Nepika Privacy Policy

Last Updated: June 2026

Nepika Creative Ltd, 20 Wenlock Road, London, N1 7GU, UK

Registered in England 16507702

Data Protection ICO: ZB937756

Nepika (“we,” “our,” “us”) provides AI-assisted skincare insights and tools that use computer vision to analyze your skin. Your privacy is central to how we design our systems. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have.

This Privacy Policy applies to the Nepika mobile application, website, and any related services (“Services”).

1. Information We Collect

We collect the following categories of information to provide and improve our Services.

1.1 Information You Provide

Name
Email address or phone number
Account credentials
Profile information you voluntarily submit
Support communication content

We do not require sensitive personal identifiers unless explicitly needed for a feature.

1.2 Automatically Collected Information

Device type, OS, unique identifiers
IP address and approximate location
Usage logs, crash data, performance data
Interaction patterns (buttons clicked, session length, etc.)

This helps improve stability, reliability, and performance.

1.3 Face Data & Skin Analysis

Nepika's core feature uses your device camera to capture facial images for AI-assisted skin analysis. This section explains what we collect, how we use it, where it is stored, and how long we keep it.

1.3.1 What Face Data We Collect

When you run a skin scan, we collect:

• The facial image(s) you capture with your camera for analysis

• An annotated result image (your scan image with skin-analysis markers)

• Derived skin metrics (e.g., skin type, skin condition scores, detected areas)

We do NOT create or collect faceprints, biometric identity templates, or any facial- recognition / identity-verification data. We do not use your face to identify you.

1.3.2 How We Use Face Data

We use your facial images and derived metrics solely to:

• Perform AI-assisted skin analysis and generate your results

• Show your scan history and track your skin progress over time

• Provide personalized skincare suggestions

We do not use face data for advertising, marketing, or profiling, and we never sell it.

1.3.3 Where Face Data Is Stored

Your annotated scan images are stored securely on our cloud infrastructure (Amazon Web Services – Amazon S3), associated with your account. AI processing is performed using AWS services. Derived skin metrics are stored in our secure database. All data is encrypted in transit (HTTPS/TLS).

1.3.4 Retention & Deletion

We keep your scan images and analysis data while your account is active, so you can view your skin history and track progress. When you delete your account, your face scan data and images are permanently deleted from our systems along with your account. You may request deletion at any time by deleting your account.

1.3.5 Third-Party Processors for Face Data

We use Amazon Web Services (AWS) as a cloud sub-processor to store images and run AI analysis on our behalf. AWS processes this data only to provide services to us and does not use it for its own purposes. We do not share your face data with advertisers, data brokers, or unrelated third parties.

2. How We Use Your Information

We use collected information to: - Provide and personalize the app experience
- Run AI models and generate insights
- Improve reliability, performance, and features
- Maintain account security
- Communicate updates, offers, or important notices
- Prevent fraud and enforce policies
- Comply with legal obligations

We do not sell your personal data.

3. Sharing of Information

We only share information when necessary.

3.1 Service Providers

Trusted partners who help us operate: - Cloud hosting
- Storage
- Analytics
- Customer support
- Security

All partners are contractually bound to: - Use information strictly for service delivery
- Not sell or misuse your data
- Comply with strict privacy and security controls

3.2 Legal Compliance

We may share information to comply with: - Applicable laws
- Lawful legal requests
- Protection of rights, safety, and security

We do not create biometric identifiers (such as faceprints), and we do not use your face data for identification.

4. Data Storage & Retention

4.1 Personal Data

Account and service data are stored only as long as required to: - Provide the service
- Comply with regulations
- Resolve disputes

4.2 Face Data

Your face scan images and analysis data are stored securely while your account is active so you can view your skin history and progress. When you delete your account, your face scan images and analysis data are permanently deleted from our systems.

4.3 Deletion Controls

Users may request deletion of:

• Account data

• Face scan images and analysis data

• Communication data

You can delete your account and associated data at any time from within the app. Deletion of any residual data is completed within 30 days.

5. Security

We implement industry-standard security measures, including: - Encryption in transit and at rest
- Role-based access controls
- Strict data-access auditing
- No storage of biometric identifiers
- Continuous monitoring and updates

6. Children’s Privacy

Nepika is not intended for children under 18. We do not knowingly collect personal data from children.

If a parent believes a child has provided data, contact us for immediate deletion.

7. Professional Member Profiles

Professional members may provide profile information including business details, qualifications, images, social media links, contact information, and other professional content. Certain profile information may be publicly displayed within the Nepika platform and may be visible to users, visitors, and search engines.

8. Community

Information shared through community areas, discussions, comments, events, or member interactions may be visible to other users. Users should avoid posting sensitive, confidential, medical, health or personal information in public community areas.

9. International Users

We comply with global data regulations such as: - GDPR (EU)
- UK GDPR
- CCPA/CPRA (California)
- India DPDP Act (2023)

Your information may be processed in locations where we or our providers operate.

10. Your Rights

Depending on your region, you may have rights to: - Access your data
- Correct inaccuracies
- Request deletion
- Opt out of marketing
- Withdraw consent for facial processing
- Export your data
- File complaints with regulators

11. Third-Party Links

Some features may link to third-party websites. We are not responsible for their privacy practices.

12. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via in-app notices or email.

13. Contact Us

Nepika Privacy Team
Email: support@nepika.com
Website: https://www.nepika.com