Privacy Policy
This is the United States version of this page; the French version is published for reference only.
Cosmetic advice, never medical advice: we’ll point you to a dermatologist if you need one. No affiliate links, no commissions.
Who we are
This privacy policy explains how BelleRoutine handles the personal information of people in the United States. It is also our notice at collection: it tells you what we collect, why, and how long we keep it.
The personal information collected on this site is handled by the company HK CO, a simplified joint-stock company (SAS), with share capital of €100, registered with the Annecy Trade and Companies Register (RCS Annecy) under number 106 938 061, VAT number FR81106938061, which publishes BelleRoutine. Its details are in the legal information.
To contact us about your personal information, write to contact@belleroutine.com or use the contact page.
Notice at collection: what we collect and why
In the last 12 months, and from now on, we collect the following categories of personal information:
- Identifiers: your email address, your optional first name, a random visit identifier, and, if you accept or do not decline advertising cookies, the cookie identifiers described below.
- Information you give us: your quiz answers (skin type, concerns, budget…), your messages with Sonia, your check-ins, your skin journal, your product trials, your shopping list, your trips and your referrals.
- Commercial information: what you bought (full analysis, subscription) and the status of your subscription. Stripe handles the payment: we never have your full card details.
- Photos (visual information): photos of your face, and optionally of your products.
- Internet activity: pages viewed, the source of your visit, the type of device, the country, and the steps of the quiz you complete.
- Location, only if you choose it: your city and its rounded coordinates for the daily weather tip.
- Inferences: the analysis of how your skin looks and the routine built from it.
- Sensitive personal information: your face photo and some answers that can reveal something about your health (see “Sensitive personal information” below).
We collect it from you, from your device when you use the site, and from Stripe (confirmation of your payment). We use it to provide the service you ask for, to keep it secure, to fix and improve it, to check the quality of our analysis tools, to meet our accounting obligations and, where described in the cookies section, to measure our advertising. How long we keep each type of information is given below.
Details by type of information
Each card below says what we collect, why we use it and how long we keep it. Where we rely on your agreement, you can withdraw it at any time.
Your first name and your quiz answers are used only to personalize your routine. We ask for no telephone number and no postal address. The photo from the quiz is kept in the space linked to the email address you entered, as the starting point of your follow-up.
-
Email address
- Purpose
- To find your routine again, to send you advice and to tell you about news; this is sent only if you check the optional box on the email screen (never checked in advance)
- Retention
- Until you unsubscribe
-
Answers to the skin quiz
- Purpose
- To build your routine (first name, skin type, concerns, budget…)
- Retention
- 12 months without a subscription, then automatic deletion; kept for as long as your subscription exists
-
Your account (email, optional first name, date of last sign-in)
- Purpose
- To sign you in to your account and show your routine, your subscription and your follow-up there
- Retention
- For as long as your account exists; you can delete it at any time from your settings
-
Monthly and seasonal check-ins (how your skin feels, changes, reactions, new products, your answers to the seasonal questions)
- Purpose
- To update your routine every month and when a season starts; Sonia, your AI, uses them in your messages
- Retention
- 12 months without a subscription, then automatic deletion; kept for as long as your subscription exists
-
Messages with Sonia, our AI
- Purpose
- Data: your messages and the photos you attach. To answer your questions using your file (quiz profile, routine and its history, reactions you reported, products, checks, product trials, trips) and your follow-up photos; to let the team take over a conversation when needed; to check the quality of the answers
- Retention
- 90 days on a rolling basis, attached photos included, then automatic deletion; deleted with your account
-
Photos of your face (quiz and check-ins): required for the quiz, optional at check-in
- Purpose
- To analyse how your skin looks for your routine, then to follow how it changes; the quiz photo is the starting point. Your phone also measures how your under-eye area looks in the photo (figures only, never an image); these figures are kept with the photo
- Retention
- Kept in your space for as long as your subscription is active, then for up to 3 months after it ends; without a subscription, 6 months after the photo; then deleted automatically. You can delete one photo, or all of them, at any time from “My photos”. The observations about appearance drawn from a photo (area of the face and a short description) are kept with it and deleted with it
-
Photos of your products (optional)
- Purpose
- Our AI provider analyzes them to recognize your products and compare them with your routine (keep, incompatible, unnecessary)
- Retention
- Kept in your space with your routine; deleted with your account (or with your routine)
-
“Is it right for me?” (optional)
- Purpose
- Data: the product checked (brand, name, type, active ingredients) and the verdict. The photo of the product is analyzed by our AI provider to recognize it and compare it with your routine; it is not kept
- Retention
- 12 months, then automatic deletion; deleted with your account (or with your routine)
-
My shopping list
- Purpose
- Data: for each product of your routine, what you indicated (to buy, “I have it”, “Nearly finished”). To show you what is left to buy. Without a signed-in account, these choices stay in your browser and are not sent to us
- Retention
- For as long as your account exists; deleted with it
-
Product trial notebook (subscribers, optional)
- Purpose
