Privacy Policy

Account information (name, email), assessment responses, daily skin log entries (inflammation, texture, pigmentation, oiliness, dryness, breakouts, free-text notes), menstrual cycle information (such as last period date and cycle length), skin photos you submit, basic device and usage data, and payment and shipping metadata processed by our payment and fulfillment providers.

To deliver and personalize the Service, generate scan analyses, show your cycle phase and tracking history, produce the personalized phase and skin guidance shown in the app, communicate with you, process payments and ship the seasonal subscription, prevent fraud, and meet legal obligations. Vetra does not currently perform automated or AI-based analysis of your skin photos. If we add it, we will request a separate opt-in consent first.

We treat menstrual cycle and daily skin-tracking data as sensitive personal data. We do not sell it, do not share it with advertisers, data brokers, or insurers, and do not use it to target advertising.

Use of cycle and skin-tracking data to improve our methodology or inform de-identified, aggregated research is a separate, optional opt-in. It is not bundled into your acceptance of the Terms. You can grant or withdraw research consent from your account settings at any time. Withdrawing research consent does not affect your access to the free tracking, cycle sync, phase view, or patterns.

Skin photos you upload are treated as sensitive personal data. They are stored privately and visible only to Vetra and to you.

We share data only with the service providers required to operate Vetra (hosting, payments, email, shipping and fulfillment, analytics) under written data processing agreements. We do not sell your personal information.

We retain your data for as long as your account is active. You may request deletion at any time and we will erase your data, including cycle and skin-tracking data, within [TODO: retention window, default 30] days unless retention is legally required (for example tax, fraud, or safety records related to product shipments).

Each separate consent is recorded with the consent type, the version of the disclosure shown to you, and a timestamp. This covers acceptance of the Terms, the optional research-use consent for cycle and skin-tracking data, and the subscription auto-renewal acknowledgement shown at checkout.

Subject to your jurisdiction (including GDPR and CCPA), you have the right to access, correct, delete, export, restrict, or object to processing of your personal data. To exercise these rights, message Vetra through the in-app message thread or email [TODO: real privacy contact email, for example privacy@vetra].

We use encryption in transit and at rest, role-based access controls, and routine security reviews. No system is perfectly secure; we will notify affected users of any data breach as required by law.

Where we transfer data internationally, we rely on Standard Contractual Clauses or equivalent safeguards.

Vetra is intended for adults. You must be at least 18 years old, or the age of majority in your jurisdiction, to use Vetra. We do not knowingly collect data from anyone under 18.

For privacy questions, message Vetra through the in-app message thread or email [TODO: real privacy contact email, for example privacy@vetra].