Conservative scope
Lustra treats appearance concerns, skin and hair characteristics, fitness preferences, routine information, photos, and related generated observations as potentially sensitive or consumer health data.
This conservative treatment does not state that every category or every consumer-health law applies. Approved launch regions and any additional rights or response periods require qualified legal review before public release.
Categories and sources
Potentially sensitive information comes directly from you through onboarding answers, optional selfie analysis, optional progress photos, check-ins, fitness features, plan feedback, and account controls. Lustra also creates profile, plan, look, and progress records from the features you choose.
Lustra does not obtain consumer health data from data brokers, advertising networks, or public records.
Purposes
Lustra uses this information to provide requested appearance planning, routine suggestions, fitness planning, progress history, safety boundaries, account export, deletion, and reliability controls.
Optional product analytics uses only fixed coarse events and excludes health values, photos, quiz answers, generated content, prompts, and free text.
Processors and disclosure
Supabase processes account and product data as the application backend. OpenAI receives the disclosed minimum profile and activity context only after optional AI-personalization consent. It receives a prepared selfie and disclosed quiz categories only after additional photo-specific consent.
Billing providers process subscription evidence only if billing is activated. Lustra does not sell consumer health data or disclose it for targeted advertising.
Controls and requests
Signed-in controls provide data export, consent withdrawal, targeted photo deletion, and permanent account deletion. The public Account Deletion page explains how to recover access before using the verified deletion flow.
For questions about potentially sensitive information, email privacy@lustraapp.com.
Retention, security, and changes
The main Privacy Notice describes current engineering retention boundaries and security controls. Material changes will use a new effective date and renewed acknowledgement where required.