Privacy Policy

Last updated 1 November 2026

Bashara (“the app”) is operated by Shopicom FZE, Dubai, United Arab Emirates (“we”). This policy explains what the app collects, why, and what you can do about it. Bashara is not a medical device and does not diagnose or treat any condition.

What we collect

  • Photos you take for a scan. Face, hair and body-area photos are uploaded to our servers, analysed by an AI model, and stored so you can compare scans over time. They are never used to train models and never shown to other users.
  • Assessment results. The scores, concerns and routines derived from your photos and from the questions you answer (skin type, hair type, concerns, routine time).
  • Account details. If you sign in with Apple or Google: your user id, your email (or Apple’s private relay address) and, if shared, your name. Optional profile fields you enter (birth year, height, weight, social handles).
  • Purchases. Subscription status is processed by RevenueCat and Apple. We receive the subscription state and an anonymous purchaser id, never your payment details.
  • Approximate location. Only if you allow it on the UV screen. Your position is rounded to an 11 km cell before it leaves your phone and is used solely to fetch the UV index for that area.
  • Routine activity. Which routine steps you mark done, check-ins and reviews you write, products you save or scan.

We do not collect advertising identifiers, contacts, or browsing history, and we show no ads.

How we use it

To produce your assessment, build and adapt your routine, match products, show your progress, provide the UV index, operate your subscription, and answer support requests. Reviews you submit may be shown to other users with your first name after moderation.

Who processes it

Supabase (authentication, database, photo storage), Railway (application hosting), Google (the AI model that reads your photos), RevenueCat (subscriptions), Apple and Google (sign in and payments). Each acts under its own privacy terms and only to provide its service to us. We do not sell personal data.

Retention and deletion

Your data is kept while your account exists. Delete your account from Profile → Delete account: this removes your photos, assessments, routines and profile immediately. Guest sessions that never sign in are treated the same way when you delete them from the app. You can also email us to request deletion or a copy of your data.

Children

Bashara is not directed at children under 16 and we do not knowingly collect their data.

Changes and contact

We will post any change to this policy on this page. Questions: support@bashara.io.