Privacy Policy

Your Data, Your Rights

Last Updated: March 30, 2026

March 30, 2026

Your Privacy Rights

As a registered user, you have the right to access, update, or delete your personal information at any time. You can request a copy of your data or account deletion by contacting us. We comply with UAE data protection laws including Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL).

1. Personal Information We Collect

Account Information:

Name, email, phone number, password (encrypted)

Profile Data:

Birthday, profile picture, skincare preferences

Order Information:

Purchase history, shipping addresses, preferred payment method

Delivery Addresses:

Saved delivery addresses across the UAE (emirate, area, building, floor)

Usage Data:

Website and app interactions, page views, session data, device type

2. How We Use Your Information

Processing, fulfilling, and delivering your orders
Managing your account and providing customer support
Sending order confirmations and delivery updates
Personalizing your shopping experience and product recommendations
Providing AI skin analysis and skincare routine suggestions
Sending notifications about new products and promotions (with your consent)
Improving our website, mobile apps, and services
Preventing fraud and ensuring transaction security
Complying with UAE legal and regulatory requirements

3. Mobile Applications

The GENOSYS UAE app is available on iOS (App Store) and Android (Google Play). When using our mobile apps, we may collect additional information:

Device Information:

Device model, operating system version, unique app identifier

Push Notifications:

Push notification token (only if you grant permission). You can disable notifications at any time in your device settings.

Biometric Authentication:

Fingerprint / Face ID is used locally on your device for quick login. Biometric data is never sent to or stored on our servers.

Camera (Optional):

Used only for the AI Skin Analysis feature. Photos are not stored on our servers after analysis is complete.

App Store (iOS) Google Play (Android)

4. AI Features & Skin Analysis

We use artificial intelligence (powered by OpenAI GPT-4o) to provide a personalized experience:

AI Skin Analysis:

When you use the skin analysis feature, your photo is sent to OpenAI for processing. We do not retain photos after analysis is complete. Results are used solely for product recommendations.

AI Chat Assistant (Genie):

Your conversations with the AI assistant are not stored or linked to your account. Each session is independent.

5. Google Authentication (OAuth)

Google Sign-In:

When you sign in with Google, we receive your basic profile information (name, email, profile picture) from Google according to your Google account privacy settings.

Data Shared:

We only receive information you explicitly consent to share during sign-in. We do not access your contacts, files, or other Google data.

Google Privacy Policy

6. Apple Sign‑In

When you sign in with Apple, we may receive your name and email (depending on your choice). Apple may provide a private relay email instead of your real address to protect your privacy.

Apple Privacy Policy

7. Payment Processing

We do not store your card details. All card payments are processed through Stripe, a PCI DSS-compliant payment provider. When you choose Cash on Delivery, no financial data is collected.

Available payment methods: Credit/debit card (Visa, Mastercard, Amex), Apple Pay, Google Pay, and Cash on Delivery.

8. Data Sharing & Third Parties

We never sell your personal information. We may share your data with:

Stripe: for secure payment processing
Delivery partners: to fulfil your orders (name, address, phone only)
OpenAI: for AI skin analysis and chat assistant (anonymized data)
Vercel: website hosting (anonymized data)
Law enforcement: when required by UAE law

9. Cookies & Tracking

We use essential cookies to maintain your login session, shopping cart, and language preferences. We do not use third-party tracking cookies or targeted advertising.

10. Data Security

We implement appropriate security measures to protect your data:

All data encrypted in transit via HTTPS/TLS
Passwords are hashed and cannot be read back
Payment data processed through PCI DSS-compliant Stripe
CSRF protection on all forms and API requests
Rate limiting to prevent abuse
Regular security audits

11. Data Retention

We retain personal data as long as your account is active or as needed to provide our services. Order data is kept for 5 years to comply with UAE accounting and tax requirements. You can request account deletion at any time by contacting us — personal data will be removed within 30 days, except transaction records required by law.

12. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child without parental consent, we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. For material changes, we will notify you by email or app notification.

14. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us:

GENOSYS Middle East FZ-LLC

sales@genosys.ae

+971 58 548 76 65