Privacy Policy
Last updated: 16 July 2026
Hadakeo is a skincare shelf and routine tracker, operated from Ireland ("Hadakeo", "we"). This page explains what data the service handles, why, where it lives, and how you stay in control of it. The short version: your data exists to run your shelf, we don't sell it, we don't run ads, and you can delete everything yourself at any time.
What we collect
- Account details · your email address and, if you sign in with Google, your name and profile photo from that account.
- Your shelf · the products, routines, treatments, lists, notes, dates and photos you add. This is the product itself: everything you put in, stored so you can see it again.
- Voice notes · if you use voice check-ins, the audio is transcribed and the text saved with your product. The audio itself is not kept after transcription.
- Receipt and product photos · if you use scanning, the image is analysed to extract product names and dates, then treated like any other photo you've added.
- Payment status · whether you're on the free plan or Plus, and your subscription period. Card details never touch our servers; they go directly to Stripe.
- Basic usage counters · for example how many AI scans a free account has used, to enforce plan limits.
We do not collect advertising identifiers, and we do not track you across other sites or apps.
What it's used for
- Running the service: showing your shelf, calculating expiry dates, sending the reminders you switch on.
- Processing payments and applying your plan.
- Answering you when you contact us.
- Only if you choose it, product by product: sharing a product's name and photo to Hadakeo's shared library so other users can find it. This is off unless you tick the box when saving, and shared entries are anonymous, with no link back to you.
Nothing else. We don't sell or rent personal data, and we don't use your content to advertise to you. Your photos and notes are not used to train AI models.
Who processes it for us
Hadakeo runs on established infrastructure providers, each processing data only on our instructions:
| Provider | Role | Where |
|---|---|---|
| Supabase | Database, authentication and file storage | EU (Ireland) |
| Cloudflare | Serving the app and website | Global edge network |
| Stripe | Payments and subscriptions | EU/US (PCI-certified) |
| Anthropic | Reading receipt and product photos you scan | US |
| OpenAI | Transcribing voice notes you record | US |
| Optional sign-in; push notifications | EU/US | |
| Resend | Sending reminder emails | US |
| PostHog | Product analytics (which features are used, so we can improve them) | EU (Frankfurt) |
Your shelf data is stored in the EU. Where a provider processes data outside the EU, transfers rest on the EU's standard contractual clauses or an adequacy decision (such as the EU-US Data Privacy Framework).
How long we keep it
For as long as you have an account. Delete your account and everything goes with it: products, photos, routines, logs, lists and settings are erased, not archived. The one thing that stays is anything you chose to share to the product library, because it's anonymous and others rely on it; email us if you want a specific contribution removed. Payment records held by Stripe are kept as long as financial regulations require; they contain your billing history, not your shelf.
Deleting your account
In the app: Profile → Delete account. It takes effect immediately, cancels any active subscription, and is not reversible. You can also email us (below) and we'll do it for you.
Your rights
Under the GDPR you can ask for a copy of your data, ask us to correct or delete it, restrict or object to processing, and take your data elsewhere. Email us and we'll sort it, normally within a month. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.
Cookies & analytics
The app uses the browser storage needed to keep you signed in, plus EU-hosted PostHog analytics so we can see which features get used and which get abandoned. Analytics events are tied to a random account id, never to your name, and never include the contents of your shelf. No advertising or cross-site tracking cookies are set, and nothing is ever sold or shared for marketing.
Children
Hadakeo is not directed at children under 16, and we don't knowingly hold their data.
Changes
If this policy changes in a way that matters, we'll say so in the app before the change takes effect. The date at the top always tells you when it was last touched.
Contact
Questions, requests, complaints: hadakeo@gmail.com.