- Data: the product you are trying (name, brand), your news after 3, 7 and 14 days or when your skin reacts (effects chosen, how often you use it, what you add in a few words) and Sonia’s replies. This information can concern your health: you choose to give it. To advise you and give an opinion (keep, space out, stop), your news and the product name are sent to our artificial intelligence provider, based outside the European Union; a worrying reaction is spotted without artificial intelligence and points you to a professional
- Retention
- 12 months after the start of the trial, then automatic deletion; deleted with your account
-
Your skin today and your skin journal (optional)
- Purpose
- Data: the state of your skin that you note yourself, morning or evening, and the optional word you add. This information can concern your health: you choose to note it, and you can write nothing. To adjust your routine of the day (fixed rules, no artificial intelligence), to show you your journal and your monthly summary; if you subscribe, a summary of your states over the last 30 days (never your free word) helps the follow-up AI answer you in your messages
- Retention
- 13 months after the day noted, then automatic deletion; deleted with your account
-
Referral
- Purpose
- Data: the referral code of the person who invites, the email address of the friend invited and the state of the discount (pending, applied or refused). To grant the referral discounts
- Retention
- For as long as your account exists, deleted with it; if the friend deletes their account, their email address is erased and the line is kept anonymously
-
Travel routine (subscribers)
- Purpose
- Data: the destination, the city and date of departure, the length of the trip and your answers (climate, luggage, activity, plane). To prepare your travel routine, generated by our artificial intelligence provider, based outside the European Union, from your routine and your skin profile (skin type, concerns, sun reaction, budget), and to send you the reminder the day before departure if you asked for it
- Retention
- Up to 30 days after you return (without a departure date: 90 days after creation), then automatic deletion; deleted with your account
-
Check-in reminder
- Purpose
- One email a month for your check-in (you can turn it off in your settings)
- Retention
- For as long as your subscription is active and the reminder is on
-
Reminders (optional)
- Purpose
- Data: for each device where you turn them on, the address your browser provides for sending notifications and its encryption keys, and the times you chose (morning, evening). To send you a notification in the morning and in the evening, with no product name and no information about your health
- Retention
- Until you turn them off; deleted after 6 months without a send or after 5 failed sends, and with your account
-
Daily weather tip (optional)
- Purpose
- Data: your city, for the daily weather tip: its name and its rounded coordinates (to about 1 km; “Use my location” keeps only a position rounded to about ten kilometers, never your exact position). To give you a tip every day that fits the weather in your city, and to use it in your morning reminder if you turned it on. With follow-up, it also helps spot the arrival of a season (forecast for the next 3 days) so we can offer to adjust your routine
- Retention
- Until you change it, and deleted with your account. The weather kept in memory for 7 days contains no personal data
-
Monthly summary (subscribers)
- Purpose
- Data: your photos, how you said you felt at the check-in, the changes to your routine and the number of your check-ins, checks, product photos and messages for the month. To show you each month what your follow-up has done, calculated from this data without artificial intelligence, and to email you on the 1st of the month (can be turned off with the check-in reminder); this email contains no photo and no check-in answer
- Retention
- Nothing more is kept: the summary is recalculated each time you look at it; only the months for which the email was sent are noted, deleted with your account
-
Subscription and payment
- Purpose
- To take payment for the full analysis and for the subscription. Stripe handles the payment; BelleRoutine never has access to your full card details
- Retention
- Stripe keeps the invoices because of accounting obligations, even after your account is deleted
-
Log of team actions
- Purpose
- To keep a record of who did what on an account (looking at a file or a photo, giving a subscription, deletion…), without your answers or your photos
- Retention
- Contains only technical identifiers, never an answer, an email address or a photo
-
Timestamp
- Purpose
- To filter automated submissions
- Retention
- Not kept after processing
-
Fingerprint of the IP address
- Purpose
- To limit the number of quizzes launched, sign-in link requests, invitation link visits and city searches from the same connection (fighting abuse). The address itself is never recorded, only a fingerprint calculated from it (hashing)
- Retention
- 48 hours at most, then automatic deletion
-
Journey on the site
- Purpose
- To understand where the journey gets stuck and improve it: pages viewed, steps completed, masked session recordings (details in the cookies section below)
- Retention
- 12 months for statistics, 30 days for recordings
-
Survey on features (once, optional)
- Purpose
- A short questionnaire to choose the next features. It contains no question about your skin or your health. Your answers are not linked to your address in our results: we only know that you answered. Each email has a link to stop receiving them
- Retention
- The questionnaire link is deleted 30 days after it expires, and the answers after 395 days
-
Photos of your face already kept, and the results of their analysis
- Purpose
- To check the quality of our analysis tools: for example, checking that face detection works well on real photos. Done by the BelleRoutine team only; the results carry neither your name nor your email address
- Retention
- No extra period: copies made for a check are deleted as soon as it is finished; the photos stay subject to the periods given above
Our AI and your data
The skin quiz is open: you fill in a questionnaire and add a front-facing photo of your face. An artificial intelligence specialized in skincare analyzes this information to build your routine. This is how your data is used:
- Your photo is analyzed by the AI, then kept in your space so that you can follow how your skin changes; you can delete it at any time. It is never published or logged.
