Privacy Policy
Effective date: 2026-08-30 (MVP-stage policy · to be updated once our business registration details are finalized)
1. Information We Collect and Why
- Account sign-up (required): email address, password (stored only as an irreversible hash), name — to identify your account and sign you in
- Account sign-up (optional): phone number — for order-related notices
- Fit Test: your questionnaire answers (including self-reported items such as mouth size) and your oral type code — used only to recommend products
- Orders: recipient name, phone number, and shipping address — to process and ship your order
2. We Do Not Collect Photos
The Fit Test runs on your questionnaire answers alone. We never ask you to take or upload a photo of your face or mouth, and we never request camera access, so no photos are collected, transmitted or stored.
3. Retention and Deletion
We delete your account information without undue delay when you close your account (or request deletion). You can submit a deletion request through the contact below. Transaction records that we are required by law to keep are stored separately for the required period and then deleted.
4. Third-Party Sharing and Service Providers
We do not provide or sell the personal information we collect to third parties. We currently use no outside service providers to process your personal information (if that changes, we will disclose it in this policy).
5. Cookies
We use a session cookie (httpOnly · Secure) to keep you signed in and a language-preference cookie (fb_lang) that remembers the site language you choose. We do not use advertising or tracking cookies.
6. Children's Privacy
Fit Tests for children under 14 are conducted only with the consent of a parent or legal guardian, and we do not accept account sign-ups in a child's name.
7. Security Measures
- HTTPS encryption for all data in transit
- Passwords stored as one-way hashes (scrypt+salt) — never in plain text
- Database closed to outside access (server-internal only) and protected by a firewall
- Safeguards against unauthorized access, including login attempt limits
- Data minimization — we collect only the minimum needed to make recommendations
8. Your Rights and Contact
You may request access to, correction of, or deletion of your personal information at any time.
Contact: the.renew3@gmail.com (interim contact until a privacy officer is appointed)