Back Akmata · Legal Pilot v1.0
Privacy Policy
Last updated: March 2026 · Version 1.0 · Pilot
Summary

Akmata collects your skin data to generate personalised routines. Your photos are never stored. Your data is held in the EU and you can delete it at any time.

1. Who We Are

Akmata ("we", "us") operates the skincare platform at akmata.com and is the data controller for all personal data collected. Contact: privacy@akmata.com

2. Data We Collect

CategoryDataPurpose
AccountName, email, hashed password, DOB, country, genderAccount management
Skin profileAI skin type, scores, concerns, routine, selectionsPersonalised routine
Facial imagesReal-time only — never storedAI skin analysis
PreferencesBudget, lifestyle, allergies, philosophyRefine recommendations
BehaviouralFavourites, cart, ritual selectionsSync across devices
TechnicalSession tokens, password reset tokens (1h)Security

3. Data Storage

Your data is stored in Supabase — GDPR-compliant cloud database in Frankfurt, Germany (EU). Encrypted at rest (AES-256) and in transit (TLS 1.2+). A local copy is kept in your browser's localStorage for offline access.

4. Third-Party Services

ServiceProviderPurposeLocation
DatabaseSupabaseAccount & data storageFrankfurt, EU
AI AnalysisAnthropic / ClaudeSkin scan & routine generationUS (API only)
EmailResendPassword reset onlyUS
HostingCloudflare PagesWeb hosting & CDNGlobal

No advertising networks, tracking pixels, or marketing analytics. No personal data is shared with third parties for commercial purposes.

5. Facial Image Processing

When you submit a photo, it is transmitted to Anthropic's Claude Vision API in real-time. Akmata never stores your facial images. Only the structured results (skin type, scores) are saved. No personal identifiers are sent to Anthropic.

6. Data Retention

Data typeRetention
Account dataWhile active. Deleted within 30 days of erasure request.
Skin analysesUntil deleted by user or account erasure.
Facial imagesNever stored — real-time only.
Password reset tokensExpire after 1 hour.
Deleted accountsMarked deleted immediately; purged within 30 days.

7. International Transfers

Data is primarily stored in the EU (Supabase, Frankfurt). AI processing via Anthropic involves transfer to the US under Standard Contractual Clauses (SCCs). No personal identifiers (name, email) are included in AI API calls.

8. Contact

Privacy: privacy@akmata.com  ·  GDPR: gdpr@akmata.com

Terms of Use
March 2026 · Pilot Version

1. Acceptance

By creating an account and using Akmata ("the Service"), you agree to these Terms in full.

2. The Service

Akmata is an AI-powered personalised skincare platform providing skin analysis via computer vision, personalised routine generation, and curated product recommendations. This is a pilot version under active development — features may change without notice.

3. Account

You must provide accurate information. You are responsible for maintaining the confidentiality of your credentials. Notify privacy@akmata.com immediately if you suspect unauthorised access.

4. Medical Disclaimer

Important

Akmata's AI recommendations are for informational and cosmetic guidance only. They do not constitute medical, dermatological, or clinical advice. Always consult a qualified dermatologist for medical skin concerns.

5. Products & Purchases

Product prices are sourced from third-party retailers and may vary. Akmata is not responsible for retailer pricing, availability, or delivery. The marketplace checkout is a pilot feature.

6. Affiliate Relationships

Akmata participates in affiliate programmes (Awin, CJ Affiliate) and may receive commissions from purchases. This does not affect the price you pay or the objectivity of AI recommendations.

7. Intellectual Property

All content, design, code, and AI-generated routines are the intellectual property of Akmata. You may not copy, redistribute, or reverse-engineer any part of the Service without written permission.

8. Prohibited Uses

  • Using the Service for any unlawful purpose
  • Attempting to access other users' accounts or data
  • Scraping, crawling, or extracting data from the Service
  • Sharing pilot access credentials with third parties

9. Limitation of Liability

To the fullest extent permitted by law, Akmata shall not be liable for any indirect, incidental, or consequential damages arising from use of the Service. Our total liability shall not exceed the amount paid in the preceding 12 months.

10. Governing Law

These Terms are governed by the laws of Spain. Disputes shall be submitted to the courts of Barcelona, Spain.

11. Contact

legal@akmata.com

Pilot Access Agreement
March 2026 · Private Beta
Applies to all pilot participants

By accepting these terms, you agree to treat all Akmata content, features, and data as confidential during the pilot phase.

1. Pilot Status

Akmata is in a private pilot phase. Access is by invitation only. The platform is under active development and features may be incomplete or subject to change.

2. Confidentiality Obligation

As a pilot participant, you agree to:

  • Not share your login credentials, access links, or the app URL with anyone outside the pilot group
  • Not share screenshots, screen recordings, or descriptions of the app's features or design on social media or public platforms
  • Not share AI-generated routines, product recommendations, or skin analysis results that could identify the platform
  • Not disclose the existence, features, or technology of Akmata to competitors or third parties without prior written consent

3. Purpose of Participation

As a pilot participant, you are invited to test core features, provide honest feedback, report bugs, and suggest improvements.

4. Feedback

Any feedback or suggestions you provide may be used by Akmata to improve the Service without compensation or attribution.

5. No Warranty During Pilot

The pilot version is provided "as is". Akmata makes no warranties regarding uptime, accuracy, or completeness of features. AI recommendations during the pilot are intended for testing purposes.

