Last updated May 17, 2026

Cookie Policy

How ScanSkinAI uses cookies and similar technologies — written in plain language, with full regional detail for Hong Kong, the UK / EU, and the rest of the world.

PDPO
UK GDPR & PECR
EU ePrivacy
CCPA / CPRA

In short

  • We use a small set of cookies to keep you signed in, secure your scans, and improve the product.
  • Analytics and marketing cookies only run if you opt in — you can change your mind any time.
  • You can manage everything from the "Cookie Settings" link in our footer.
What are cookiesCategoriesRetentionManage preferencesRegional rightsUpdatesContact

This Cookie Policy explains how Ivy AI Solutions Limited ("ScanSkinAI", "we", "us", "our") uses cookies and similar tracking technologies when you visit www.scanskinai.com, our progressive web app, and our native iOS and Android applications (together, the "Services"). It should be read together with our Privacy Policy and Terms of Service.

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. We also use related technologies such as local storage, session storage, IndexedDB, pixels, SDKs and device identifiers. In this policy, all of these are referred to collectively as "cookies".

Cookies can be set by us ("first-party cookies") or by third-party providers whose services we embed ("third-party cookies"). They can also be "session cookies" (deleted when you close the browser) or "persistent cookies" (kept for a defined period).

2. Categories of cookies we use

Always on

Strictly necessary

Authentication, security, fraud prevention, consent storage, scan-in-progress state.

Optional

Functional

Region, language, recently viewed scans, onboarding progress, tracker state.

Consent-based

Analytics & performance

Google Analytics 4, Google Tag Manager, Firebase Analytics (in-app), error reporting.

Consent-based

Marketing & attribution

Google Ads, Meta Pixel, Awin partner attribution (Globelink, AURAS).

Checkout only

Payment processing

Stripe fraud detection, Apple In-App Purchase, Google Play Billing SDKs.

The list below names the specific providers and what they do.

2.1 Strictly necessary (always on)

  • Authentication and session tokens (Supabase Auth)
  • Security, fraud prevention and rate-limiting
  • Load balancing and CDN routing
  • Storing your cookie-consent choices
  • Storing your in-progress scan, language and accessibility preferences (localStorage / IndexedDB)

2.2 Functional

  • Region, language and unit preferences
  • Recently viewed scans, body location selections and tracker state
  • Onboarding progress and tutorial dismissals

2.3 Analytics & performance

  • Google Analytics 4 (Google Ireland Ltd) — aggregated usage, page views, conversion events
  • Google Tag Manager — tag delivery container
  • Firebase Analytics (within native iOS/Android apps)
  • Internal performance instrumentation (page-load timing, error reporting)

2.4 Marketing & attribution

  • Google Ads conversion tags
  • Meta (Facebook) Pixel
  • Awin affiliate tracking (partner attribution, e.g. Globelink, AURAS)

2.5 Payment processing

  • Stripe — fraud detection (m, __stripe_mid, __stripe_sid)
  • Apple In-App Purchase and Google Play Billing SDKs (in-app only)

3. How long cookies are stored

  • Session cookies: deleted when you close your browser.
  • Persistent cookies: typically between 7 days and 24 months, depending on purpose.
  • Consent record: stored for 12 months, after which we will ask you again.

4. Managing your preferences

You can change or withdraw your consent at any time by clicking "Cookie Settings" in the website footer. You can also control cookies through your browser settings:

ChromeSafariFirefoxEdge
Disabling strictly-necessary cookies will prevent core features (sign-in, scans, payments) from working.

For mobile apps, you can reset your advertising identifier in your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Privacy → Ads).

5. Region-specific rights

Your cookie rights depend on where you are located. Select your region below.

Hong Kong

For users in Hong Kong, our use of cookies is governed by the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"). Where cookies collect personal data, we follow the Six Data Protection Principles (DPP1–DPP6).

Strictly-necessary cookies are loaded on first visit. Analytics and marketing cookies are only set after you make an active choice in our cookie banner. You may withdraw consent at any time via "Cookie Settings" in the footer without affecting the lawfulness of processing carried out before withdrawal.

To exercise your access or correction rights, contact info@scanskinai.com. You may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) at pcpd.org.hk.

6. Updates to this policy

We may update this Cookie Policy from time to time to reflect changes to our Services, our providers, or applicable law. The "Effective date" at the top of this page shows when it was last revised. Material changes will be highlighted on our homepage or by email.

7. Contact us

Questions about cookies, consent, or your rights? We respond within 5 business days.

Ivy AI Solutions Limited