Skin ProfilePrivacy policy
Last updated: 14 October 2026
1. Introduction
Skin Profile (“we”, “our”, “us”) is a Telegram mini app for checking cosmetic ingredients and the bot @khaps_cosmo_bot. We respect your privacy and are committed to protecting your personal data. This policy explains what data we collect and how we use and protect it.
2. Information we collect
- Telegram data: your user ID, first and last name, username, profile photo and interface language — Telegram passes them when you open the app.
- Skin profile: skin type, specifics (sensitive, atopic) and allergens, if you set them.
- Checks: the ingredient lists you enter or recognise, the product type and area, and analysis results — in your check history; unrecognised ingredient names from your lists — to grow our dictionary.
- My bag: the products you add, the names you give them and the bag review.
- Photos of ingredient lists: sent for recognition and not stored. We keep only the recognised text and a fingerprint of the file so the same photo is not recognised twice; they are not linked to your account.
- AI texts: the conclusions and bag reviews you received.
- Payments: Telegram Stars purchases — what was bought, when, and the payment status. We never receive card details: Telegram processes the payment.
- Our other apps: we check by Telegram ID whether you use Wishlist and keep the yes-or-no answer — so we don’t advertise it to people who already have it.
- Technical data: request information (time, errors) needed to run and protect the service.
3. How we use your information
- To check ingredient lists and factor your skin type and allergens into the score;
- To keep your check history and your bag;
- To add ingredient names that users come across to our dictionary;
- To prepare the AI conclusions and reviews you request;
- To process payments, deliver purchases and handle refunds;
- To answer support requests, improve the service and prevent abuse;
- To comply with legal obligations.
4. Sharing your information
We do not sell your data or share it for advertising. Some data is processed by service providers the service cannot work without:
- Telegram — sign-in, bot messages and Stars payments;
- OCR.space — text recognition on ingredient photos;
- DeepSeek — preparing AI conclusions and reviews. It receives the ingredient list, product type and skin profile; your name, Telegram ID and product names are not sent;
- Wishlist, our other app: we ask it by your Telegram ID whether you use it, and answer the same question from Wishlist about Skin Profile. Only the Telegram ID and a yes-or-no answer are exchanged — nothing else;
- Hosting that runs our server and database.
We may disclose information to law enforcement when required by law or to protect our rights.
5. Data security
We use appropriate measures to protect your information from unauthorised access, alteration, disclosure or destruction: encrypted connections, verification of Telegram's signature on every request and restricted server access.
6. Your rights
Depending on where you live, you may have the right to:
- access your personal data;
- correct inaccurate data — your skin profile can be edited in the app;
- delete your data — products can be removed from your bag in the app, everything else on request to support;
- object to or restrict processing;
- data portability.
To exercise these rights, contact support — we will reply within a reasonable time.
7. Changes to this policy
We may update this policy from time to time. We will tell you about significant changes in the app or by other means; the last update date is shown at the top of this page.
8. Contact
If you have questions or suggestions about this policy, message our support team in Telegram.