Privacy, in plain words.
Thai Berries is a beauty store preparing for launch. Skin Studio is an AI beta for adults, offering cosmetic routine guidance. This notice describes the current service. Updated 6 November 2026.
Your launch invitation
If you join the waitlist, we save your email, consent wording and date, signup source, selected interests and campaign tags. This is managed in your Skin Studio account and does not include its photos or conversations. New signups verify their email and create an account. Launch emails are a separate choice from AI processing consent; you can switch them off in account settings. Older private management links still work for signups made before this account flow.
Your Skin Studio account
We verify your email with a single-use code or sign-in link, valid for 15 minutes. Using either one also consumes the other. We store your email, account creation date, hashed codes and sign-in tokens, verification attempt counts and session expiry. A necessary, secure session cookie keeps you signed in for up to 30 days. If you choose a password, we store its hash, not the password itself. Signing in does not subscribe you to marketing.
Notes, routines and your shelf
With your explicit consent, we save your questionnaire, messages, AI replies, associated AI processing context, consent version and timestamps in your account. Product names, notes and purchase dates you add to your shelf are self-reported. There are no real store orders yet. Skin Studio can refer to recent messages in the current routine and your shelf; it does not remember every conversation automatically.
Optional photos and AI processing
A selected photo stays on your device until you submit your routine or send a verification email with a completed, consented questionnaire. For that sign-in handoff, we temporarily store an encrypted copy of the questionnaire and optional photo. It is accessible only after you verify the same email. The draft expires after 15 minutes; verification gives you another 15 minutes to start the analysis. Successful analysis removes the encrypted draft from the active database. Expired payloads are removed by maintenance within the next 15 minutes. Your browser reduces its size, then our server re-encodes it to remove metadata before sending it to Kimi (Moonshot AI) with your notes and relevant conversation context. The image is not kept as part of your saved routine. Encrypted handoff copies may remain in operational backups until those backups expire. AI replies can describe the photo, so those descriptions remain in your saved conversation. The model cannot re-open an earlier photo in a later message.
Your submitted skin information may be sensitive. Share only your own photo and what you are comfortable sending to an external AI provider. Avoid identification documents, other people’s images and detailed medical records. You can use the service without a photo. Photo interpretation and AI guidance may be inaccurate and do not provide diagnosis or treatment.
Services that process information
The app and database run on Northwestern’s hosting infrastructure. Resend processes your email address and sign-in message to deliver verification codes and magic links. Our initial sender is Thai Berries at hello@northwesternsolutions.org. Kimi’s API processes your submitted notes, optional photo, recent conversation and shelf information as needed to respond. We do not send your account email to Kimi as a profile field.
Kimi’s platform privacy policy describes storage in Singapore; Resend’s policy describes processing in the United States. These providers apply their own retention and security terms. We do not claim that AI submissions are never retained by the provider. Read Kimi’s privacy information and Resend’s privacy policy.
Your controls and retention
Use your account to delete individual routines, remove shelf items, or delete your account and all associated routines, messages, tokens and sessions from the active database, and remove your launch-email signup. Account deletion requires a recent sign-in. Saved content stays until you remove it. Operational backups expire within 14 days; deleting active data does not immediately erase existing backups or provider records. Expired sign-in tokens and sessions are cleaned regularly. Short-lived hashed rate-limit records help prevent abuse and manage the beta allowance.
Contact and requests
For access, correction, deletion or privacy questions, contact hello@northwesternsolutions.org and mention Thai Berries. The final store operator’s legal identity will be added when confirmed. You may also contact your local data protection authority about your rights.
Cookies, tracking and security
We use necessary customer and admin session cookies. There are no advertising pixels or third-party analytics. Fonts and campaign imagery are served with the site. Earlier demo basket preferences may remain in your browser until you clear site storage; shopping is now unavailable. Credentials, photos and full chat content are not included in application error logs.