REMS Privacy Policy
Effective date: 1 November 2026 Last updated: 8 October 2026
1. Who we are
REMS is a skincare app that builds and analyses skincare routines from ingredient science. It is operated by Lamine Baghriche, 101 Peel Street, Montréal, Québec H3C 0Y1, Canada ("REMS", "we", "us").
Person in charge of the protection of personal information: Lamine Baghriche, founder, team@remsbeauty.ca. You can write to this person about anything in this policy, to exercise your rights, or to make a complaint.
2. Who REMS is for
REMS is for people 16 and older. We ask for your date of birth at sign-up and do not create accounts for anyone younger. If you believe someone under 16 has an account, contact us and we will delete it.
3. What we collect, and why
We collect only what the app needs to work. We do not sell personal information, we do not show ads, and we do not use any third-party analytics, advertising or tracking tools.
| What | Why we need it |
|---|---|
| Account: email address, password (stored only as a secure hash) | To create your account and sign you in |
| Profile: display name, optional bio and photo, language, country (chosen by you, not detected), date of birth | To show your profile, use your language, show prices and retailers for your country, and apply age-based ingredient rules |
| Skin profile: your questionnaire answers, such as skin type, concerns, sensitivity, known reactions, conditions you choose to tell us about, and hormonal status including pregnancy or breastfeeding | To recommend and analyse routines that are safe and suitable for you. Some ingredients are filtered out entirely during pregnancy or after a declared reaction |
| Routines and tracking: your routines, check-ins, ratings, reaction logs, diary entries and outcomes | To track your progress and adjust future recommendations |
| Photos: progress photos you take, your profile photo, and photos of products you scan | Progress photos are for you alone, to compare your skin over time. Product photos and barcodes are used to identify the product. When a barcode is not in our catalogue, the barcode number alone is sent to a barcode database (see section 5) |
| Your shelf and cart: products you own or are considering | To analyse your routine and compare products |
| Community (only if you use it): connections, blocks, reports, product impressions and comments you share with your connections | To let you share with people you have connected with, and to keep the community safe. Reports are emailed to our team so that a person can act on them |
| Consent records: when you accepted these terms, this policy and the processing of your health-related information | To prove your consent and respect withdrawals |
| Retailer clicks: which product and retailer you opened from the app | To earn the commission that funds REMS (see section 7). We never send your profile to the retailer |
| Notification settings | To send the reminders you chose. Reminders are scheduled on your device |
| Error reports: the type and code of an error and a short technical context | To find and fix bugs. They never contain your profile content |
Face detection. When you take a progress photo, the camera checks on your device that a face is framed correctly. This check runs entirely on your phone. No facial geometry or biometric data is stored or sent anywhere; only the photo you choose to keep is saved.
Photos are never used to train any model, never shared with retailers or other users, and are stored in a private space only your account can access.
Information about your health. Your skin profile, reactions, conditions and pregnancy status are sensitive. We ask for your explicit consent before collecting them, and we use them only to produce your recommendations.
4. How recommendations are made (automated processing)
Your routines, product scores and analyses are produced automatically by the REMS Engine, a scoring system we operate. It applies ingredient-science rules to your skin profile. No person reviews each recommendation before you see it.
You have the right to: - know which information about you was used to produce a recommendation. The "Why this routine" screen shows the facts behind each routine and how they were weighed; - ask a person at REMS to review a recommendation, and send us your comments, by writing to team@remsbeauty.ca.
5. Who processes your information
We do not sell or rent personal information. It is processed only by:
- Supabase, which hosts our database, sign-in, file storage and server functions, in the eastern United States.
- Vercel, which hosts the REMS Engine in the United States (Washington, D.C. area). The Engine receives the skin-profile information needed to compute a recommendation. It does not keep it, and our logs of Engine requests store only technical data (timing, status, a fingerprint of the request), never the profile itself.
- Resend, in the United States, which delivers the emails REMS sends. It receives your email address and the 6-digit code when we email you a code to confirm your account, reset your password or change your email address. It also delivers to our team the email we send each time someone reports a member, a routine, an impression or a comment: this email contains the reason for the report, the note the reporter wrote, the display names of the people involved and, for an impression or a comment, the reported text. It never contains email addresses, dates of birth, skin profiles or photos. Resend may keep a record of the messages it delivered for a limited time, which deleting your account does not remove.
- Go-UPC, a barcode database, which receives only the barcode number when you scan a product that REMS does not already know, so that we can find its name and ingredients. It receives nothing that identifies you.
- Apple and Google, to deliver the app and, if you allow them, notifications.
- Retailers (for example Ulta, Sephora, Amazon) only receive a visit when you choose to open a product link. The link identifies REMS as the referrer. It does not include your name, email or skin profile. What the retailer collects on its own site is governed by its own privacy policy.
These providers act on our behalf and under contract. Other users see only what you choose to share with your connections (your public profile, routines or shelf if you make them visible, your impressions and comments).
We may disclose information if the law requires it.
6. Where your information is stored
Your information may be stored and processed outside Québec and outside Canada, including in the United States, where our service providers operate. Before transferring it, we assess whether it will receive adequate protection, and our providers are bound by contract to protect it.
7. How REMS is funded
REMS is free. When you buy a product after opening a retailer link in the app, the retailer may pay us a commission. It costs you nothing, and commissions never influence product scores, rankings or recommendations.
8. How long we keep it
We keep your information for as long as your account exists. When you delete your account, we delete your profile, skin profile, routines, tracking history, photos, community content, consent records, retailer clicks and error reports. Backups made by our hosting provider are overwritten within 30 days.
We may keep a record that an account was deleted, or information we must keep by law, for as long as the law requires.
9. Your rights
Wherever you live, you can:
- access your information: Settings → Your data → Export all my data gives you a copy;
- correct it: edit your profile and skin profile at any time;
- delete it: Settings → Your data → Delete my account removes your account and your data;
- withdraw consent: you can stop sharing optional information, turn off discovery, notifications and community features, or delete your account. Some information (such as your skin profile) is needed for the app to work, so withdrawing consent for it means we can no longer make recommendations;
- ask about automated decisions (section 4);
- get your information in a structured, commonly used technological format (data portability) via the export;
- complain: write to our privacy officer first. If you are not satisfied, you can contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) if you live in Québec, or the Office of the Privacy Commissioner of Canada (priv.gc.ca).
If you live in the United States, you have the rights listed above. Depending on your state, you may have additional rights under state privacy and consumer-health-data laws, including the right to know, delete and correct, and to withdraw consent to the collection of consumer health data. Send any request to team@remsbeauty.ca. We do not sell or share personal information for targeted advertising.
We answer requests within 30 days.
10. Your choices about visibility
Your profile can only be found by other users if you turn on discovery in Settings. It is off by default. Your routines and shelf are only visible to people you connect with, as you choose.
11. Security
Data travels encrypted (HTTPS). Your session is kept in your phone's secure storage. Access to your data is restricted at the database level so that each account can only read its own private data. No method is perfectly secure. If an incident creates a risk of serious injury, we will notify you and the authorities as the law requires.
12. Changes to this policy
If we change this policy in a meaningful way, we will tell you in the app before the change takes effect and, where required, ask for your consent again.
13. Contact
Lamine Baghriche Privacy officer: Lamine Baghriche, founder 101 Peel Street, Montréal, Québec H3C 0Y1, Canada team@remsbeauty.ca