01Who we are
This Privacy Policy explains how Houcine Bousfiha (“Neem”, “we”, “us”), of Casablanca 20000, Morocco, handles personal information when you use the Neem mobile application and related services (the “Service”), and when you visit this website.
For the purposes of data protection law, we are the controller of the personal information described in this policy. If you have any question about it, contact us at neemai.app@gmail.com.
This policy should be read together with our Terms of Service.
02Information we collect
We collect only what we need to run the Service. Depending on how you use Neem, this includes:
| Category | What it includes |
|---|---|
| Account details | Your email address, first and last name, and profile photo, as provided when you sign up with email, Apple or Google or as you later change them in the app (a photo you choose is stored by our sign-in provider and you can remove it at any time); a unique account identifier; your chosen app language; and the date you confirmed, before your first simulation, that simulations are AI illustrations and not medical advice. If you use Apple’s “Hide My Email”, we receive the relay address Apple gives us. |
| Skin profile | The description of your skin you type (or speak, with voice input), the concern chips you select (for example acne, dark spots or redness), and the profile our AI derives from them: each concern’s severity and the facial areas concerned. |
| Product photos | Photos you take or choose of a skincare product’s front and, optionally, its label or ingredient list, and what is read from them (brand, name, category, ingredients, directions). |
| Simulation content | The face model you choose, the images generated for you (your personalized Day 0, the previews shown while it is being made, and the Day 30, 60 and 90 frames), relevance scores, timeline summaries and the history of your saved simulations. Day 30 and 60 are usually composed on our servers from your Day 0 and Day 90 images, without an AI request. |
| Routines | The products you add to your schedule, the times of day and days you use them, reminder times, pause status and the tasks you tick off. |
| Assistant conversations | If you use the Neem Assistant (Neem Plus): the messages you send it, its replies, the actions it offers (such as starting a simulation or pausing a routine) and whether you confirmed them, and whether you saved a conversation. A saved conversation is named after your first message in it. |
| Device and notifications | If you allow notifications: a push notification token, your device platform (iOS or Android), app language and time zone, so reminders arrive at the right local time and in your language. The app also keeps a list of the notifications we sent you (which reminder or result, and whether you read it), shown in the app’s Notifications screen. |
| Subscription status | Whether you have Neem Plus, the plan (monthly or yearly), its renewal or expiry date and the store it was bought from. We do not receive your payment card details: payments are handled by Apple or Google. |
| Usage events | Which steps of the app you reached and when: signing up, describing your skin, scanning a product, starting and finishing a simulation, saving a routine, seeing the Neem Plus screen, and starting or ending Neem Plus. Each comes with a few details, such as a scan’s result or whether you received the free simulation, and your sign-up records the domain of your email address (for example gmail.com), never the address itself. They are kept in our own database, never in a third-party analytics service. |
| Diagnostics | Crash reports, error logs, performance traces, the usage and cost of each AI request, counts of the Neem Assistant’s lookups and actions (never the content of your messages, unless you report a reply, as described under Sentry below) and, for a sample of sessions, a privacy-masked replay of app screens. These are linked to your account identifier only, not to your name or email. |
Stored only on your device
Your sign-in session is kept in your device’s secure storage (Keychain on iOS, Keystore-backed storage on Android). Your language, appearance (light, dark or system) and a few display preferences are saved in a small file on your device and are not sent to us.
When you create a Skincare Report (Neem Plus), the PDF is made on your device and kept in the app’s private storage only while the report screen or card that made it is open, and deleted after an hour at the latest. We don’t receive or keep a copy (see The Skincare Report).
03What we don’t collect
Neem is designed to work without the most sensitive kinds of data:
- No photos of you. Neem never asks for a selfie. Simulations are shown on synthetic AI face models, so we do not collect images of your face or any biometric data.
- No voice recordings. The microphone is used only while you speak, after you allow it: a message to the Neem Assistant, or the description of your skin. Your phone’s own speech recognition turns your words into text (Apple’s on iPhone, Google’s on Android): on the device itself when your language is installed for it, otherwise through Apple’s or Google’s speech service, under their privacy terms. Neem never receives or keeps the audio; only the text you choose to keep reaches us, like typed text.
- No location. We do not collect your GPS or precise location. We only use your device’s time zone for reminders.
- No advertising or tracking. Neem contains no advertising SDKs and no third-party analytics. We do not track you across other companies’ apps or websites, and we do not sell or “share” your personal information for cross-context behavioral advertising.
Camera and photo library access are used only when you choose to photograph or pick a product, and only that photo is uploaded. Please photograph the product alone and avoid capturing people, faces or documents in the frame.
