Lamar is a cosmetic skincare companion app built on a simple principle: privacy first. This policy explains exactly what data we collect, why, and what happens to it. Questions? Write to info@thurayya.ai.

1. Data we collect

• Account data: your email address and a password (stored encrypted), or sign-in with Google or Apple — in which case we receive only your email and account name from them. This data is used for sign-in and password recovery only — never for marketing, and never shared. We do not ask for your phone number.
• Your skin profile: your answers to the skin questionnaire (skin type, concerns, habits such as sleep, water intake, and sun exposure), used to personalize your routine and advice.
• Scan photos: when you scan your skin or a product, the photo is sent encrypted to our server, which passes it to Anthropic for analysis. Our servers never store any photo, and Anthropic normally deletes it within 30 days. A copy of a skin-scan photo stays on your device only (to show your in-app history), is left out of your phone's cloud backups, and is removed as soon as you request account deletion. Details in section 2.
• Scan results: the cosmetic observations derived from your scans (such as hydration or skin calmness) and product-scan outcomes are saved to your in-app history so you can track your progress.
• Your conversations with Lamar: your messages are processed to generate replies and saved to your chat history. Conversations are private between you and Lamar — no other user can see them; only our own team may review them when needed for safety and quality.
• Your AI permission: your choice on the permission screen (Allow or Not now) and when you made it, so we can respect and record your decision.
• Usage data: general in-app interaction events (such as opening a screen or completing a routine step), used for analytics to improve the app, plus technical crash reports so we can fix problems.
• Subscription: payments are handled entirely by Google Play or the Apple App Store, depending on your device. We never access your card details; we only receive your subscription status (active or not).
• Support messages: when you contact us through the support form on our website or through Contact Lamar in the app, we keep your name (if you give it), your email address, and your message so we can reply and follow up. We use this data for nothing else, and delete it on request.

2. Face photos (face data)

• What we collect: a photo of your face, only when you choose to run a skin scan. Lamar does not use Face ID or depth sensors, does not create a face template or biometric identifier, and never uses your photo to identify you. Before the photo is taken, on-device face detection (Google ML Kit) finds where your face is in the frame so the photo is centred; it runs only on your phone, keeps nothing and sends nothing.
• Why: only to produce cosmetic observations about how your skin looks (such as hydration or even tone) and personalise your routine. Never for advertising or profiling.
• Who receives it: the photo is sent encrypted to our server, which passes it to Anthropic, PBC (USA), provider of the Claude AI model, for this analysis only. It is shared with no one else. We only send it after you tap Allow on the in-app permission screen, and you can withdraw that permission any time in Me > Privacy Center.
• Retention: our servers never save the photo. Anthropic normally deletes it within 30 days and does not use it to train its models; the one exception is content flagged by Anthropic's automated safety systems, which it may keep for up to 2 years to check for misuse. The only lasting copy is on your own device, and it is excluded from iCloud and Google backups.
• What is stored: the text observations from the scan (no image), in your account on Google Firebase.
• Deletion: deleting your account wipes the photos on your device immediately, and the stored observations within 30 days.

3. What we do not collect

• No location data.
• No contacts, messages, or files from your device.
• No ads and no advertising trackers.
• No selling or renting of your data to anyone, ever.

4. How we use data

We use your data for two purposes only: app functionality (scanning, routines, chat, history) and analytics to understand and improve the app. No data is used for advertising or targeted marketing.

5. Service providers

Some Lamar features run through service providers that process data on our behalf, under our instructions only, and may not use it for their own purposes:

• AI analysis and chat: Anthropic (Claude) receives your scan photos, your chat messages and the parts of your skin profile needed to answer — only after you allow it.
• Infrastructure: Google Firebase hosts accounts and data.
• Analytics: Amplitude, for general usage events.
• Crash reporting: Firebase Crashlytics, to detect and fix app crashes.
• AI performance monitoring: Langfuse, to measure the speed, cost and errors of AI requests; it receives no photos, no messages and no skin-profile content.
• Subscriptions: Google Play, the Apple App Store and RevenueCat, for subscription status.
• Email delivery: Resend, to send service emails such as support replies and data exports.

6. Security

All data is transmitted encrypted (TLS). Passwords are stored in a hashed form that cannot be read back.

7. Data retention and deletion

We keep your data while your account is active. At any time you can:

• Delete your account from inside the app (Me → Account settings → Delete account). When you confirm, photos stored on your device are wiped immediately and your account is closed; all your data (skin profile, scan history, conversations) is then permanently deleted from our servers within 30 days at most. Deletion is final and cannot be undone. We may retain limited records only where safety or legal obligations require it.
• Or email info@thurayya.ai to request deletion of your account and data; we complete requests within 30 days at most.

8. Age of users

Lamar is intended for users aged 13 and above. We do not permit accounts for children under 13 and do not knowingly collect their data. If you are a parent or guardian and believe a child under 13 has created an account, contact us and we will delete it immediately.

9. Your rights

You may access, correct, or delete your data at any time, in the app or by contacting us, and withdraw your AI permission in Me > Privacy Center. We will never treat you differently for exercising any of your rights.

10. Not medical advice

Lamar is a cosmetic skincare app, not a medical service. Scan results are cosmetic observations about how your skin looks — not a diagnosis, a health measurement, or treatment advice. For any skin concern, please see a dermatologist.

11. Changes to this policy

If we change this policy, we will publish the updated version here with a new effective date, and notify you in the app if the change is material.