arrow_back
Home
Legal
Privacy Policy
Last updated: July 16, 2026
This English version is provided for convenience. If there is any conflict, the Korean version prevails.
Beauty Dupe (the "Service") values your personal information and processes it in compliance with applicable laws and regulations.
1. Information We Collect
The Service collects the following information.
- Cosmetic product names and full ingredient list text that you enter directly
- Ingredient label images that you upload (not stored on our servers after analysis)
- Access logs, IP address, and browser information collected automatically when you use the Service
- For users who choose to register, an email address and authentication information (passwords are stored as hashes; for Google sign-in, a Google account identifier)
- If you request an analysis, comparison, or routine report by email, the recipient email address you enter (used only to send the report and not stored separately on our servers)
- For registered users, the skin profile you enter on My Page (skin type, age group, gender, skin concerns) and collection settings (nickname, saved analysis list, public visibility). Skin type and skin concerns may relate to health and are used only for personalized recommendations.
- For members who subscribe to a paid plan, payment-related information (subscription status, and payment history such as payment identifiers, amounts, and payment dates). Payment method details such as card numbers are handled by the payment gateway (PG), and the Service does not store them.
- For members who opt in to marketing emails (optional), the consent status and the time of consent. You can use the Service without opting in.
2. Purposes of Use
- Providing the AI-based cosmetic ingredient analysis and value-for-money product recommendation service
- Improving our ingredient data by reviewing and reflecting full ingredient lists submitted by users
- Improving service quality and analyzing errors
- Improving the service through statistical data analysis
- Providing personalized dupe (alternative product) recommendations and result ranking based on the skin profile you enter
- Providing the paid subscription service and processing payments and refunds
- Sending marketing emails such as new content and dupe updates, only to members who have opted in. You can withdraw consent anytime on My Page, and sending stops immediately upon withdrawal.
3. Retention and Destruction of Information
Ingredient label images that you upload are used only to extract text and are not stored on our servers. However, full ingredient lists that you enter or submit may be stored on our servers (Cloudflare Workers KV) to improve analysis quality and to verify and expand our ingredient data, and are reflected into our data after review. If you want stored ingredient text deleted, you can request it at the contact below. A recipient email address entered to send a report is used only for delivery and is not stored separately on our servers. Access logs are retained for up to 30 days and then automatically deleted. Member account information (email and authentication information) is deleted immediately and cannot be recovered once a member proceeds with account withdrawal from My Page. The skin profile (skin type, age group, gender, skin concerns) and collection information (nickname, saved list, public visibility) you enter are retained while your account exists and are deleted together with your account information immediately upon withdrawal. Paid subscription payment records are retained for the periods required by the Act on the Consumer Protection in Electronic Commerce, etc. (records on contracts or withdrawal of subscription for 5 years, records on payment and the supply of goods for 5 years, and records on consumer complaints or dispute handling for 3 years) and then destroyed.
4. Third-Party Services
The Service uses the following third-party services.
-
OpenAI API
Used to generate ingredient analyses and recommendations. The text you enter and the ingredient-label image you upload are transmitted to OpenAI's servers, and OpenAI's privacy policy applies.
-
Google AdSense
Used to serve advertising. Google may use cookies to display ads matched to your interests. Google's privacy policy applies.
-
Naver Search API
Used to verify product images and market prices. Only non-personally-identifying information such as product names and brand names is sent as search terms; no personal information about you is transmitted.
-
Coupang Partners API
Used as a supplementary check of prices and images for products not matched on Naver. Only non-personally-identifying information such as product names and brand names is sent as search terms; no personal information about you is transmitted. As part of the Coupang Partners program, we may earn a commission.
-
Cloudflare
Used for service hosting, security and data storage. Full ingredient lists that you submit are stored in Cloudflare Workers KV, and Cloudflare's privacy policy applies.
-
Supabase
Used for registration, login, and authentication processing. A member's email address and authentication information (a hashed password or a Google OAuth identifier) are stored on Supabase's servers, and Supabase's privacy policy applies.
-
PortOne
Used to process paid subscription payments. Payment requests, recurring billing, and cancellations are handled through PortOne, and PortOne's privacy policy applies.
-
Toss Payments
The payment gateway (PG) that processes card payments for paid subscriptions. Card payment method details are handled by Toss Payments, and the Service does not store payment method details such as card numbers. Toss Payments' privacy policy applies.
-
KakaoPay
The payment gateway (PG) that processes easy-pay payments for paid subscriptions. Easy-pay method details are handled by KakaoPay, and the Service does not store payment method details. KakaoPay's privacy policy applies.
-
Resend
Used to email you analysis, comparison, and routine reports. The recipient email address you enter is transmitted to Resend and used only for delivery, and Resend's privacy policy applies.
-
Google Analytics
Used to analyze service usage statistics. Page visit and usage-behavior information is collected through cookies, and Google's privacy policy applies.
-
Microsoft Clarity
Used to analyze visit behavior such as clicks and scrolling to improve usability, and Microsoft's privacy policy applies.
-
Userback
Used to collect user feedback (bug reports and suggestions). When you send feedback, the content you enter and any screenshot you choose to attach, along with browser and device information, may be sent to Userback servers, and Userback's privacy policy applies.
International Transfer of Personal Information
Among the third-party services above, OpenAI, Cloudflare, Supabase, and Resend keep their servers in the United States, so the personal information below is transferred overseas to provide the Service. This transfer is necessary to perform our service agreement and is carried out by disclosing the following in this Privacy Policy. Google (Analytics and AdSense) and Microsoft (Clarity) also process cookie-based information overseas, and each company's privacy policy applies.
- Recipients and countries
OpenAI (USA), Cloudflare (USA), Supabase (USA), Resend (USA)
- Items transferred
OpenAI: text you enter and ingredient-label images you upload. Cloudflare: full ingredient text you submit and access information. Supabase: member email, authentication information, and skin profile. Resend: recipient email address for reports.
- Timing and method
Transmitted over the internet at the time you use the relevant feature.
- Purpose and retention
Used only to provide each service, and retained and destroyed under the standards in "3. Retention and Destruction of Information" above. Uploaded ingredient-label images are destroyed without delay after text extraction.
5. Use of Cookies
The Service uses cookies to optimize Google AdSense advertising and to analyze usage statistics through Google Analytics and Microsoft Clarity. You can disable cookies in your browser settings, but some features may be limited.
Third-party vendors, including Google, may use cookies to serve ads based on a user's prior visits to this site. You can manage or opt out of personalized ads through Google Ads Settings, or opt out of third-party vendors' personalized advertising at www.aboutads.info.
6. Children's Privacy
This Service is not directed at children under the age of 14, and we do not intentionally collect children's personal information.
7. Your Rights
You may request access to, correction of, or deletion of your personal information at any time. For inquiries, please contact us using the contact details below.
8. Data Protection Officer
The Service designates a data protection officer who is responsible for overseeing personal information processing and for handling user inquiries and remedies.
- Data Protection Officer: Yoon Sangchul (Beauty Dupe operator, MCT)
- Contact: [email protected]
You may send any questions about your personal information to the contact above, and we will respond and act without delay.
9. How to Report a Privacy Concern
If you need counseling, dispute mediation, or reporting due to a personal information infringement, you can contact the following Korean authorities.
10. Changes to This Policy
If this Privacy Policy changes, we will provide advance notice through a notice within the Service.
11. Contact
This Service is operated for informational purposes, and AI analysis results are for reference only. Please check the product packaging for the actual ingredient information.