6. Duration & Termination

This agreement remains in effect until the pilot phase ends. Akmata reserves the right to revoke pilot access at any time, including in the event of breach of this agreement.

7. Contact

Pilot enquiries: pilot@akmata.com

Data & AI Notice
March 2026

1. AI Models Used

ModelTaskInput sentOutput
Claude Sonnet (Vision)Facial skin analysisPhoto only — no personal identifiersSkin type, scores, concerns
Claude HaikuRoutine generationSkin profile text — no photos or namePersonalised routine + product list

2. Non-Disclosure & Training

Important

Anthropic does not use API inputs to train its models by default. Your skin data and photos are not used to improve Anthropic's AI. See anthropic.com/privacy for full details.

Akmata does not sell, rent, or share your personal data or skin analysis with any third party for commercial or advertising purposes.

3. Data Minimisation

  • Photos are transmitted and immediately discarded — never stored
  • Only the minimum skin profile data needed is sent to Claude
  • Your name, email, and date of birth are never sent to any AI model
  • Recommendations are generated from your anonymous skin profile only

4. AI Accuracy & Limitations

AI analysis quality depends on photo lighting, resolution, and angle. The following are approximations, not clinical measurements: skin score, apparent age, oiliness/acne/redness levels, pore size, skin type classification. Always consult a qualified dermatologist for accurate diagnosis.

5. Caching

To reduce API calls and improve speed, Akmata caches your routine locally. You can force a fresh analysis at any time using the "New Analysis" button.

Cookie Policy
March 2026
Summary

Akmata uses no advertising cookies and no third-party tracking. We use only essential browser storage to run the app.

1. What We Use

StorageContentsDuration
localStorageAccount, skin analysis, ritual, cart, favourites, pilot acceptanceUntil sign out or browser clear
sessionStorageOne-time in-session flagsCleared on tab close
Service Worker cacheStatic files only (HTML, CSS, JS) — no personal dataUntil app update

2. What We Do Not Use

  • Google Analytics or any web analytics platform
  • Facebook Pixel or Meta tracking
  • Advertising networks or retargeting pixels
  • Third-party tracking cookies of any kind
  • Device fingerprinting

3. How to Clear Your Data

  1. Sign Out — clears your session. Cloud data is retained.
  2. Delete Account — from your Profile page. Cloud data purged within 30 days.
  3. Browser settings — clear site data for akmata.com in your browser's privacy settings.
Your GDPR Rights
March 2026 · EU General Data Protection Regulation
Who this applies to

These rights apply if you are located in the EEA, Switzerland, or the United Kingdom. Similar rights may apply under your local law elsewhere.

Your Eight Rights

Art. 15
Right of Access
Request a full copy of all personal data we hold about you, including skin analyses and processing history.
Art. 16
Right to Rectification
Correct inaccurate personal data directly from your Profile page, or contact us to update any field.
Art. 17
Right to Erasure
Request complete deletion of your account and all data. Actioned within 30 days. Available directly from your Profile page.
Art. 18
Right to Restriction
Request that we restrict processing of your data while a dispute or complaint is being resolved.
Art. 20
Right to Portability
Request your personal data in a structured, machine-readable format (JSON or CSV) to transfer to another service.
Art. 21
Right to Object
Object to specific processing activities, including any processing based on legitimate interests.
Art. 7
Withdraw Consent
Withdraw consent for AI facial analysis at any time by not submitting photos, or for data processing by deleting your account.
Art. 22
Automated Decisions
Request human review of decisions made about you by AI. Our AI is for guidance only — no decisions with legal effect are automated.

Legal Basis for Processing

Processing activityLegal basisGDPR Art.
Account creation & managementContract — necessary to provide the Service6(1)(b)
Facial photo analysisExplicit consent — given when you choose to submit a photo6(1)(a) + 9(2)(a)
Routine generation from skin profileContract — necessary to deliver your personalised routine6(1)(b)
Password reset emailsLegitimate interest — account security6(1)(f)
Pilot analytics (session data)Legitimate interest — improving the Service6(1)(f)

Special Category Data

Facial images and health-related skin data (acne, rosacea, eczema) may constitute special category data under GDPR Art. 9. We process this data only with your explicit consent, given when you voluntarily submit a photo or declare health conditions. You may withdraw this consent at any time.

Data Storage Location

Your data is stored in Supabase, Frankfurt, Germany (EU). AI processing via Anthropic involves transfer to the US, governed by Standard Contractual Clauses (SCCs) under GDPR Art. 46. No personal identifiers are included in AI API calls.

How to Exercise Your Rights

  • Rectification: Update directly from your Profile page
  • Erasure: Delete your account directly from your Profile page (purged within 30 days)
  • Access / Portability / Restriction / Objection: Email gdpr@akmata.com — we respond within 30 days
Contact us → gdpr@akmata.com

Response Time

We respond to all GDPR requests within 30 calendar days. For complex requests, we may extend this by up to 2 months and will notify you within the first 30 days.

Right to Lodge a Complaint

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the relevant supervisory authority:

Spanish Data Protection Authority

AEPD — Agencia Española de Protección de Datos

Website: aepd.es  ·  Phone: +34 901 100 099

C/ Jorge Juan, 6, 28001 Madrid, Spain

If located in another EU member state, contact your local supervisory authority. Full list at edpb.europa.eu.

Contact

GDPR: gdpr@akmata.com  ·  Privacy: privacy@akmata.com

AKMATA