Your data, plainly.
What Elluvi collects for orders, accounts and Skin Companion — and how you can access or delete it.
Who we are
This policy is issued by Elluvi, a small skincare business based in Lahore, Pakistan (trading as “Elluvi”). Contact: support@elluvi.com.
What we collect
Orders: name, delivery address, phone number, email, order contents and support messages needed to fulfil and support your purchase.
Accounts: email and profile details you provide when you sign in (including via Google through our authentication provider, Supabase Auth).
Skin Companion: skin preferences, routine checklist history, streak data, product-usage estimates, reminder preferences, and — if you opt in — private progress photos and browser push-subscription details for routine reminders.
Product analytics: first-party event names only (for example page views, companion steps, add-to-cart). We do not send name, email, address or photo content to third-party analytics tools. No third-party advertising pixels are installed on this site.
How we use it
To process and deliver orders, provide Cash on Delivery and (when enabled) online payment checkout, run Skin Companion features you choose to use, send transactional messages, and improve the store. Marketing emails or WhatsApp promos only if you opt in. Routine push reminders are optional and can be turned off in Companion → Profile.
Who we share it with
Courier partners — delivery name, address and phone for fulfilling your order.
Supabase — hosted database, authentication and private file storage for accounts, orders metadata and Companion data (including progress photos when you upload them).
Payment providers — only if you pay online; we pass the details needed to complete that payment. COD orders do not share card or bank data with payment processors.
We do not sell customer data.
Progress photos
Journey photos are private to your signed-in account. They are stored in secured storage and are not shown publicly on product pages or marketing. You can delete individual photos or request full deletion of your Companion profile at any time.
How long we keep it
Order records are kept for as long as required for accounting, fraud prevention and Pakistani legal obligations (typically several years for tax and dispute records).
Account and Skin Companion data (routines, streaks, photos, push tokens) are kept while your account is active. You can export or delete Companion data from Profile, or email us to request account deletion. After deletion we remove or anonymise personal data except where we must retain order history.
Cookies & local storage
We primarily use browser local storage (not advertising cookies) to keep your cart, guest Companion answers and similar session helpers on your device. Auth sessions are managed by our authentication provider. You can clear site data in your browser at any time; doing so empties the local cart and guest Companion draft.
Your choices
Email support@elluvi.com to request access, correction or deletion of your personal data, or to unsubscribe from marketing. Signed-in users can also manage Companion privacy actions under Companion → Profile.