04How we use your information
We use personal information to:
- create and secure your account, and keep you signed in;
- build your skin profile, analyse the products you scan and work out how relevant they are to your concerns;
- generate, store and show your simulations and their timeline summaries, in the language you choose;
- save your routines and send the reminders and “your simulation is ready” notifications you ask for;
- answer your questions in the Neem Assistant using your own Neem data, and carry out the actions you confirm there (Neem Plus);
- put your records together for the Skincare Report you ask for, a PDF made on your device (Neem Plus), from the app or the Neem Assistant;
- provide Neem Plus, verify your subscription status and restore purchases;
- apply the Service’s rules fairly, for example granting one free simulation per person and enforcing fair-use limits on generations;
- diagnose crashes and errors, keep the Service reliable and secure, and prevent abuse;
- respond to your requests and comply with our legal obligations.
No profiling with legal effects. Our AI produces cosmetic previews and suggestions. It is not used to make decisions that produce legal or similarly significant effects about you.
05How our AI features use your data
Neem’s AI features are powered by OpenAI, which acts as our service provider. To provide them, our servers send OpenAI only what each step needs:
- your skin description and selected concerns, to build your skin profile;
- your product photos, to identify the product and read its label;
- the face model image and your skin concerns, to generate and check your personalized Day 0 and your Day 90 frame (and Day 30 and 60 when they can’t be composed from those two);
- for the Neem Assistant: your message, the last few messages of the conversation, your first name, the app language and date, a short summary of your account (for example how many products you have scanned), and only the parts of your Neem data a question needs (see below).
We never send OpenAI your email address, and we send your first name only to the Neem Assistant, so it can address you. For text and image analysis and for the Neem Assistant, we instruct OpenAI not to store the request on its platform. Under OpenAI’s API terms, data sent through its API is not used to train OpenAI’s models, and may be retained by OpenAI for a limited period for abuse monitoring. We do not use your photos, descriptions or results to train AI models of our own.
When a product is identified with high confidence, its brand, name and category are added to a shared product catalog that helps recognize the same product for other users. Your photo and your identity are never added to it.
A personalized Day 0 shows only one of our synthetic face models with the skin concerns of a skin profile. When another user has already had the same face model shown with exactly the same concerns, we may give you a copy of that image instead of generating a new one, and a Day 0 made for you may be copied for another user in the same way. The copy is stored in that user’s own private folder. It never contains a photo of you, your description, your name or anything else that identifies you, and the other user never learns that it came from another account.
The Neem Assistant
- Only what a question needs. To answer, the assistant looks up the relevant parts of your own data: your skin profile, the products you scanned and what was read from their labels, your routines and today’s tasks, and your simulations. It cannot see anyone else’s data, and it reads your data fresh each time rather than relying on old messages.
- Nothing happens without you. The assistant can offer to start a simulation, pause or resume a routine, or tick off a task. Nothing is done until you tap Confirm on its card, and then the same rules apply as anywhere else in the app (Neem Plus, fair-use limits). It never changes your skin profile or your saved simulations.
- Reports. If you ask for a report of your skincare, the assistant shows a Skincare Report card. It doesn’t read or summarize your records for it: the PDF is made on your device, from your records, when you tap the card.
- Skincare only. The assistant answers questions about skincare and your Neem data, and declines other topics. Its answers are general information, not medical advice.
06The Skincare Report
With Neem Plus, you can create a Skincare Report: a PDF of your skin profile, the products you scanned and what was read from their labels, your current routine and reminders, a timeline of your recorded activity, your saved simulations with their images, and counts of your activity. You choose a complete report or the last 7, 30 or 90 days. From the History tab you can also create the report of a single saved simulation: that simulation with its images, the product it was made with and what was read from its label, and that product’s routine. Everything below applies to both.
- Made on your device. Our servers send the app your own records (and short-lived signed links to your images), and the app lays out and creates the PDF on your device. No AI request is made to create it, and no simulation is generated again.
- Not kept by us. We don’t store the PDF or publish it at a web address. On your device it stays in the app’s private storage, and is deleted when you close the report or make another one, or after an hour at the latest.
- You decide where it goes. The app opens your device’s share sheet, where you can save the PDF to your files, print it or send it to someone. Once you save or send it, the copy is outside Neem, and the app or service you chose (and the people you send it to) handle it under their own terms. The report contains your skin description and other personal information: share it only with people you trust.
07Legal bases (EEA, UK and similar laws)
Where the GDPR, the UK GDPR or a similar law applies, we rely on the following legal bases:
| Basis | Used for |
|---|---|
| Performance of a contract | Your account, skin profile, product analysis, simulations, routines, reminders, the Neem Assistant, the Skincare Report and Neem Plus. |
| Consent | Push notifications, camera or photo access, and microphone and speech recognition access for voice input (given through your device’s permission prompts, and withdrawable at any time in your device settings). Where your skin description, or anything you tell the Neem Assistant about your skin, could be considered health information, we process it on the basis of your explicit consent, which you give by entering it, and you can withdraw it by editing your profile, clearing the conversation or deleting your account. |
| Legitimate interests | Diagnostics and security, preventing abuse of the free simulation, understanding from usage events where people stop along the way, and improving the reliability of the Service. We balance these against your rights, and minimize the data used (for example, masking diagnostic replays). |
| Legal obligation | Keeping records we are required to keep, and responding to lawful requests. |
09Retention and deletion
We keep your information for as long as your account is open. Your saved simulations stay available to you until you delete them with your account.
