Privacy Policy
Effective October 18, 2026
1. Information We Collect
Lynen Labs LLC ("Lynen", "we", "us") operates the Service and is responsible for the personal information described in this policy.
Lynen collects the information necessary to operate your account and the Service, including: your email address; profile information such as your name and membership status; your scan history; verification requests you submit; a small set of in-app usage records and product analytics events, described below; and, where you choose to provide it, self-reported skin notes.
Skin notes are health information. They are optional, you write them yourself, and Lynen uses them for one purpose: to personalize the analysis you ask for. They are never used for advertising, never sold, and never shown to anyone else.
This information is stored in Supabase, a third-party database and authentication provider, subject to the safeguards described in this policy.
2. Camera and Device Data
Lynen requests camera access solely to read garment barcodes on-device. Camera frames are processed locally to detect a barcode value; no images or video from your camera are recorded, transmitted, or stored by Lynen.
3. How We Share Information
Lynen does not sell your personal information, and does not share it with third parties for their own advertising or marketing.
Information is shared only with the service providers listed below acting on our behalf, or where disclosure is required by law, legal process, or to protect the rights, safety, or property of Lynen or others.
4. AI Processing
When you request an analysis, the garment record and your skin notes, if you have saved any, are sent to our AI service provider named below for the sole purpose of generating that analysis. They are sent only at the moment you ask for an analysis, never in the background, and they are not sent to any other provider. If that provider is unavailable, Lynen declines to run the analysis rather than routing your notes elsewhere. See the Terms of Service for the applicable consent provisions.
5. Emails We Send
Lynen emails you to confirm your address and to help you sign in. When you send a garment request, you can also tick a box to get one email if that garment gets a verified result. That email says only that a result is ready; it does not name the garment. Lynen does not send marketing email from the app.
On lynenlabs.com you can join the waitlist with your email address, which Lynen keeps to tell you when the app is ready. If you ask for one of the website’s clothing checklists, Lynen emails it to you once and adds you to the waitlist. After you join, the website may ask what brought you there; that answer is stored on its own, without your email address, and is only ever counted. To be taken off the waitlist, contact us at the address below.
6. Push Notifications
If you turn on notifications, your phone gives Lynen a device token, which Lynen stores with your account so it can reach that phone. Notifications are delivered through Apple Push Notification service on iPhone and Firebase Cloud Messaging (Google) on Android. Lynen sends them only for the kinds you leave on in Account: when a garment you sent us is tested, when a garment you scanned in the last 30 days is tested again, and, only if you turn them on, a note that a garment you scanned relates to your skin notes, and a monthly summary of your scans.
Notification text never contains your skin notes, a condition or a fiber: an alert about your skin notes says only that there is a note to see in the app, where Lynen reads your notes as it does for an analysis. You can turn notifications off in your phone’s settings at any time; deleting your account deletes the device token.
7. In-App Usage Records
When you are signed in, Lynen records a few things you do in the app: that a scan finished and whether it found a verified result, a discrepancy, a product not yet verified, or no record; that you opened a result; that you sent a garment request; and that you opened a suggested alternative. Each record holds the catalog ID of the garment where there is one, whether the barcode was scanned or typed, the kind of device (iOS, Android or web), and the time.
Lynen uses these records for one purpose: to understand whether the app is useful, for example whether people come back to check another garment. They never contain your skin notes, anything you typed, or anything from your camera. They are not used for advertising, not shared with anyone, and deleted after 180 days or when you delete your account, whichever comes first.
8. Product Analytics and Error Reports
Lynen uses PostHog to understand how the app is used and Sentry to find and fix errors. Both run whether or not you are signed in.
PostHog receives a short list of events, for example that the app opened, a scan started or finished, a result was shown, a sign-in started or finished, an article was opened, or an analysis was requested and how long it took. Each event carries only fixed values chosen by the app, such as the kind of result, the catalog ID of the garment, whether a garment is a sample, or the kind of device. Before you sign in, events are anonymous. After you sign in, they are linked to your account by a random account ID, never by your email address or name. PostHog does not record your screen, does not capture what you tap or type, and is set to discard the IP address of the connection, so it does not store it.
The app may ask who you are shopping for: your children, yourself, or just curious. Answering is optional. The answer stays on your device and puts the matching guide first in Learn. It is also sent with an analysis request so that, if you chose your children, Ly frames its read for children’s clothing, and the analysis is saved with a yes-or-no note of that framing. PostHog records the answer as one of those three fixed values. It is never combined with your skin notes.
Sentry receives a report when something in the app breaks: the error, the screen it happened on, and the kind of device. Reports never include your skin notes, your email address, anything you typed, request contents, or a recording of your screen.
Neither service receives your skin notes, your analyses, your searches, or anything from your camera. Neither is used for advertising or shared for anyone else’s use. Analytics events are kept for up to one year and error reports for up to 90 days. When you delete your account, the account ID these records carry no longer connects to you.
9. Service Providers
Lynen relies on the following processors to operate the Service: Supabase (database, authentication, and storage), DeepSeek (AI-generated analysis), Vercel (application hosting and infrastructure), Resend (transactional email delivery), PostHog (product analytics), Sentry (error reporting), and Apple and Google (push notification delivery). Each processor handles data solely to the extent necessary to perform its function for Lynen.
10. Data Retention
Scan history is kept for 30 days. Scans older than 30 days are deleted automatically every night, and the History screen only ever shows the last 30 days. In-app usage records are deleted after 180 days.
Your account, skin notes, verification requests and analyses are retained for as long as your account remains active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce these policies. Data associated with a deleted account is removed in accordance with the deletion process described below.
Three things are kept after an account is deleted, with the link to you removed: the brand and product terms that were searched, the times sign-ins happened, and a record that an account was deleted on a given date. None of these contains your name, your email address, or your skin notes. They exist to keep the catalog useful and to detect abuse of the Service.
11. Security
Lynen uses industry-standard safeguards to protect your information, including encryption in transit, access controls, and row-level security on stored data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Your Rights
You may access, correct, or delete your personal data at any time. Account deletion is available from the Account screen in the app, and the same steps are described at https://www.lynenlabs.com/faq#delete-my-data. Deleting your account permanently removes your profile and name, your email address and sign-in identity, your skin notes, every garment you have scanned, every analysis written for you, your verification requests, your notifications and notification settings, your device tokens, and your in-app usage records. This action is irreversible.
New Jersey residents may have additional rights under applicable state privacy law, including the right to confirm whether we process your personal data and to obtain a copy of it. To exercise any right, including a request for a copy of your data, contact us at the address below. Account deletion is the one right you can exercise yourself in the app.
13. Children
The Service is not directed to children under 13, and Lynen does not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it.
14. Changes to This Policy
Lynen may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by other reasonable means. Continued use of the Service after a change takes effect constitutes acceptance of the revised policy.
15. Contact
Questions regarding this Privacy Policy, or requests to exercise your privacy rights, may be directed to Lynen Labs LLC at hello@lynenlabs.com, or by mail to Lynen Labs LLC, 971 US Highway 202N, Ste N, Branchburg, NJ 08876, USA.