Privacy Policy

1. Information we collect

We collect the information you provide when you create an account and use the service, such as your name and email, and the client information and photographs you choose to upload for professional use.

2. How we use information

We use information to provide and improve the service, including client management, formula guidance, booking, and AI-assisted features. Photographs may be used to provide AI-assisted spray tan assessment support to your spray tan professional.

3. Technology and AI service providers

To deliver AI-assisted features, Barelae (Base44) and third-party technology and AI service providers may process the photograph and related information. Those providers may process and retain information according to their own applicable service, privacy, and data-retention policies. We do not promise that every provider will retain zero data or permanently delete it immediately; provider retention is governed by their applicable policies and service requirements.

4. AI-assisted observations, not medical advice

AI-assisted features provide observations to support a spray tan professional. They do not provide medical diagnoses. A professional reviews, confirms, or overrides any AI output and remains the final decision-maker.

5. Not used for identity recognition

Skin Scan is not designed for facial recognition, identity verification, or biometric identification.

6. Data minimization

We do not ask you to provide medical diagnoses, prescriptions, or protected health information for Skin Scan consent, and we do not build biometric identity templates.

7. Your choices

You can manage your account and certain data from your account settings. Where consent is required for a specific feature, that consent is requested separately and recorded with a version and timestamp.

8. Deleting your account and data

You can permanently delete your Barelae artist account at any time from Account Settings, or by visiting our account deletion page while signed in. Deleting your account:

• Permanently deletes your Barelae login and account. This is a true deletion, not a temporary deactivation — you cannot sign back in with the deleted account.
• Deletes or anonymizes your own application data (such as your booking page, custom formula and inventory library, tax and point-of-sale configuration, and similar account settings), and also processes every client record you own the same way an individual client data-deletion request would (see below) — it is not left behind when your account is deleted.
• Immediately cancels any active Barelae Pro subscription. We do not automatically refund the current billing period.
• Requires any connected client membership that could still generate a future charge to be canceled, or confirmed by our payment processor as no longer billing, before deletion can complete.

Some information is retained even after account or client data deletion, where we have a legitimate reason to keep it, such as:

• Financial, commerce, and billing records (for example, transaction identifiers, subscription and inventory history), retained for accounting, tax, and dispute purposes. Where a record's purpose does not require a name, we remove or replace the display name; the record itself, and internal reference identifiers within it, are retained.
• Signed documents, such as client intake waivers and photo/AI-analysis consent forms, preserved exactly as they were signed or confirmed, for legal and liability reasons. Because altering a signed document would invalidate it, identifying information the signer provided at the time (such as a name or date of birth) can remain within that specific document even after the related account or client record is otherwise deleted.
• Records of your consent to this Privacy Policy and our Terms of Service, kept as evidence of what was agreed to and when.
• Fraud-prevention, security, support, and audit records needed to protect the platform and its users, with directly identifying details removed where the record's purpose does not require them.

Our platform provider, Base44, automatically records certain internal system information on every record we store (for example, an internal identifier for whoever created it). We do not have a way to modify that system-level information ourselves, so it may still exist on a retained record even where we have otherwise removed the identifying details we control.

You can also request permanent deletion of an individual client's personal data from that client's profile in the app, without deleting your own account. This deletes the client's personal information while preserving the same limited categories of legally or operationally required records described above.

9. Contact us

If you're signed in, the fastest way to reach us — including for help with account deletion, a deletion blocked by an active client membership, or a deletion that did not complete — is Help & Feedback in the app. If you can't sign in, email justmetimewellness@gmail.com. For your protection, we still verify your identity before deleting any account or data — email alone cannot be used to delete an account.

10. Changes to this policy

We may update this policy from time to time. Material changes will use a new version identifier, and you may be asked to acknowledge the updated policy on your next sign-in.