Product photos. We keep the photos you take of a product as they are for 30 days. After that, the photo of its label or ingredient list is deleted, and the photo of its front is replaced by a small copy, which shows the product in your history, routines and reports. What was read from the label stays with your scan.
Assistant conversations. Your current conversation is kept until you clear it. Clearing a conversation you haven’t saved deletes it, with its messages and action records. A saved conversation is kept until you remove it from your saved conversations or delete your account. Simulations the assistant started for you stay in your history like any other.
Deleting your account
You can delete your account at any time in the app (Profile → Delete account). When you do, we:
- delete your account from our sign-in provider, which also signs you out on every device;
- if you signed in with Apple on iPhone, ask Apple to revoke Neem’s “Sign in with Apple” access, so your Apple ID is no longer linked to Neem (the app asks you to confirm with Apple when you delete; if you close that step, nothing is deleted, and if the revocation can’t be completed, your account is still deleted and you can remove Neem in your Apple ID settings under Sign in with Apple);
- delete, in a single operation, your account record, skin profiles, product scans, simulations, personalized faces, routines, completed tasks, Neem Assistant conversations (with their messages and action records), notification history, notification devices and subscription record from our database;
- delete your customer record and purchase history from RevenueCat;
- delete the folder holding your product photos and generated images from ImageKit, a few minutes later, once any task already running has finished.
What we keep. To make sure each person receives only one free simulation, we keep a one-way cryptographic hash of your normalized email address. It cannot be reversed into your email and is not linked to any other data about you. Your usage events stay in our counts without your account identifier, so they no longer relate to you.
Signing out of the app removes your device’s notification token. Diagnostic data is kept by Sentry for 90 days, and residual copies may remain in our providers’ encrypted backups for up to 30 days before being overwritten. Deleting your Neem account does not cancel a subscription bought through the App Store or Google Play; cancel it in your store account.
10Security
We protect your information with measures that include:
- encryption in transit (HTTPS) between the app, our servers and our providers;
- verification of your signed session token on every request to our servers;
- private image storage: your photos and generated images are not public, and the app shows them through signed links that expire;
- secret keys kept only on our servers, never in the app;
- your session stored in your device’s secure storage;
- diagnostics configured to exclude personal details by default, with text and images masked in session replays.
No system is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the authorities where the law requires it.
11Your choices and rights
In the app
- Edit your skin profile at any time; simulations already made keep the profile they were built from.
- Assistant conversations: clear the current conversation, or remove a saved one, from the assistant’s menu.
- Skincare Report (Neem Plus): create a readable PDF of your skin profile, products, routine, activity and simulations at any time, from the menu, the History tab or the Neem Assistant, and the report of any single saved simulation from its card in the History tab.
- Notifications: turn reminders off for any routine, or disable notifications in your device settings; delete any notification, or clear them all, in the app’s Notifications screen.
- Camera, photos and microphone: change access in your device settings (on iPhone, speech recognition too).
- Delete your account and data, as described above.
By request
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent at any time (without affecting processing that took place before). To exercise these rights, email neemai.app@gmail.com from the address linked to your account. A request for a copy of your data is open to everyone, with or without Neem Plus, and covers all the personal information we hold about you, not only what the Skincare Report shows. We will respond within the time the law requires (usually one month), and may need to verify your identity first.
If you are in the EEA or the UK, you may also lodge a complaint with your local data protection authority. Residents of California and other US states with privacy laws have the rights described above; we do not sell or share personal information, and we will not discriminate against you for exercising your rights.
12International transfers
Our providers may process information in the United States and other countries outside your own. Our database is hosted in the United States (AWS US East), and our application server runs on Cloudflare’s global network. Where information is transferred out of the EEA, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
13Children
Neem is not intended for anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us at neemai.app@gmail.com and we will delete it.
14This website
This website does not use cookies, analytics or advertising trackers. It stores only your appearance choice (light, dark or system) in your browser. Our hosting provider may process standard server logs, such as IP addresses, to deliver and protect the site.
15Changes to this policy
We may update this policy as Neem evolves. We will post the new version here with a new “Last updated” date and, if the changes are significant, tell you in the app or by email before they take effect.
16Contact us
Houcine Bousfiha
Casablanca 20000, Morocco
Email: neemai.app@gmail.com