This privacy policy describes how Pibu collects, uses, and protects your information. By using Pibu, you agree to this policy.
We collect only what we need to run the app:
We do not collect: contacts, financial information, browsing history, background location, or third-party health data.
When you submit a selfie for analysis, your photo is sent, together with your quiz responses, to our third-party AI provider, Google (Gemini models running on Google Cloud Vertex AI), through an authenticated server-side function. The photo is held in memory only for the few seconds the analysis takes and is then discarded. We do not write your photo to disk, to cloud storage, or to our database at any point. Neither we nor Google use your data to train any model, under Google Cloud's enterprise terms. Ask Pibu messages, product label photos, and product questions are processed by the same Google AI models in the same in-memory way.
The same in-memory, discard-immediately handling applies to any product-label photo you scan and to the messages you send in Ask Pibu: they are sent to the AI model for processing to answer you and are not written to disk, cloud storage, or our database.
The AI generates a cosmetic analysis. This is not medical advice. Pibu is not a medical device. It identifies visible cosmetic patterns and recommends a daily routine, nothing more.
We do not use your photos, analyses, or any personal data to train AI models, neither our own nor any third party's.
Pibu does not perform facial recognition, does not identify you or anyone else from photos, and does not create faceprints, face geometry maps, or any biometric identifiers or templates. The only face data the app handles is:
We retain face data on our servers for zero time: photos are never written to disk, cloud storage, our database, or logs, by us or by Google, and are never used to train AI models or shared with anyone beyond the Google analysis call described above. The only copies that can outlive an analysis are the ones you explicitly opt to keep on your own device (Progress tracking, off by default), and you can delete those at any time in settings or by deleting the app. What we store in your account is only derived cosmetic scores and text observations, never an image and never any biometric data, and it is permanently erased when you delete your account.
Any third party with whom we share face data will provide the same or equal protection of your face data as stated in this privacy policy. Today the only such third party is Google (Gemini on Google Cloud Vertex AI). We use Google's enterprise Vertex AI service, not its consumer products: under Google Cloud's Generative AI data governance commitments and Google Cloud's enterprise terms, Google does not store your photos and does not use them to train its models. Your photos are processed in memory to generate your analysis and then discarded, and are never shared further. These protections are equal to or stronger than those in this policy, and we will never share face data with any third party that does not commit to the same or equal protection of your face data as described here.
If you are in California (CCPA/CPRA) or the EU/UK (GDPR), you have additional rights including access, deletion, correction, portability, and the right to object to or restrict processing. We do not sell or share your personal information as those terms are defined under California law. To exercise any right, email us at the address below. The legal bases we rely on are your consent (photo analysis) and the performance of our agreement with you (running the app).
We keep your profile, analyses, and routines for as long as your account is active. When you delete your account, all associated data is permanently erased within 30 days. Anonymous crash reports are retained by our error-reporting provider for a limited period and contain no personal identifiers. Your selfie photos are never retained on our servers at all (see "How we use AI").
Pibu is rated 13+ on the App Store. We do not knowingly collect personal data from anyone under 13 (or under the minimum age of digital consent in your country). If you believe a child has provided us data, contact us at the email below and we will delete it.
Pibu is operated by an independent team. References to "we," "us," or "Pibu" mean the team that builds and maintains the app.
We share data only with: our database and authentication provider (Supabase); our AI provider, Google (Gemini on Google Cloud Vertex AI; it receives your cosmetic photos, quiz responses, Ask Pibu messages, and routine and product context, processed in memory and not retained); our crash-reporting provider (anonymous reports); Apple (App Store delivery, Sign in with Apple); Open-Meteo (it receives only the coordinates whose weather and UV you are viewing, never your account data); and, when you have not granted location permission, ipapi.co (it estimates a coarse city from your IP address).
Any third party that receives face data (currently only Google, as described above and in "Face data") is required to provide the same or equal protection of your face data as stated in this policy.
We do not sell or rent your data. We do not show third-party ads.
The Shop tab shows product information sourced from public cosmetics data and retailer listings, and links out to Amazon. Pibu is a participant in the Amazon Associates program, an affiliate program that lets us earn a small commission from qualifying purchases you make through those links, at no extra cost to you. We don't send Amazon any of your Pibu account data; the links simply carry an affiliate tag. Opening a link takes you to Amazon, where Amazon's own privacy policy applies. Pibu doesn't sell or stock any products.
We'll update this page if anything material changes. The "Last updated" date at the top reflects the most recent edit.