Legal
Privacy Policy
Last updated: October 24, 2026
This policy explains what information Jouaxia collects, how we use it, and the choices you have. Jouaxia is run by Nita Lee. By using Jouaxia you also agree to our Terms of Service.
Information we collect
- Your account. When you create a My Skin account we collect your email address and the name you choose to give us. Your password is handled by our sign-in provider, Supabase; we never see it.
- Workspaces and teams. If you use a business workspace, we keep its name, its members, and each member's role. When you invite someone, we keep their email address and the invitation until it's used, revoked, or expires.
- Plans and payments. Payments are handled by Stripe. When you buy a plan, Stripe collects your card details and billing address; we never see or store your card number. We receive from Stripe your name, email, the country and postal code used for tax, your plan, and your payment and invoice history.
- Saved lists. Lists you make, and the products, brands, ingredients, and comparisons you save to them.
- Product scans. If you use the product scanner with an account, we keep a record of each scan (when it happened, the brand recognized, and which products matched), unless you turn off scan history in Settings › Privacy. Scan photos are never stored.
- Free scans without an account. If you scan without signing in, we only count your scans so we can give you a few free ones each month. We keep the time of each scan, a random ID stored in a cookie on your device (jouaxia_scan_id), and a scrambled, one-way version of your IP address (never the address itself), which stops the free allowance being reused by clearing cookies. We don't keep what you scanned or what it matched.
- Student verification. If you verify for the Student plan, we email a code to your school address. We don't keep that address: only its domain (like @school.edu), a scrambled, one-way version of the address (so one school email can verify one account), and when your verification started and ends.
- Free pages without a paid plan. Product, brand, ingredient, and comparison pages open in full for a set number of different pages each month (more with a free account, unlimited with a paid plan). To count them we keep which of these pages you opened that month and, if you're not signed in, a random ID stored in a cookie on your device (jouaxia_pages) and a scrambled, one-way version of your IP address (never the address itself). We delete these records after about two months.
- Ideas and support requests. If you share an idea or ask for help in My Skin, we keep what you write, its category, the page you mention, and our replies, so we can answer and follow up. Only you and Jouaxia staff can see them.
- Products you send us. If you send us a product that's missing from the catalog, we keep what you tell us (the brand, product name, where you bought it, the ingredient list, and your notes), the photos you add, and our replies, so we can check the product, add it, and let you know. Before saving a photo we shrink it and remove everything but the picture itself, such as the location and camera details. Only you and Jouaxia staff can see your photos; they're never public. Information about the product itself (its name and ingredients) may be used in the public catalog, but your photos and your name aren't.
- Contact form messages. If you use the contact form, we collect your name, email address, topic, and message, plus your company and phone number if you choose to give them.
- Security records. Sign-in attempts, and changes to accounts, workspaces, and billing (who made them and when), to protect accounts and investigate problems.
- Technical information. Our hosting provider automatically logs basic information such as your IP address, browser type, and the pages you visit, for security and to keep the site running.
- Usage analytics. If you allow performance cookies, we use Google Analytics to see how the site is used, such as the pages you visit, how long you stay, the site that sent you, your general location (city or country), and device type.
How we use your information
- To create your account, sign you in, and run your workspaces and saved lists.
- To process payments, apply your plan, send receipts, and handle refunds and billing questions.
- To send emails you need: confirming your email, invitations, password resets, and receipts. We don't send marketing emails without your permission.
- To read and reply to messages you send us, and to help with support requests.
- To keep the site and accounts secure and working properly.
- To understand which pages and features are useful, so we can improve the site.
We do not sell your personal information, and we do not use it for advertising.
Who can see what
- In a business workspace, its owner and admins can see each member's name, email, and role. Your saved lists and scans are yours: other members, including the owner, can't see them.
- Jouaxia staff can see account, workspace, and billing details when needed to support you, fix problems, or prevent misuse. Staff changes to an account are recorded.
Services we use
| Service | What it does | Information it receives |
|---|---|---|
| Hostinger | Hosts the website and its database | Everything stored on the site |
| Supabase | Account sign-in | Your email address and sign-in details |
| Stripe | Payments, invoices, and refunds | Your name, email, card, and billing details (Stripe's Privacy Policy) |
| Our email delivery provider | Sends account emails | Your email address and the email's content |
| Google Analytics | Site traffic, only if you allow performance cookies | Usage information (Google's Privacy Policy) |
| Google Sign-In | The "Continue with Google" button on the sign-in and sign-up pages, which Google draws on our page | If you use it, your Google name, email, and profile picture; Google also sees that you visited the page (Google's Privacy Policy) |
The chat assistant and the product scanner run on our own server: your questions and photos aren't sent to any outside service, chats aren't saved, and scan photos aren't stored. Photos of products you send us are kept on our own server and database, not with an outside service. Some product pages link to retailers; if you click through, that retailer's own privacy policy applies.
How long we keep information
- Your account, workspaces, and lists: while your account is active. When you ask us to delete your account, we delete it along with your personal workspace, saved lists, and scans.
- Payment and invoice records: kept by Stripe, and by us where needed, for as long as tax and accounting laws require, even after you close your account.
- Student verification: while your account is active; it's deleted with your account.
- Sign-in attempts: 90 days.
- Free scans without an account: about 2 months.
- Ideas and support requests: while your account is active. They're deleted with your account.
- Products you send us, and their photos: while your account is active, so you can see what happened to them. They're deleted with your account, and you can ask us to delete them sooner.
- Contact messages: as long as needed to respond and handle any follow-up.
- Data requests and account deletions: a record of what was asked, by which email, and what we did, kept for 3 years so we can show we handled it.
Your choices and rights
You can ask us to tell you what personal information we hold about you, correct it, or delete it at any time on our Manage My Data page. To protect your information from impostors, we verify every request before acting on it: requests to see your data must come from your signed-in account, and we reply only to that account's email. If you have an account, you can also delete your account yourself in Settings › Privacy. You can change your name and password in your account settings, cancel your plan from Billing, and delete saved lists yourself. Depending on where you live, you may have additional rights under local privacy laws, and we'll honor them.
Health information
Jouaxia doesn't ask for health or pregnancy information. Your saved lists and scans may still suggest something about you, such as an interest in pregnancy-safe products, so we treat them as private: they're never sold, never used for advertising, and never shared with other members of a workspace. You can delete them at any time. Please don't include sensitive health details in contact messages unless you're comfortable sharing them. The information on this site is general education, not medical advice; talk to your doctor about what's right for you.
Children
Jouaxia is not intended for children under 13, and we do not knowingly collect their information. You must be 18 or older to buy a plan.
Cookies
We ask before using any cookies that aren't strictly necessary. See our Cookie Policy for every cookie we use and how to change your choices with Your privacy choices at the bottom of every page.
Changes to this policy
If we update this policy, we'll post the new version here and change the date at the top. If a change materially affects how we use your information, we'll tell account holders by email.
Contact
Questions about this policy? Reach us through the contact form.