Privacy Policy & Data Protection

Last Updated: April 2026
Effective Date: February 15, 2026

1. Introduction & Data Protection Commitment

K-Beauty Mirror ("we," "us," "Company") is committed to protecting your privacy and ensuring transparent data practices. This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website and use our services.

We comply with international data protection regulations including GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), and other applicable privacy laws.

2. Information We Collect

2.1 Facial Images

Collection Method: You upload photos via camera or file upload on our platform.
Processing: We process your facial image in real-time using Google Gemini AI vision technology to detect skin characteristics including texture, hydration, sensitivity, tone, and visible concerns.
Retention: Images are NOT stored on our servers. They are deleted immediately after analysis is complete (within seconds).
Third-Party Processing: Your image is processed by Google Gemini. Google's privacy policy applies to this processing: https://policies.google.com/privacy

2.2 Demographic Data

You may optionally provide:

• Age group (18-25, 26-35, 36-45, 45+)
• Gender identification
• Location/City (for environmental data integration)
• Self-reported skin sensitivity level

Purpose: To provide more accurate, personalized recommendations.

2.3 Usage Data

We automatically collect:

• IP address and geolocation data
• Browser type and version
• Device type (mobile, tablet, desktop)
• Pages visited and time spent on each page
• Referrer source (how you found us)
• Clicks and interactions within the Service

2.4 Communication Data

If you contact us via email, we collect:

• Your name and email address
• Message content
• Date and time of communication

3. How We Use Your Information

We use collected information for:

• Providing Services: To generate personalized skin analysis reports and product recommendations
• AI Model Improvement: To improve our AI algorithms using anonymized data (with consent)
• Analytics: To understand user behavior and optimize our Service
• Communication: To respond to your inquiries and provide customer support
• Legal Compliance: To comply with laws and regulations
• Security: To detect and prevent fraud or security threats

4. Data Security Measures

We implement industry-standard security measures to protect your information:

• HTTPS/TLS Encryption: All data transmitted between your device and our servers is encrypted
• No Image Storage: Facial images are not stored, eliminating the primary risk of biometric data breach
• Access Controls: Only authorized personnel have access to user data
• Regular Audits: We conduct regular security audits and vulnerability assessments

Note: While we implement robust security, no system is completely secure. We cannot guarantee absolute security of your information.

5. Third-Party Partners & Data Sharing

5.1 Google Services

• Google Gemini: Processes facial images for AI analysis
• Google Analytics: Tracks website usage (GA4: G-PY9VMC95LT)
• Google AdSense: Delivers targeted advertisements (Publisher ID: ca-pub-5365826450992646)

5.2 Microsoft Clarity

We use Microsoft Clarity to understand user experience and identify usability issues. Clarity may collect session recordings and interactions.

5.3 Olive Young Partnership

When you click product recommendation links, you are directed to Olive Young Global. We do not share your personal data with Olive Young, but they may collect data according to their own privacy policy: https://www.oliveyoung.co.kr/

5.4 Other Sharing

We DO NOT sell your personal data to marketers or advertisers. We only share data with third parties as necessary to provide our Service or comply with legal obligations.

6. International Data Transfers

Our Service is based in the Republic of Korea. If you access our Service from outside Korea, your data may be transferred internationally. By using our Service, you consent to such transfers.

7. Your Privacy Rights (GDPR, CCPA, etc.)

For EU Residents (GDPR Rights)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Deletion: Request deletion of your data ("Right to be Forgotten")
• Restriction: Restrict how we use your data
• Portability: Receive your data in a portable format
• Objection: Object to certain data processing activities
• Withdraw Consent: Withdraw previous consent to data processing

For California Residents (CCPA Rights)

You have the right to:

• Know what personal information we collect
• Know whether personal information is sold or disclosed
• Say no to the sale of personal information
• Access your personal information
• Request deletion of your information

How to Exercise Your Rights

To exercise any of these rights, contact us at: simshome.store@gmail.com
Include "GDPR Request" or "CCPA Request" in your subject line, and we will respond within 30 days.

8. Data Retention

• Facial Images: Deleted immediately after analysis (within seconds)
• Account Data: Retained as long as you use our Service
• Analytics Data: Retained for 26 months by Google Analytics
• Communication Records: Retained for 2 years for customer service purposes
• Legal Obligations: Retained as required by law

9. Children's Privacy

Our Service is not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect data from children. If we become aware that we have collected data from a child, we will delete it immediately.

10. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

• Remember your preferences
• Understand user behavior
• Personalize your experience
• Deliver advertisements

See our Cookie Policy for complete details and your cookie choices.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our Service constitutes acceptance of any changes.

12. Contact Us & Data Protection Officer

For privacy questions, requests, or concerns:
Email: simshome.store@gmail.com
Address: Gangnam-daero, Seoul, Republic of Korea
Response Time: We aim to respond within 30 days