Privacy Policy.

Last updated: November 13, 2026

Your photo.

When you upload a photo to the AI simulator, it is processed on-device in your browser whenever possible. If server-side processing is required for a specific treatment simulation, the photo is transmitted over TLS, processed, and deleted within 24 hours of your session ending — unless you explicitly book a consult with a provider, in which case the photo is attached to the booking record and shared only with that provider.

We do not sell your photo. We do not train external AI models on your photo. We do not store your photo in logs, backups, or analytics.

What we collect.

• Email address + name (when you create an account or book)
• Phone number (optional — only for booking reminders)
• The treatment zones you select in the simulator
• Your bookings and reviews
• Standard analytics: pages visited, device type, approximate city (via IP)

What we don't collect.

• Medical history, insurance info, or payment card data (that goes to providers + Stripe directly, we never see it)
• Your real identity if you don't book — browse all day anonymously
• Precise location unless you explicitly type in your ZIP

Who we share with.

• Providers you book with: your name, email, phone, treatment interest, and AI simulation.
• Allergan / Galderma (aggregate only): which treatments drove bookings, at which providers, for rebate attribution. We do NOT share your identity.
• Payment processors (Stripe): for provider subscriptions. No patient payment data flows through us.
• Nobody else, ever. We don't sell lists. We don't partner with data brokers.

Your rights.

Email privacy@getcosmeticare.com to export, correct, or delete your data. We respond within 72 hours. GDPR and CCPA rights honored for all users regardless of location.