In force since 5 September 2026 · Русская версия
In short:
Beauty Stuff is developed and maintained by a private individual. Questions about data, deletion requests and anything else — basilkot@gmail.com.
The contents of your bag live in the phone’s memory:
Records live in the app’s database, photos in its own folder. Neither is available to other apps. Deleting Beauty Stuff erases all of it along with the app.
Until you sign in, that is all there is: the app works without a network, and the contents of your bag go nowhere.
Signing in is needed for syncing and for the paid features; without them it is not required. Signing in uses Sign in with Apple, and accounts are kept by Firebase Authentication, a service of Google LLC. What is stored about you:
If you chose “Hide My Email” when signing in, we receive an Apple relay address
of the form …@privaterelay.appleid.com rather than your real one. Mail reaches you
through it, and we never learn the address itself. The app never sees or stores your Apple ID
password: signing in is handled by the system.
You turn syncing on, and you turn it off. While it is off, nothing listed below leaves the device.
When it is on, the contents of your bag are copied to the cloud:
Records are stored in Cloud Firestore, photos in Firebase Cloud Storage; both services belong to Google LLC. The data sits in a section marked with your identifier, and the access rules are such that only someone signed in as you can read it. We do not read the contents of your bag.
Turning syncing off stops the exchange but does not by itself erase what has already been sent. How to delete it — see “How long it is kept” below.
These are paid features. They work through our server, which calls a language model from Anthropic PBC (USA). Nothing goes there directly from the app.
Before the first request the app shows a separate screen with the same list as below, and sends nothing without your agreement. You can switch these features off entirely in the app’s settings — everything else keeps working as before.
Notes on products are never sent — neither when reading a label nor for advice. They are the most personal thing in the bag, and they stay on the device.
Anthropic receives the above in order to answer the request. How that company handles what it receives is described in its privacy policy and commercial terms.
Our server keeps:
The photos themselves are not stored on our server. They pass through it to the model and do not remain in storage.
Payment goes through the App Store. Card and payment details are handled by Apple; the app never sees them. The app learns the state of the subscription — active, renewed or cancelled — from the App Store and ties it to your account, so that the paid features open on all your devices.
So that other programs cannot call our server, Firebase App Check with App Attest is used: Apple confirms that the request came from a genuine copy of Beauty Stuff. The contents of your bag take no part in that check.
When the app crashes or trips over an error, a technical report is sent:
The contents of your bag, photos and product names never appear in a report.
The library collects anonymous information about how the app is used: launches and moves between screens, device model, iOS version, language and approximate country. The app also sends a few events about the purchase screen — whether it was opened, which tier was chosen and how it ended — so that breakages such as an empty purchase screen get noticed.
The advertising identifier (IDFA) is not collected, the app does not ask for tracking permission, and no user profile is built from this data. The contents of your bag never appear in these events: what leaves is the shape of a purchase, not the purchaser.
How Google handles what it receives is described in the Google Privacy Policy and the Firebase terms.
“Save a backup” collects a file with products, catalogues and photos and hands it to the system sheet — you choose where it goes: Files, iCloud Drive, or anywhere else. The app never sends the backup anywhere by itself and has no access to your other files.
If iCloud Backup is on, the system copies the app’s data along with everything else. That is done by iOS, not by the app: Beauty Stuff has no access to the contents of such a backup. It can be turned off in the device settings.
A collage or a year summary becomes an image and is handed to the system share sheet. Where it goes is up to you; the app never sends it anywhere by itself.
Data on the device lives until you delete it, or delete the app.
The cloud copy lives as long as you use it. If there has been no syncing for six months, the copy is deleted along with the photos and the account. A month before that we write to your account’s address, so that you have time to come back and lose nothing simply by opening the app. We never delete without warning.
The bag on your phone stays where it is: only the cloud copy is deleted.
You can delete everything at once yourself: Settings → Syncing → Delete account. The cloud records, the photos and the account itself are erased.
The app is not aimed at children under 13 and does not knowingly collect their data.
If what is sent changes, this page will be updated and the date at the top will change with it. Significant changes are shown by the app separately — the same way it shows the agreement for calling the model.