Privacy Policy

Effective and last reviewed: 2026-09-26

What we collect

• The face photo you upload and derived images used for analysis or display
• Questionnaire answers (including gender, if you choose to share it), personal color result, palettes, feedback, and saved products
• Gender is used only to tailor the makeup or grooming guide in your result and to count who uses the service. It never affects your color diagnosis, and choosing “Prefer not to say” gives you the same diagnosis.
• If you sign in or save a result: email, auth-provider identifier, and account ID
• Request time, error and performance data, the kind of device you used, referral, and usage events
• Email address and message content you provide when contacting us
• A random value kept on your device so diagnoses made on the same device can be counted as one. It is not tied to a login or email, what we store is a value that cannot be turned back rather than the value itself, and it is replaced after a year.

How we use it

We use data to generate, display, and save results; authenticate accounts; delete photos and results; handle errors; prevent abuse; measure aggregate quality and conversion; and send notifications you have chosen. We do not use face photos for ad targeting or model training without separate consent.

Statistics that improve diagnosis quality and the service use only information processed so that it cannot identify you. That covers diagnosis coordinates (color type, color axes, and confidence) and usage events; face photos and email addresses are not used. These statistics may be shared with partner brands or published only in a form that identifies no individual — for example, which colors are chosen more often within a color type. We do not sell or hand over personally identifiable information to third parties.

Storage and deletion

Temporary analysis records that are not submitted remain for at most 24 hours. Anonymous results not saved to an account become eligible for cleanup after 30 days. Account data and saved results may remain until account or result deletion, while image objects have a maximum 365-day lifecycle. Application logs are normally retained for 30 days. Detailed photo handling follows our image data policy. If law requires a separate retention period for a specific record, we may isolate it for that period.

After an anonymous result is cleaned up at 30 days, statistical diagnosis coordinates (color type, color axes, confidence, and their timestamp) remain. Photos, email addresses, and message content are not part of them. If you request deletion of a result, we delete these records along with it.

Service providers

Clad may use AWS (S3, Lambda, Rekognition, and CloudFront), Supabase (authentication and database), a selected Google Vertex AI route through OpenRouter (AI inference), Mixpanel (usage analytics without sensitive access values), and Crisp (support conversations you start). They process data as needed for those functions, potentially outside Korea depending on server region. AI requests are configured to deny data collection and require a zero-data-retention route.

Analytics and local storage

We may use cookies and storage on your device to keep you signed in, resume an unfinished diagnosis, remember dismissed notices, reopen your last result, and count diagnoses made on the same device as one. Quality records exclude result links, photo addresses, values used for sign-in, and email addresses under one shared rule.

Your rights and contact

You may request access, correction, deletion, suspension of processing, and account deletion. Use the result page or My Color deletion controls first. If you cannot complete the action, email admin@lumx.im. We will ask only for the minimum needed to verify the request. Do not email a face photo, password, verification code, or full result link.

Policy changes

If the purpose, provider, or retention period changes materially, we will announce it in the service or on this page before it takes effect and update the effective and review dates.