- Photos of your products (optional) are different: they show your bottles, not your face. They are analyzed by our AI provider to recognize your products, kept in your space with your routine and deleted with your account.
- The questionnaire and the routine obtained are kept so that you can find your result again. Without a subscription, they are deleted automatically after 12 months.
- The analysis is carried out by a third-party artificial intelligence provider, which receives the text of your questionnaire and your photo so that it can produce the analysis. This provider is based outside the European Union and is not named here. The list of our processors and where they are located is available on request at contact@belleroutine.com.
- At each check-in, your previous photo and the new one are sent to our artificial intelligence provider, based outside the European Union, to compare how your skin looks. That country may not offer a level of protection equivalent to the one where you live. This transfer only happens if you add a photo.
Photo screen. Before the photo is used, the screen shows a notice and a box asking for your agreement to the analysis and to the photo being kept as described. The box is already checked when the screen opens, and you can uncheck it. If you do, the photo is not sent, not analyzed and not kept, and the quiz cannot be completed, because the routine needs the photo.
Who sees your photos. You and the BelleRoutine team (the publisher), to support you and to check the quality of the service. They are not published, not sold and not used for anything other than your follow-up and the quality checks of our analysis tools.
Messaging with Sonia, our AI. Sonia is an artificial intelligence, not a person. To answer you, your messages, your file (quiz profile, routine and its history, reactions you reported, products, checks, product trials, trips — never your email address) and, with each message, your starting photo and your most recent photo, as well as the photo you may attach to your message, are sent to our artificial intelligence provider, based outside the European Union (purpose: the personalized advice of your follow-up). Your messages are never published. The BelleRoutine team can read them to take over the conversation or to check the quality of the answers. Photos attached to your messages are kept 90 days with them, visible to you and to the BelleRoutine team, then deleted automatically. You can see what Sonia knows about you in your space (“What Sonia knows about you”).
Travel routine. Your destination, your dates, your answers and your routine (products, skin type, concerns, sun reaction, budget) are sent to our artificial intelligence provider, based outside the European Union, to prepare your kit (never a photo, never your answers about your health).
You keep all the rights described below. If you do not want this analysis, simply do not start the quiz.
Who else sees your data
- Cloudflare hosts the site and technically handles the sending of forms. Connection logs are kept according to Cloudflare’s own policy.
- Cloudflare also keeps the photos of your face (quiz and check-ins) and of your products, in private storage located in the European Union, never reachable by a public address.
- Resend sends our emails: sign-in link, routine, check-in reminder, reminder for your travel routine, and the sign-up message to our mailbox.
- Your browser’s notification service (Google, Mozilla, Apple or Microsoft) delivers your reminders if you turn them on. The message is encrypted: this service cannot read it.
- Open-Meteo (Switzerland) provides the weather of your city for the daily tip and the 3-day forecast that announces a new season. It only receives rounded coordinates, or the city name you type: never your identity, your email address or your IP address (the request leaves from our servers).
- Stripe handles the payment for the full analysis and the subscription; BelleRoutine never has access to your full card details. Stripe keeps the invoices because of accounting obligations, even after your account is deleted.
- PostHog (European Union) measures the journey and records sessions, within the limits described in the cookies section.
- TikTok (Ireland, transfers outside the EU possible) only receives data as described in the cookies section: page views, the end of the quiz and, only after you click “Accept”, a hashed email address.
- GitHub (United States) keeps a backup copy of our database, made every week in a private space so that we can repair an error or an outage: account, answers, routines and check-ins, with no photo at all. Each copy is deleted after 30 days at most.
- Our artificial intelligence provider, based outside the European Union and not named here, as described in the section on our AI.
- The BelleRoutine team, to support you and to check the quality of the service.
Your email address is neither sold nor rented. It is used only for the messages announced and, only if you click “Accept”, for measuring our TikTok ads, in hashed form.
Where your information is processed
BelleRoutine is published from France. Your personal information is stored and processed in the European Union (where our photo storage and our measurement tool are located) and in the United States and other countries where our providers operate, for example Cloudflare, Inc. and GitHub (United States), and our artificial intelligence provider, based outside the European Union. The rules on personal information in those places may differ from those of your state.
