Privacy Policy

1. Introduction

DAIKY INC ("we", "us", or "our") is a corporation incorporated under the laws of the State of Delaware, United States. We are committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy describes how we collect, use, store, and share information when you use:

• the Daiky mobile application, and
• the Daiky website (https://daiky.us)

(together, the "Service").

This Policy applies to all users of the Service, regardless of location. Where users are located in the European Union or European Economic Area (EU/EEA), we additionally comply with the General Data Protection Regulation (GDPR) to the extent applicable. Where users are located in California, we comply with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

A. Information You Provide Voluntarily

Account Data

When you create an account (including via social login), we may collect:

• Email address
• Name or username
• Profile picture (if provided)

Skin & Cosmetic Profile Data

To personalize cosmetic analysis and recommendations, you may voluntarily provide:

• Skin type (e.g., oily, dry, sensitive)
• Cosmetic preferences
• Known cosmetic-related allergies or sensitivities

User-Generated Content

You may choose to submit content such as reviews, comments, or images of cosmetic products.

B. Information Collected Automatically

Usage Data

Products scanned, features used, interaction history, and time spent in the App.

Device & Technical Data

IP address, device model, operating system and app version, unique device identifiers.

Analytics Data

We may collect analytics data to understand how the Service is used and to improve performance and user experience. For EU/EEA users, analytics requiring consent are activated only after you have provided it.

C. App Permissions

Camera Access

We request access to your device camera to enable barcode scanning. Camera access is used solely for this purpose and is not used to record you. You may grant or revoke this permission at any time in your device settings.

D. Social Logins

If you sign in using a third-party provider, we may receive basic profile information (such as your name, email address, and profile picture) as permitted by your settings with that provider. We use this information only to create and secure your account. We do not control how third-party providers process your data.

3. Product Images — Accuracy Disclaimer

The Service may display images associated with cosmetic products. These images are sourced from third-party databases, product manufacturers, or user-submitted content and are provided for illustrative purposes only.

Daiky does not guarantee that any image displayed accurately corresponds to the specific product referenced, its current packaging, formulation, size, or variant. Images may be:

• Outdated or no longer reflective of current packaging or design
• Associated with a different variant, size, or version of the same product
• Incorrectly matched due to barcode conflicts, database errors, or product relabeling
• Temporarily unavailable or replaced by a placeholder image

You should always verify product information by reading the physical label of the product in your possession. Daiky shall not be liable for any confusion, misidentification, or decision made in reliance on an incorrectly displayed image.

4. Subscriptions & Payments

Daiky offers paid subscriptions through in-app purchases. Payments are processed securely by third-party providers (such as Apple App Store, Google Play Store, and RevenueCat). We do not collect or store full payment card details.

Payment-related data (such as transaction identifiers or subscription status) is used only to manage subscriptions, enable premium features, and handle billing, renewals, and cancellations.

5. How We Use Your Information

We use the information we collect to:

• Provide the Service: display product scores, ingredient analyses, scan history, and account features
• Personalization: adapt recommendations based on your skin profile and preferences, subject to your consent where required
• Service Improvement: analyze usage trends to improve features, algorithms, and user experience
• Security & Fraud Prevention: protect users, systems, and infrastructure from misuse
• AI & My Daiky: My Daiky conversations and certain automated features (ingredient analysis, scoring, Usage tab) are processed in real time via third-party AI providers and are not stored by Daiky; no conversation history is retained in our systems
• Anonymized Analytics: produce market insights and research from aggregated, de-identified data from which no individual user can be identified

6. Legal Bases for Processing (EU/EEA Users — GDPR)

For users in the EU/EEA, we process personal data under the following legal bases:

• Performance of a Contract: to deliver core Service features
• Explicit Consent (Article 9(2)(a) GDPR): for allergy and sensitivity data, and any other data that may qualify as sensitive personal data
• Consent: for analytics, optional personalization features, and non-essential cookies
• Legitimate Interests: for security, fraud prevention, and anonymized analytics
• Legal Obligations: where required by applicable law

7. Cookies & Similar Technologies

Our website may use cookies and similar technologies for basic functionality, performance, and analytics. Where required by law, we request your consent before placing non-essential cookies. You can manage your preferences through your browser settings or our consent banner.

8. Data Storage & International Transfers

We are a U.S.-based company and your data may be processed and stored on servers located in the United States. By using the Service, you acknowledge that your data may be transferred to and processed in the United States, where privacy laws may differ from those in your country.

For transfers from the EU/EEA to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as an appropriate safeguard.

9. Data Sharing

We do not sell your personal information.

We may share data only with trusted service providers who assist us in operating and improving the Service, including hosting and infrastructure, analytics and performance monitoring, crash reporting, customer support, and payment and subscription management. These providers are permitted to process your data only as directed by us and subject to contractual confidentiality obligations.

My Daiky — AI Infrastructure

My Daiky conversations and certain automated features of the Service (including ingredient analysis, scoring, and the Usage tab) are processed in real time via the APIs of Google LLC (Mountain View, California, United States) and OpenAI (OpenAI, L.L.C., San Francisco, California, United States), each acting as a technical sub-processor. This data transits through their servers only for the time required to process the request and is not stored by Daiky.

Google and OpenAI process this data in accordance with their respective contractual commitments and privacy policies, available at https://policies.google.com/privacy and https://openai.com/policies/privacy-policy. We recommend that you do not share sensitive personal information in your conversations with My Daiky.

We may also disclose data where required by U.S. federal or state law, court order, or legal process, or in connection with a corporate transaction such as a merger or acquisition, subject to appropriate safeguards.

10. Data Retention

• Account data: retained while your account is active and deleted within 30 days of a confirmed account deletion request
• Skin and allergy profile data: deleted promptly upon withdrawal of consent or account deletion
• User-generated content: deleted within 30 days after account deletion
• Subscription and transaction records: retained as required by applicable accounting and legal obligations (generally 5 to 7 years under U.S. law)
• Anonymized and aggregated data: may be retained indefinitely, as no individual can be identified from such data

11. Data Security

We implement reasonable and appropriate technical and organizational measures to protect your information against unauthorized access, loss, or misuse. However, no system or transmission over the internet can be guaranteed to be 100% secure. Your use of the Service is at your own risk.

12. Your Privacy Rights

Depending on your location, you may have the following rights:

All Users

• Request access to the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time (for consent-based processing), without affecting prior lawful processing

EU/EEA Users (GDPR)

• Right to data portability
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your national data protection authority (e.g., CNIL for French residents)

California Residents (CCPA/CPRA)

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt out of the sale of personal information — we do not sell personal information
• Right to non-discrimination for exercising your rights

To exercise any of these rights, you may initiate account deletion directly in the App settings or contact us at contact@daiky.us.

13. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at contact@daiky.us.

14. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service prior to taking effect. Your continued use of the Service after such notice constitutes your acceptance of the updated Policy.

15. Contact

For any questions, requests, or concerns regarding this Privacy Policy, please contact:

DAIKY INC
1207 Delaware Ave STE 824
Wilmington, DE 19806
United States
Email: contact@daiky.us