- Account info: email, (optional) phone, password hash, display name, avatar.
- Content you create: posts, images, reviews, direct messages, appointment details.
- Usage & device data: login records, IP, device/browser type — for security and abuse prevention.
- (Optional) location: the postal code you enter, used to sort "clinics near me."
- Sensitive personal information — only with your separate consent: the face photo used for AI Skin analysis and the resulting skin scores. That consent is separate from registration and revocable anytime (see §5).
To: provide and maintain the service; when you've enabled personalization, recommend relevant content based on your interests and (if any) AI Skin results — this ranking is invisible to you and can be turned off in Settings; keep the platform safe and moderated; send service-related notifications; and meet legal obligations. We do not use your personal information for third-party ad targeting.
We do not sell your personal information. We share only: with a clinic when you actively book (the minimum needed to complete the booking); with service providers necessary to operate (e.g. cloud hosting, email delivery) under contract; and where required by law or necessary to protect user safety.
All AI inference (skin analysis and content embeddings) runs on awwBeauty's own infrastructure — no third-party AI service, no cross-border transfer.
We use essential cookies to keep you signed in (awb_access / awb_refresh) and to remember basic preferences. We do not embed third-party advertising trackers. You can clear cookies in your browser, but you'll then need to sign in again.
You can: view and edit your profile; export your data; close your account (with a 7-day cooling-off period, then hard deletion); withdraw biometric consent for AI Skin analysis (withdrawal deletes the face images and analysis records); and turn off personalized recommendations in Settings at any time. To exercise a right or ask a question, contact privacy@aww.beauty.
Data is encrypted in transit with TLS; passwords are salted-hashed, never stored in plaintext. We follow data minimization and limited retention: AI Skin face images are deleted after 30 days, and score JSON is kept up to 365 days for trend comparison. No system is perfectly secure; if a data incident affects your rights, we will notify you promptly as required by law.