfer mechanisms to protect information transferred outside the EEA or UK.

8. How long we keep things

• Account data, routine, shelf: while your account is active.
• Face scans and scan analyses: while your account is active.
• Subscription webhook audit records: up to 180 days.
• Support requests: while open and for up to two years after resolution.
• Launch-list signups: until you ask us to remove the signup.
• Analytics events, crash reports, AI request logs, and backups: according to the retention settings and operational requirements of the service providers listed above.

You can delete your account inside the app (Settings → Account → Delete account) or through our account deletion page. Account deletion starts removal from active application systems. Some processor backups may remain until their normal retention period expires, and we may retain records where the law requires it (for example, billing records for tax purposes).

9. Your rights

Depending on where you live, you may have the right to:

• Access the information we hold about you
• Correct inaccurate information
• Delete your information
• Receive your information in a portable format
• Restrict or object to certain processing
• Withdraw consent you previously gave
• Lodge a complaint with your local data protection authority

To use any of these rights, submit the support form from the address tied to your account and choose Privacy or data request. We will respond within 30 days. We will not treat you any differently for asking.

California residents. Under the CCPA you have the rights listed above. We do not sell personal information, and we do not share it for cross-context behavioral advertising as the CCPA defines that term.

10. Security

We use standard safeguards including TLS in transit, encryption at rest, Firebase security rules, and server-side authorization checks intended to keep accounts separated. No system is perfectly secure; if we discover a breach affecting you, we will notify you as required by law.

11. Cookies and tracking

Pandu does not use third-party advertising cookies. The public website does not currently set advertising or analytics cookies. If that changes, this policy and any required consent controls will be updated first.

12. Changes to this policy

We will update this policy when our practices change. If a change is material, we will let you know inside the app or on the website before it takes effect. The “Last updated” date at the top tells you when the current version was published.

13. Contact

Pandu, Attn: Privacy. Submit a privacy request through the Pandu support page. The current publisher identity is shown in the Google Play listing.