Your data, plainly.

This policy is issued by Elluvi, a small skincare business based in Lahore, Pakistan (trading as “Elluvi”). Contact: support@elluvi.com.

Orders: name, delivery address, phone number, email, order contents and support messages needed to fulfil and support your purchase.

Accounts: email and profile details you provide when you sign in (including via Google through our authentication provider, Supabase Auth).

Skin Companion: skin preferences, routine checklist history, streak data, product-usage estimates, reminder preferences, and — if you opt in — private progress photos and browser push-subscription details for routine reminders.

Product analytics: event names and anonymous interaction data (for example page views, companion steps, add-to-cart), plus session recordings and aggregate heatmaps of how pages are used. We do not send name, email, address or photo content to analytics tools.

Advertising measurement: we run ads on Facebook and Instagram, and we measure them. The Meta Pixel records four things in your browser — that a page was viewed, that a product page was viewed, that something was added to the cart, and that checkout was started — along with the product involved and the cart value. It sets its own cookies to tell one visit from the next. It does not read what you type into any form on this site.

Because we sell Cash on Delivery, a completed sale is only known days later when the parcel is actually delivered — long after you have left the site. To report that sale to Meta we send it from our server, not from your browser, and we include your phone number, name, city and email if you gave one, each converted to an irreversible hash before it leaves us. Meta uses those hashes to tell whether the sale came from an ad it showed. We never send the plain values, and we never send anything from your Skin Companion — no routine, no streak, no progress photo.

To process and deliver orders, provide Cash on Delivery and (when enabled) online payment checkout, run Skin Companion features you choose to use, send transactional messages, and improve the store. Marketing emails or WhatsApp promos only if you opt in. Routine push reminders are optional and can be turned off in Companion → Profile.

Courier partners — delivery name, address and phone for fulfilling your order.

Supabase — hosted database, authentication and private file storage for accounts, orders metadata and Companion data (including progress photos when you upload them).

Payment providers — only if you pay online; we pass the details needed to complete that payment. COD orders do not share card or bank data with payment processors.

Microsoft Clarity — session recording and heatmaps, used to find where the site is confusing or broken. Clarity records page interactions such as clicks, scrolls and mouse movement. Text you type into form fields is masked before it leaves your browser, so names, addresses, phone numbers and payment details are not recorded. Progress photos are never included. Usage is subject to the Microsoft Privacy Statement.

Meta (Facebook and Instagram) — the advertising measurement described in section 2. Meta receives the four browsing events listed there, the products and cart values attached to them, and — only for an order that was actually delivered — a hashed phone number, name, city and email. Usage is subject to the Meta Privacy Policy.

We do not sell customer data.

Journey photos are private to your signed-in account. They are stored in secured storage and are not shown publicly on product pages or marketing. You can delete individual photos or request full deletion of your Companion profile at any time.

Order records are kept for as long as required for accounting, fraud prevention and Pakistani legal obligations (typically several years for tax and dispute records).

Account and Skin Companion data (routines, streaks, photos, push tokens) are kept while your account is active. You can export or delete Companion data from Profile, or email us to request account deletion. After deletion we remove or anonymise personal data except where we must retain order history.

We primarily use browser local storage (not advertising cookies) to keep your cart, guest Companion answers and similar session helpers on your device. Auth sessions are managed by our authentication provider. Our own analytics identifiers are random values kept in local and session storage, not cookies, and are not derived from your name, email or IP address.

Microsoft Clarity sets two first-party cookies of its own, _clck and _clsk, to tell one visit from the next in its recordings. Neither is used for advertising and neither is shared with advertisers.

The Meta Pixel sets its own cookies, _fbp and — if you arrived from an ad — _fbc. These are advertising cookies: they are what connects a delivered order back to the ad that led to it. When you place an order we store those two values, and your browser name and version, on the order record, because the delivery that completes the sale happens days later when your browser is no longer involved. We clear them from delivered orders after 90 days, and they are deleted with the order if you ask us to delete your data.

You can clear site data in your browser at any time; doing so empties the local cart and guest Companion draft, and resets all of the identifiers above.

Email support@elluvi.com to request access, correction or deletion of your personal data, or to unsubscribe from marketing. Signed-in users can also manage Companion privacy actions under Companion → Profile.

To stop the advertising measurement described in section 2, you can turn off Off-Facebook activity in your Facebook or Instagram settings, or block advertising cookies and scripts in your browser. Either stops the pixel; clearing your site data also resets its cookies. Doing so does not affect your orders, your account or Skin Companion.