Privacy Policy

Effective 26 June 2026

Aalay is a social shelf for skincare. This policy explains what we collect, why, who we share it with, and how you can delete everything.

What we collect

• Account identity — your name, email and profile photo from Google or Apple sign-in.
• Profile you provide — handle, display name, bio, and optional skin type / concerns.
• Content you create — shelves, the products you add, routines, reviews, comments, and product photos you upload.
• Activity — affiliate buy-link taps (to measure interest) and basic technical logs.

How we use it

• Run the app and show your public shelf, routines and profile.
• Power discovery, search and recommendations.
• Generate AI captions, shelf bios, product descriptions, and clean studio-style product images from the product photos and details you add.
• Measure affiliate clicks, and keep the community safe (moderation).

Public by default

Aalay is a social product: your shelves, products, routines, reviews, comments and profile are visible to other signed-in users and on public pages at aalay.app. Don't post anything you wouldn't want to be public.

Who we share it with

• Supabase — hosting, database, file storage and authentication.
• Amazon Associates — "Buy" links go to Amazon.in as affiliate links; Amazon handles the purchase and may set its own cookies.
• Anthropic — product details and photos you add are sent to Claude to identify products and generate captions and bios.
• Google — the product photos you upload are sent to Google's Gemini API to generate product descriptions and clean studio-style product images; Google also provides sign-in.
• Apple — sign-in.

We do not sell your personal data.

Affiliate links

As an Amazon Associate, Aalay earns from qualifying purchases made through the buy links in the app. This is disclosed on the buy surface.

Deleting your account and data

You can delete your account and all of your data from inside the app (Settings → Delete account) or by following the steps at aalay.app/delete-account. Deletion is scheduled with a 30-day grace period (so you can cancel by signing back in), after which your profile, shelves, products, routines, reviews, comments, activity and uploaded photos are permanently erased. Shared catalogue product information is retained with your contribution de-attributed.

Your rights

You can access, correct or delete your information at any time using the app, or by emailing admin@aalay.app. We honour applicable data-protection rights, including India's DPDP Act and the GDPR where relevant.

Children

Aalay is not directed to children under 13, and we do not knowingly collect their data.

Changes & contact

We may update this policy; material changes will be posted here. Questions: admin@aalay.app. This policy is governed by the laws of India.