Privacy

Your goals

Which skin concerns you ranked, and in what order.

Your constraints

Annual budget, minutes a day, downtime tolerance, whether professional treatments are acceptable, how reactive your skin is.

Life stage (optional)

Only if you choose to tell us. It changes what is safe to recommend. You can skip it and the product still works.

Your cabinet

The products you enter: a name you type, what the product does, roughly what it costs you a year, and whether you actually use it.

Free-text notes (optional)

Anything you type into the "is something worrying you?" box.

Technical data

Standard server logs: IP address, browser type, timestamp. Kept briefly and used for security and debugging.

• Photographs of your face. Not optional, not stored, not analysed. We do not ask for them, and there is nowhere in the product to provide one. A budget question does not need your face, and it is the most sensitive thing we could hold.
• Biometric identifiers. We create no face templates or embeddings, and we never use images for identification.
• Medical records or health-service data. Bellanos gives cosmetic guidance. It does not diagnose, treat or screen for any condition, and it holds no clinical record about you.
• Payment card details. If and when paid plans launch, card data is handled entirely by our payment processor. We never see or store a card number.

Under the GDPR and the Swiss FADP we rely on performance of a contract for the data you enter to get a plan — without it there is no plan — and on legitimate interests for security logging and aggregate, non-identifying product analytics.

Optional life-stage information may be health-related. Where it is, we rely on your explicit consent, which is why the field is optional and skippable. You may withdraw that consent at any time by clearing the field or deleting your data.

Under PIPEDA we rely on your meaningful consent, given by choosing to enter the information. We do not sell personal information as defined by the CCPA/CPRA, and we have not done so in the preceding twelve months.

In the current version, what you enter is held in your browser for the duration of your session and is discarded when you close the tab. Nothing is written to an account because there are no accounts yet.

When accounts arrive, your data will be kept while your account is active and for up to 30 days after you delete it, except where we are legally required to retain records for longer. Server logs are kept for up to 30 days.

No one buys it, and no one is given it in exchange for anything. We share personal data only with service providers who process it on our instructions — a hosting provider, an error-monitoring provider, and (once paid plans launch) a payment processor. Each is bound by a data-processing agreement.

Providers and brands never receive your data, and never influence your plan. The system that decides what to recommend is structurally unable to see who has paid us — that is enforced by an automated test rather than by this sentence.

Where data is transferred outside the EEA, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses and equivalent Swiss and UK mechanisms.

Wherever you live, you can ask us to show you what we hold, correct it, delete it, give you a copy in a portable format, or stop using it. If you are in the EEA, the UK or Switzerland you also have the right to object to processing based on legitimate interests, and to lodge a complaint with your supervisory authority — in Switzerland, the FDPIC.

If you are in California you may request disclosure of the categories and specific pieces of personal information we hold, request deletion or correction, and you have the right not to be discriminated against for exercising those rights. We will not deny you service or charge you differently.

In Canada you may challenge our compliance with PIPEDA and escalate to the Office of the Privacy Commissioner.

Write to hello@bellanos.me. We respond within 30 days.

We use no advertising cookies and no cross-site tracking. Strictly necessary storage keeps your answers in the browser while you use the product. If we add product analytics, it will be configured to avoid collecting personal data, and this page will say so before it is switched on.

Bellanos is for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with data, contact us and we will delete it.

If we change this policy in a way that materially affects you, we will say so prominently rather than quietly reposting it with a new date. The date at the top always reflects the current version.