Privacy Policy

Who we are

HueChart is operated by an individual sole proprietor (“we”, “us”) — Aleksandr Borodin, United Arab Emirates. For data-protection purposes we are the data controller for the personal data described here. You can reach us about anything in this policy at devmobileuae@gmail.com. This address works whether or not you have purchased, so you can exercise your rights at any time.

What we collect, why, and our legal basis

Your selfies. The three photos you upload, processed only to generate your color analysis. Our legal basis is your explicit consent, which you give through the ticked consent box on the upload screen; we record the time you gave it. Because facial photographs can be sensitive (special-category) data, we rely on your explicit consent and use the photos for nothing else.

Account & email. Your email address and sign-in identifier, to create your account and tie a purchase to it. Legal basis: performance of our contract with you and our legitimate interest in operating accounts.

Purchase record. Your email, whether the report was paid, and the order reference, kept so your purchase stays linked to your account and we can handle support, refunds and tax obligations. Legal basis: contract and our legal obligations.

Basic technical logs. Standard server and security logs (e.g. IP address, timestamps) generated automatically. Legal basis: our legitimate interest in security and reliability.

Your photos and how long we keep them

Selfies are stored in private, encrypted cloud storage and are deleted automatically the moment your analysis is complete — typically within a minute or two, and in any case no later than 24 hours after upload. We never sell, share or publish your photos, and we do not use them to train any AI or machine-learning model. You may withdraw your consent at any time before processing completes by closing the page or contacting us; withdrawal does not affect processing already carried out.

AI processing (Anthropic)

To analyze your photos we send them to Anthropic, PBC, which operates the Claude model and acts as our data processor under its commercial terms. Anthropic processes the images solely to return the analysis to us and does not use commercial API inputs or outputs to train its models. See anthropic.com/legal/privacy.

Service providers (subprocessors)

We use a small number of vendors strictly to run the service: Anthropic, PBC (AI image analysis), Supabase (authentication, database and encrypted photo storage), Paddle (payment processing as our Merchant of Record) and Vercel (application hosting). Each processes data only on our instructions or, for Paddle, as an independent controller of payment data.

Accounts and payments

Sign-in is handled by Supabase Auth (Google OAuth or a one-time email link). Payments are processed by Paddle, our Merchant of Record, who is the seller of record and handles billing and tax. We never see or store your card details — only your email and order confirmation.

Cookies

We use only strictly necessary cookies: a Supabase session cookie that keeps you signed in. We do not use advertising or analytics cookies and do not track you across other sites, so no cookie banner is required. If this ever changes we will update this policy and ask for consent where the law requires it.

International transfers

Our providers above are based in the United States, so if you are in the EEA or UK your data is transferred outside your country. These transfers are covered by appropriate safeguards, principally the European Commission's Standard Contractual Clauses (and the UK addendum) incorporated into each provider's data processing terms.

Automated processing

Your color season is produced automatically by an AI model. This is informational style guidance, not a decision that produces legal or similarly significant effects. You can re-run an analysis, and you may contact us at devmobileuae@gmail.com if you would like a person to look into your result.

Your rights (EEA / UK)

You have the right to access, correct, erase, restrict or port your personal data, to object to processing, and to withdraw consent at any time. Because photos are auto-deleted within 24 hours, the main data we hold is your email and purchase record. To exercise any right, email devmobileuae@gmail.com and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

California (CCPA / CPRA)

We collect the categories described above: identifiers (email), commercial information (purchase record), internet/technical activity (logs) and sensitive personal information (your photos), used only to provide the service. We do not sell or share your personal information, and we do not use sensitive personal information to infer characteristics. California residents may request access or deletion, and to correct their data, by emailing devmobileuae@gmail.com; we will not discriminate against you for exercising these rights.

Children

HueChart is for adults only. We do not knowingly collect or analyze photos or personal data of anyone under 18. If you believe a minor has used the service, contact us and we will delete the data.

Changes

We may update this policy from time to time. Material changes will be reflected on this page with a new effective date. Questions: devmobileuae@gmail.com.