Privacy Policy
1. Introduction
UMPH (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal data when you use our platform, mobile app, and AI beauty services. By using UMPH, you consent to the data practices described in this policy.
2. Data We Collect
We collect the following types of information:
a. Identity & Account Info
-
Name, email, phone number
-
Gender identity, birthdate, and user photo (optional)
-
Ethnicity and treatment preferences (optional, for personalization)
b. Payment & Booking Data
-
Transaction history, GlowPlan purchases, beauty savings, and reward balances
-
Payment data (processed securely via Stripe or authorized third parties)
c. Beauty & AI Interaction Data
-
Treatment preferences, medical disclosures (optional), skin concerns
-
Uploaded selfies for AI analysis
-
AI chat logs and personalization preferences
d. Technical & Usage Data
-
IP address, browser type, device ID
-
App activity, cookies, referral links, and click data
3. How We Use Your Data
We use your information to:
-
Enable booking, subscriptions, and AI recommendations
-
Personalize your beauty journey
-
Improve product suggestions and treatment matching
-
Manage referrals, UGC campaigns, and reward programs
-
Secure your account and detect misuse or fraud
-
Conduct platform analytics (never sold to third parties)
4. GlowPlan and Subscription Features
If you subscribe to GlowPlan:
-
We track your usage, rewards, savings, and benefit eligibility
-
You may cancel GlowPlan at any time, but perks expire immediately
-
Your subscription and treatment data may be analyzed to offer exclusive insights and reminders
5. User-Generated Content (UGC)
By submitting UGC (e.g., selfies, reviews, testimonials):
-
You grant UMPH a royalty-free, non-exclusive license to use the content for marketing and campaign purposes
-
You may request content removal via support@umph.com
6. AI & Facial Data Transparency
-
UMPH uses facial analysis AI for personalized suggestions
-
Images are processed and stored securely with encryption
-
Facial data is not shared, sold, or used outside the UMPH ecosystem
-
You can opt out of AI features via settings
7. Data Sharing
We only share your data with:
-
Clinics you book with (to provide services)
-
Payment providers (e.g., Stripe)
-
AI service providers (used strictly for personalization)
-
Privacy-first analytics tools (never Google or Meta)
-
Legal authorities if required by law
We do not sell your data.
8. Your Rights
You can:
-
Request access, correction, or deletion of your data
-
Withdraw consent or delete your account
-
Opt out of marketing at any time
-
Request a full copy of your stored data
Contact: privacy@umph.com
9. Data Retention & Security
-
Bookings & finance data: Retained for 6 years
-
AI logs & preferences: Retained up to 12 months
-
All data stored with encrypted, privacy-compliant systems
We conduct regular security reviews, encryption, and access audits.
10. Updates
We may update this Privacy Policy from time to time. You will be notified via app or email if significant changes occur.
11. Contact
For questions or requests: UMPH Data Officer
📧 privacy@umph.com