Privacy Policy

Effective date: 29 May 2026 · Last updated: 26 July 2026

This Privacy Policy describes how Tenxix Ltd (“we”, “us”, “our”) collects, uses, and shares information when you use the Kira mobile application (the “App”) for Android and iOS.

By installing or using Kira, you agree to this Privacy Policy. If you do not agree, please do not use the App.

1. Who we are

Kira is operated by Tenxix Ltd, a company registered in Nigeria.

• Registered office: 5 Kudaki Road, Hostel Bus-Stop, Ikotun, Lagos
• Email: support@kirascan.app
• Website: https://kirascan.app

2. Information we collect

2.1 Information you provide

• Account information — your name and email address when you sign up
• Skin profile — age range, skin type, skin concerns, climate, and other answers to our skin quiz
• Skin scan photos — selfies you take inside the App for skin analysis
• Routine tracking data — which steps of your skincare routine you mark as complete
• Order details (when you place a product order through the App) — full name, phone number, delivery address

2.2 Information collected automatically

• Skin analysis results — scores, observations, and recommendations generated by our AI based on your photos
• Progress history — your scan results over time, used to track changes
• Device push token — a unique identifier issued by Google (via Firebase Cloud Messaging) that lets us send you notifications. We do not collect IMEI, MAC address, or advertising IDs.
• Crash and diagnostic data — basic technical information if the App crashes (OS version, app version), used solely to fix bugs

2.3 Permissions we request

• Camera — to take selfies for skin scans
• Photo library — only when you choose to import a photo instead of taking one
• Notifications — to send weekly reminders and important updates

You can revoke any of these permissions at any time in your device settings.

3. How we use your information

We use the information we collect to:

• Provide personalised skin analysis through our AI assistant, Kira
• Build customised morning and evening skincare routines
• Track your skin progress over time
• Send weekly check-in reminders (with your consent)
• Send important updates about the App (with your consent)
• Process and fulfil product orders you place through the App, including sharing your delivery details with the partner brand whose product you are ordering
• Improve the accuracy and quality of our skin analysis
• Train and improve Kira’s own AI models — only where you have explicitly opted in (see section 4.3)
• Respond to your support enquiries
• Comply with legal obligations

We do not use your photos or personal data for advertising. We do not sell your personal data.

4. How your data is stored and processed

4.1 Storage

Your data is stored on Supabase, an industry-standard backend platform. Skin scan photos are stored in private, access-controlled buckets and are only accessible to you when authenticated.

We use encryption in transit (TLS) for all communication between your device and our servers, and encryption at rest for stored data.

4.2 AI processing

Skin analysis is performed by Anthropic Claude, a third-party AI service. When you complete a skin scan, your photo is sent to Anthropic for analysis. Anthropic processes the image to generate the analysis but does not retain or train on your images. The analysis result is returned to the App and stored against your account.

4.3 AI training — only with your explicit opt-in

Kira is building AI models specialised for melanin-rich skin. If — and only if — you tick the optional consent checkbox shown before a scan (in the Kira app or the Kira web scan widget), we retain that scan’s photos and analysis results to train and evaluate these models. This is what we ask consent for and how it works:

• Strictly opt-in. The checkbox is unticked by default. If you don’t tick it, your scan photos are used only to generate your analysis and are not retained for training.
• Anonymous by design. Training scans are stored without your name, email address, or IP address. On the web widget, no account exists at all.
• Private storage. Consented photos are kept in private, access-controlled storage and are never shared publicly, never used in advertising, and never sold.
• Your withdrawal handle. On the web widget, your results page shows a Scan ID (e.g. KW-7F3K2M). Email support@kirascan.app with that ID at any time and we will delete the scan from our training data within 30 days. In the app, deleting your account or clearing your scan history also removes your scans from training data.
• Dermatologist review. Consented scans may be reviewed and labelled by qualified dermatologists engaged by us, under confidentiality obligations, to improve the accuracy of our analysis for melanin-rich skin.

4.4 Location of storage

Our backend and AI providers may store and process your data on servers located outside Nigeria, including in the United States and the European Union. By using Kira you consent to this transfer.

5. Third-party services

6. How long we keep your data

We retain your data for as long as your account is active.

• If you delete your account, we permanently delete your personal data, scan photos, and analysis history within 30 days — including any scans you had consented to share for AI training.
• Scans consented for AI training (section 4.3) are retained until you withdraw consent — email us with your Scan ID (web widget) or delete your scan history / account (app), and we delete them within 30 days.
• Aggregated, anonymised statistics that cannot identify you may be retained for service improvement.
• Order records may be retained longer where required by law (e.g., tax, accounting).

7. Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — update inaccurate information through the App or by contacting us
• Delete — delete your account and all associated data via Settings › Delete Account, or via the delete account page
• Export — request your data in a portable format
• Opt out of notifications — disable push notifications in your device settings or App settings
• Withdraw consent — revoke any consent you previously gave

To exercise any of these rights, email support@kirascan.app. We will respond within 30 days.

8. Children’s privacy

Kira is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Security

We use industry-standard security measures to protect your data, including encryption, secure authentication, and access controls. However, no online service is 100% secure. If we become aware of a data breach affecting your information, we will notify you and any relevant regulators as required by law.

10. Photo privacy

• Your skin scan photos are never shared publicly
• Photos are never used in advertising or marketing
• Photos are used to provide your personal skin analysis and — only if you explicitly opt in — to train Kira’s own AI models for melanin-rich skin (section 4.3)
• You can delete your photos at any time by deleting your account, and withdraw training consent at any time (section 4.3)

11. Cookies and tracking

The Kira mobile App does not use cookies. We do not use advertising trackers, third-party analytics tied to identifiable users, or cross-app tracking.

Our website (kirascan.app) does not use cookies for tracking.

12. Medical disclaimer

Kira is not a medical device. Its skin analysis is for informational and educational purposes only and does not constitute medical advice, diagnosis, or treatment. Always consult a qualified dermatologist or healthcare provider for any medical skin concerns.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Update the “Last Updated” date at the top of this page
• Notify you through the App or by email
• Where required by law, request your renewed consent

14. Governing law

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act (NDPA), 2023. Any disputes will be resolved in the courts of Lagos State.

15. Contact us

If you have questions, concerns, or requests about this Privacy Policy or your data: