Privacy Policy
Last updated: 17 October 2026
1. Who we are
QUIPI Skin is an application operated by ARGEVASPEAND, S.L. (NRT L-712670-R), with registered address at Edifici Ginesta, Planta baixa 4a, El Tarter, AD100 Canillo, Principat d'Andorra ("Quipi", "we", "us"). Contact: quipi@quipiapp.com.
Representative in the European Union (Art. 27 GDPR): Hacker Mate Brand Incorporation Group, S.L. (CIF B-75626754), P. Sant Joan 9, 17500 Ripoll (Girona), Spain. European users may contact either entity.
2. What data we process
- Account data: your email address and login credentials.
- Photographs of your skin: the facial images you capture or upload for your analyses and, if you use "Ask Quipi", photographs of the skin area you are asking about.
- Photographs of your products: images of your cosmetics, used to identify them.
- Consultations ("Ask Quipi"): the questions you write and the answers generated. The photograph you send with a consultation is processed only to generate the answer and is not stored.
- Care profile: your answers to the questionnaire: age range, goal, facial areas you want to care for, how your skin feels, whether it gets sensitive with new products, current routine, time you can dedicate, sunscreen and makeup use, approximate budget, experience with facial massage, lifestyle, ingredients you prefer to avoid, whether you have had a cosmetic facial treatment in the last 4 weeks (which one and when) and, if you wish, a free text in your own words.
- Results and activity: the analyses generated, your product shelf and how each product works for you (it works, you notice nothing, it doesn't absorb, or you didn't have a good experience with it), your routine, your habits and streak, your skin diary, the rituals you complete, your reminders, your ratings of the app and the clicks you make on store links (store, product and country).
- Purchases: your subscription status and in-app purchases. Payments are processed entirely by Apple and Google; we never see your banking details.
We do not ask for health data. QUIPI Skin is a cosmetic care app: we do not ask about illnesses, pregnancy, diagnoses, medical treatments or any other health information. The question about recent cosmetic facial treatments (for example, a peel or a facial cleansing) is optional and is only used to adapt your routine while your skin recovers: QUIPI stops taking it into account after 4 weeks, and you can change it at any time in your profile. Please do not include health information in free-text fields or in your consultations. If you do, we will only use it to provide the service you request, and it will be deleted with your account.
About your facial photos. They are the most sensitive category of data we process and we give them reinforced protection: (a) they are only captured after your explicit consent in the app, which we record with date and time; (b) they are stored in a private space that only your account can access; (c) they are used exclusively to generate your analysis and show your progress; (d) they are not used to identify you biometrically, are not shared with third parties for commercial purposes and are not used for advertising; (e) you can delete them at any time by deleting your account from within the app.
Photographs sent through "Ask Quipi" are processed to generate your answer and are not kept afterwards.
3. Purposes and legal bases
- Providing the service (skin analysis, routine, rituals, progress, reminders): performance of the contract (Art. 6(1)(b) GDPR) and, for facial images, your explicit consent (Arts. 6(1)(a) and 9(2)(a) GDPR), which you can withdraw at any time by deleting your account or writing to us.
- Managing your purchases and subscriptions, including delivering your full analysis when you subscribe: performance of the contract.
- Sending you notifications: your consent, given when you allow notifications on your device, which you can withdraw in its settings.
- Security and usage limits (preventing abuse of the service, including control of the free analysis): legitimate interest (Art. 6(1)(f) GDPR).
- Measuring which stores and features are useful and improving the product through aggregated metrics: legitimate interest.
4. How the AI analysis works
To generate your analysis, your photograph and profile are sent in encrypted form to our artificial intelligence provider, Anthropic PBC (USA), which acts as a data processor. Under the commercial terms of its API, Anthropic does not use this data to train its models and retains it only for the limited time needed to provide the service and ensure its security. The international transfer is covered by the applicable adequacy decisions and/or standard contractual clauses.
The result of the analysis is indicative and cosmetic in nature: QUIPI Skin does not make medical diagnoses or replace an assessment by a dermatologist.
5. Where your data is stored
Your account, data and photographs are hosted on Supabase, on servers located in London (United Kingdom), a country recognised by the European Commission as providing an adequate level of data protection. Photographs are kept in a private container, accessible only through signed, temporary links tied to your session.
Your own device stores your questionnaire answers until you create your account (they are uploaded when you do and then removed from the device) and your app preferences, such as the days and time of your rituals.
6. How long we keep your data
For as long as your account is active. If you delete your account from the app (Home → "Delete my account and data"), your photos, analyses (including the full version of your free analysis that we keep so we can deliver it if you subscribe), profile, product shelf, habits, diary, rituals, reminders, store clicks and subscription data are deleted immediately and irreversibly. If you had already used your free analysis, we keep only an encrypted, irreversible fingerprint of your email (not the email itself) so that another free analysis cannot be obtained by creating a new account; this fingerprint cannot be used to identify or contact you. We may keep minimal records required by legal obligations (e.g. invoicing) for the legally required periods. Deleting your account does not cancel an active subscription: cancel it in your app store.
7. Who we share data with
- Supabase Inc.: database and file hosting (London, United Kingdom).
- Anthropic PBC: AI processing to generate your analysis and consultations (USA).
- RevenueCat, Inc.: purchase and subscription management (USA). It receives an internal identifier for your account, without your name or photos, and your in-app purchase history.
- Apple / Google: billing and management of purchases in their stores.
- Google LLC: download of the fonts used by the app (it receives your device's IP address).
All of them act as data processors under contract; transfers outside the European Economic Area are covered by adequacy decisions and/or standard contractual clauses. We do not sell your data or share it with third parties for advertising purposes.
Store links. If you tap a link to an external store (for example, Amazon), you leave the app and that store processes your data as an independent controller, under its own privacy policy. Some of these links are affiliate links: the store knows the visit comes from Quipi, but we do not send it your email, photos or profile.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by writing to quipi@quipiapp.com. You can carry out full erasure yourself, instantly, from within the app. If you believe we have not handled your rights properly, you can lodge a complaint with a supervisory authority: the APDA (Andorra), the AEPD (Spain) or the authority of your EU country of residence.
9. Minors
QUIPI Skin is not intended for people under 16 and we do not knowingly create accounts for them. If we detect an account belonging to a minor, we will delete it together with its data. The age rating shown in app stores (for example, 9+) only indicates that the app's content is suitable from that age; it is not the minimum age to use it. You must be at least 16 years old to create a QUIPI Skin account.
10. Security
We apply encryption in transit (TLS), per-user isolation through row-level security policies, private file containers and session-based access control. No system is infallible, but we designed QUIPI Skin around the principle of data minimisation: we only ask for the data the service needs.
11. Changes to this policy
If we make material changes, we will tell you in the app before they take effect. The date of the latest version always appears at the top.