Fiomio attaches great importance to protecting your privacy. This policy explains what data we collect, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
The data controller is the publisher of the site (see legal notice), reachable at hello@fiomio.io.
Data we collect
- Email address, when you join the waitlist or subscribe to the newsletter.
- City and approximate location, auto-detected from your IP and editable, or chosen by you, so we can tailor the newsletter to your local climate and season. Stored alongside your email only if you subscribe.
- Anonymous diagnostic data, your answers (skin type, concerns, chosen actives, city, season) and the actives we recommend are stored in anonymized form, without your email and without your IP address, to improve the quality of our recommendation engine.
- Anonymous feedback, whether a recommendation felt right, stored without any identifier.
- Account data, if you create an account: your email address (used to sign you in), the diagnostic results you choose to save, and your skin tracking check-ins (the scores and notes you log). This data is linked to your account.
- Cookieless audience measurement, aggregate visit statistics that use no cookies and do not identify you.
Purposes and legal basis
- Sending you early access and the seasonal newsletter, legal basis: your consent (given when you sign up).
- Providing the account features you opt into, saving your results and tracking your skin over time, legal basis: your consent and the performance of the service you requested.
- Improving our recommendation engine from anonymized diagnostic and feedback data, legitimate interest.
- Producing aggregated, anonymized market insights and reports that may be shared or sold to skincare brands, legitimate interest. These contain no individual data and never identify you.
Recipients and processors
Your personal data is never sold. The only recipient of personal data is our email provider (Brevo, based in the EU), used to manage the waitlist and the newsletter. Our other providers receive no data that identifies you: hosting and cookieless analytics receive no identifying data, weather lookup receives none, and diagnostic data is anonymized. If you create an account, your account data (email, saved results, skin check-ins) is stored by our database and authentication provider (Supabase). It is never sold and never shared with brands. A full list of our processors is available on request.
Brands only ever receive aggregated, anonymized insights, never your personal data.
Retention period
Your email and city are kept until you unsubscribe, then deleted within a reasonable time. Anonymized diagnostic data, being non-identifying, may be kept to improve the service. If you create an account, your account data and skin tracking are kept while your account is active and deleted when you delete your account or on request. You can unsubscribe at any time via the link in every email.
Your rights
You have the following rights over your personal data at any time:
- right of access, rectification and erasure;
- right to portability and to restriction of processing;
- right to object and to withdraw your consent.
To exercise them, write to hello@fiomio.io. You may also lodge a complaint with the CNIL (cnil.fr). Note that anonymized data cannot be linked back to you and therefore cannot be individually retrieved.
Cookies
The site uses no advertising cookies and no third-party profiling trackers. Our audience measurement is cookieless. Only elements strictly necessary for the site to function may be used.
Contact
For any question about your data: hello@fiomio.io.