hu • reum ("we," "our," or "the app") respects your privacy. This Privacy Policy explains what personal information we collect, how we collect it, how we use it, who we share it with, and how long we keep it. By using the app you agree to the practices described here. If you do not agree, please do not use the AI-powered features.
hu • reum is a personal beauty, style, and journaling app. Some features rely on third-party artificial intelligence services to process your face photo, full-body photo, or voice recording and return a personalized analysis. These features are strictly opt-in and are only activated after you review and grant in-app consent.
The app collects only the information necessary to provide the features you request:
We do not collect your real name, email address, phone number, location, contacts, browsing history, advertising identifier, or any biometric identifier that could uniquely identify you as an individual. We do not perform face recognition, face matching, face identification, or create any face template or faceprint.
When you tap "Analyze My Photo" and grant explicit in-app consent, your face photo is sent over an encrypted HTTPS connection to our secure backend (hosted on OnSpace Cloud, built on Supabase) and then relayed to Google's Gemini AI model. Gemini analyzes visible attributes of the image (skin undertone, face shape, eye shape, general coloring) and returns text-based results, such as your seasonal color palette and personalized makeup suggestions.
Face data is used only for the single purpose stated above. We do not use it for advertising, marketing, profiling, training AI models, identification, or any other purpose. We never sell, rent, or otherwise disclose face data to any party other than the AI processor described below.
Face photos, body photos, and voice recordings are processed by Google Gemini, operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), through the Google Generative Language API. Under Google's terms for paid Gemini API use, submitted data is not used to train Google's generative models and is retained only transiently for service delivery. Google's applicable privacy terms are available at https://ai.google.dev/gemini-api/terms and https://policies.google.com/privacy. Google provides protections equal to or greater than those described in this policy.
Requests are relayed by our backend infrastructure (Supabase Edge Functions, Supabase Inc.), which also acts as a data processor and does not access or retain the content of the media beyond the moment of transmission.