TikTok’s data may also be transferred outside the European Union.
To know which providers handle your information, write to contact@belleroutine.com.
How long we keep your data
The detail is in the cards above. In short:
- Photos of your face: for as long as your subscription is active, then up to 3 months after it ends; without a subscription, 6 months after the photo; then deleted automatically. You can delete them yourself at any time.
- Messages with Sonia and the photos attached to them: 90 days on a rolling basis.
- Quiz answers and routine without a subscription: 12 months; with a subscription, as long as the subscription exists.
- Skin journal: 13 months after the day noted.
- Product trials: 12 months after the start of the trial.
- Site statistics: 12 months; session recordings: 30 days; fingerprint of the IP address: 48 hours at most.
- Account: until you delete it. Backup copies disappear after 30 days at most. Stripe keeps the invoices because of accounting obligations.
Do Not Sell or Share My Personal Information
We do not sell your personal information for money. We do not sell or share the personal information of anyone we know to be under 16.
The TikTok pixel described in the cookies section may count as a “sale” or as “sharing” under some state privacy laws, because it sends TikTok limited information about your visit (page views, an identifier set by the pixel and the end of the quiz) to measure our advertising and, only after you click “Accept”, a hashed form of your email address. You can opt out at any time with the button below, which records your refusal and deletes the pixel’s cookies on our domain, or by writing to contact@belleroutine.com. Your choice is kept for 6 months in your browser; after that, the pixel loads again on the home page, the quiz and the page of our ads unless you decline again. Apart from this pixel, we do not sell or share personal information.
Our service providers (hosting, payment, email, measurement, artificial intelligence) process your information on our behalf and only for the purposes we set; that is not a sale or sharing.
Your privacy rights
Depending on the state where you live (California and several other states have privacy laws), you may have the right to:
- know what personal information we collect, use and disclose, and ask for a copy of the specific information we hold about you;
- delete the personal information we collected from you;
- correct information that is inaccurate;
- opt out of the sale or sharing of your personal information (see above);
- limit our use of your sensitive personal information (we use it only for the purposes listed below);
- receive your information in a portable format; and
- not be discriminated against for using these rights: we do not charge a different price or give a different quality of service because you use them.
Write to the address on the contact page. To protect your account, we may ask you to confirm your request from the email address linked to it. We reply within 45 days; where reasonably necessary, we may extend that period once by another 45 days, and we will tell you why.
From your settings (“My settings”) you can also do some of it yourself, at any time: download your data under “My data” (a JSON file: account, answers, routines, check-ins, list of your photos), delete your photos (also one by one from “My photos”), and delete your account — everything is then erased (backup copies disappear within 30 days at most); if your subscription is active, it is canceled first. Stripe only keeps the invoices because of accounting obligations.
Sensitive personal information: your face photo and health-related answers
Two kinds of information we collect are sensitive under some state laws: the photo of your face, and some answers that can reveal something about your health (for example answers about pregnancy or whether you follow a plan from a dermatologist or take a medicine at the moment, or signs you point out on your skin). Some of this information may also be considered “consumer health data” under some state laws.
We use this information only to provide the service you ask for (building and updating your routine, and pointing you to a professional instead of offering a routine when a signal calls for it), to keep the service secure and to check the quality of our own analysis tools. We do not use it to infer characteristics about you for advertising, and we do not sell or share it: the advertising measurement never receives your answers or your photo, and the session recordings exclude these screens and the photo area. Our service providers handle it on our behalf, as described above.
Your photo. The screen where you add your photo shows a notice and a box asking for your agreement to the analysis and to the photo being kept as described in this policy. The box is already checked when the screen opens, and you can uncheck it; if you do, the photo is not sent, not analyzed and not kept, and the quiz cannot be completed, because the routine needs the photo. Your photo is used to look at how your skin looks and to follow how it changes; we do not use it to identify you. We delete photos on the schedule given above (while your subscription lasts and then for a short period, or 6 months after the photo without a subscription), and whenever you delete them yourself or ask us to.
Health-related answers. You choose which questions you answer and what you write. If you live in a state with a consumer health data law, you can ask us to access, delete or stop using this information, and to withdraw your agreement, by writing to contact@belleroutine.com or from your settings.
Children
BelleRoutine is meant for adults. We do not knowingly collect personal information from children under 13. If you think a child has given us information, write to contact@belleroutine.com and we will delete it.
Who to contact if you are not satisfied
There is no single privacy regulator for the whole United States. If our reply does not satisfy you, you can contact the California Privacy Protection Agency (cppa.ca.gov) if you live in California, or the office of the attorney general of your state (naag.org lists them).
Last updated: October 29, 2026.