Privacy Policy

1. Who we are

KBeautyTone ("we", "us", or "our") offers photo-based personal color exploration and K-Beauty product discovery. For privacy questions, contact xmas42@naver.com.

2. What data we collect

• Uploaded photos. Your browser sends the image to our analysis server. On a cache miss, the server forwards it to the connected external AI provider. If the provider is unavailable or the request fails, analysis is unavailable rather than substituted with a generated personal result. Provider-side processing and retention are governed by the provider's own terms and privacy policy.
• Analytics data. Google Analytics 4 is initialized only when a measurement ID is configured. The site does not show a separate analytics consent control; when enabled, Google may use cookies or similar identifiers to measure page views and interaction events. Photo content and email addresses are not included in analytics events.
• Feedback submissions. If you submit a rating or comment through our feedback form, we store your rating, optional nickname, and comment in our database. No email address is required for feedback.
• Shopping lists. The result page shows the list without asking for an email address, and provides an option to save a copy. Email delivery is not configured, so the email-request endpoint no longer accepts or stores new requests. Older requests that were saved before this change remain in the database until deleted on request.
• Contact enquiries. The contact link opens your email client; messages you send are handled by your email provider and ours.
• Language preference. We store your selected language (English, Korean, or Japanese) in your browser's local storage. This data never leaves your device.

3. How we use your data

• Photos are processed to provide the requested cosmetic color analysis. The analysis is an estimate, not a medical diagnosis. When no AI provider is available, the app returns an error rather than a sample result.
• Analytics are used to understand how users interact with the site and to improve the product.
• Feedback is used to improve our recommendations and service quality.
• Shopping lists are shown on the result page and can be saved there. We do not collect new email requests for them.

4. Photo processing and sharing

Your original photo is sent to our server for analysis. If the result is not already in the cache, the server forwards the photo to the connected external AI provider; if that provider is unavailable, analysis fails rather than generating a personal result. The application does not save the original photo in its database. It retains a SHA-256 fingerprint of the image and the successful analysis result in a database cache to serve repeat requests; these cache entries have no automatic expiry. The fingerprint is not the photo itself, but it is a stable identifier for repeat uploads. A temporary photo preview remains in browser memory while the upload component is active and is released when the preview is canceled, replaced, or the component is closed. The provider, hosting infrastructure, and backups may handle request data under their own retention policies.

If you open “More details,” we store only the analysis and card details needed for a shareable result card, not the original photo. New shared cards do not display your uploaded photo. Previously generated card images may still contain a photo and can remain in storage or third-party caches until removed or expired; separately uploaded card images are subject to a 90-day cleanup process.

5. Data retention

• Analysis photos and cache: The application does not retain the original photo in its database. The SHA-256 fingerprint and successful analysis result remain in the database cache without an automatic expiry. Contact us to request cache deletion; because cache records are keyed by a photo fingerprint rather than an account, we may need information to identify the entry. Provider, hosting, and backup retention may follow separate policies.
• Shared result cards: We retain result and card data, not original photos. Previously uploaded composite card images are scheduled for cleanup after 90 days in our storage; external sharing services may keep their own copies. Contact us to request deletion of stored card data.
• Older shopping list requests: Email addresses, color seasons, and submission dates saved before email requests were disabled remain until deleted on request. New requests are not accepted or stored.
• Feedback: Ratings, optional nicknames, and comments remain in the database without an automatic expiry. Identifiable entries are deleted manually on a valid request.
• Analytics: Google Analytics event-level data may be retained for up to 14 months; the property's exact retention setting has not been verified. Google may apply its own retention schedule.
• Language preference: Stored locally in your browser until you clear browser storage.

6. Cookies and tracking

Google Analytics loads only when a measurement ID is configured and may use cookies or similar technologies. The photo-upload notice relates to photo processing; it does not control or delay analytics. You can manage cookies in your browser.

7. Affiliate links

Some product links are affiliate links. If you make a qualifying purchase through one, we may earn a commission at no extra cost to you. We record anonymous outbound-click events when analytics is enabled; we do not receive your payment details from this site.

8. Your rights and data deletion

To ask about your data or request deletion of a cache entry, feedback, a stored card, or an older shopping-list email request, contact xmas42@naver.com with your nickname and approximate submission date, or other information that helps identify your record. We process identifiable deletion requests within 30 days of receiving them; if we cannot identify the record, we will contact you for more information. Analysis-cache entries are linked to an image fingerprint, not to a user account, so identifying a specific entry may require additional information.

The analysis cache stores an image fingerprint and result. Older composite card images and copies held by external providers or sharing services may remain separately; contact us about these records rather than assuming they disappear immediately.

9. Changes to this policy

We may update this Privacy Policy as the service evolves. Changes will be reflected on this page with an updated date. We encourage you to review this page periodically.

10. Contact

Questions about this policy? Email us at xmas42@naver.com.