UremboGPT

Privacy Policy

Last updated: June 17, 2026
Learn how UremboGPT collects, processes, and protects your personal data and face images for AI skin analysis.

At UremboGPT, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your personal information, including the face photos you upload or capture using our AI skin analysis tool.

Please read this document carefully to understand our practices regarding your personal data.

1. Information We Collect

We collect the following categories of information when you interact with our platform:

  • Account Information: If you register an account, we collect your name, email address, phone number, and account credentials.
  • Image Data (Face Photos): To perform the AI skin analysis, our system requires you to capture or upload a photo of your face.
  • Skin Profiles & Answers: We collect the results of your skin analysis (e.g. skin type, oil levels, hyperpigmentation markers) and your answers to supplementary skincare questionnaires.
  • Usage & Device Information: IP addresses, browser types, referral URLs, and interactions with our website for security and analytics.

2. How We Process Face Photos (Biometric Data)

Your face photos are considered sensitive personal data under regional regulations (such as the Kenya Data Protection Act 2019 and the GDPR).

We process this data under strict security protocols:

  • Purpose: We use your photo solely to analyze skin characteristics (such as texture, pores, pigmentation, and acne patterns) to generate your personalized skincare report.
  • Retention: Face photos are processed securely in real-time. If you are an authenticated user, we store the image in an encrypted cloud storage bucket so you can view your scan history. Unauthenticated guest scans discard the image immediately after the analysis report is built.
Strict Data Privacy Guarantee

3. Data Protection Compliance

We comply with the Kenya Data Protection Act, 2019 and represent GDPR-aligned principles for international users:

  • Consent: We explicitly request your permission to access your camera or upload files before any scan occurs.
  • Access & Correction: You can access your profile settings to correct your email or delete your scan history.
  • Data Deletion: You can request the permanent deletion of your account and all associated scan data at any time by emailing [email protected].

4. Cookies & Trackers

We use standard cookies and analytics tools (such as Google Tag Manager and Meta Pixel) to improve page performance, understand site traffic, and track click events on our pricing or onboarding funnel. You can disable cookies in your browser settings if preferred.

5. Security Measures

We implement rigorous technical and organizational security measures to prevent unauthorized access, alteration, or disclosure of your skin reports and personal details:

  • All data transit is encrypted using HTTPS (TLS 1.2+).
  • Auth tokens and user credentials are managed using secure session cookies with HttpOnly and Secure attributes.
  • Sensitive databases are protected by firewall controls and access role restrictions.

6. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our AI technologies, legal mandates, or product offerings. The "Last Updated" date at the top of this page will indicate when the latest revisions took effect.

7. Contact Our Data Controller

If you have any questions, concerns, or requests regarding your data privacy, please reach out to us at: