Privacy Policy

We may collect and process the following categories of personal data, for the purposes set out in this policy:

Information You Provide

• Name, email address, mobile number and other contact details you submit when registering or contacting us.
• Demographic information and skin or beauty preferences you choose to provide (for example, skin type, concerns, product preferences).

Skin Analysis Images and Biometric-Related Information

• Photos or video frames of your face and skin that you capture or upload to receive skin analysis, virtual try-on, or simulation results.
• Facial geometry and other technical measurements derived from those images to enable virtual try-on, skin analysis, and similar functions.

These data may constitute sensitive personal data under Egyptian law and are therefore processed based on your explicit consent and subject to enhanced protection.

For real-time analysis, your face images and facial geometry are captured and processed to generate your skin analysis and recommendations. In addition, FozDoc keeps a copy of your analysis images and derived facial measurements so that the app can compare your current results with future analyses and show your cosmetic progress over time, and so that we can train and improve our AI models.

Technical and Device Information

• IP address, device type, operating system version, browser type, mobile network information, app version, language settings, and other technical identifiers (such as device identifiers and MAC address).
• Log information such as access dates and times, app or website features used, and diagnostic information.

Location Information

Approximate location based on IP address and, if you grant permission in your device settings, more precise location information.

Membership Account and Transaction Data

• Account credentials (email, password) and profile details.
• Billing and payment information for paid features is processed via authorized payment service providers.
• History of your use of the Service, including analysis sessions and recommendations viewed.

Customer Support and Communications Data

• Information you provide when you contact us (e.g., support tickets, email messages, call recordings where permitted by law).
• Preferences regarding marketing communications where you opt in.

We may also receive limited information about you from third parties (such as business partners that embed our technology, or service providers), and from public or governmental sources where permitted by law.

We use cookies, SDKs, and similar technologies to:

• Keep you signed in;
• Remember your preferences;
• Measure and analyze the performance and use of our Services; and
• Support security and fraud prevention.

You can manage cookies through your browser or device settings, but some features may not function properly if certain cookies are disabled.

We use personal data only for specified, clear, and legitimate purposes, and we do not further process it in a way that is incompatible with those purposes.

Provide and Operate the Services

• Perform skin analysis, virtual try-on, and simulations.
• Display product recommendations and personalized experiences.
• Maintain and secure your account and enable core features.

Improve, Train, and Develop Models and Services

When we store face images and facial geometry beyond a single analysis, we do so only for specific purposes, including:

• Enabling progress-tracking features by comparing your current analysis with later analyses; and
• Training, testing, and validating our AI and AR models to improve accuracy, robustness, and fairness for cosmetic skin assessments.

We do not store face data indefinitely and apply data-minimization and de-identification techniques where possible.

Analytics and Statistics

• Analyze usage trends and performance to understand how the Services are used and to improve user experience.
• Produce aggregated statistics for internal reporting and for our business customers, without identifying individual users.

Communications and Support

• Respond to your requests and inquiries.
• Send you important notices about changes to our Services or this policy.
• Send you marketing communications only where you have given prior consent, and allow you to opt out at any time.

Legal Compliance and Protection

• Comply with legal obligations under Egyptian law, including responding to lawful requests by regulators, courts, or law enforcement.
• Protect the rights, property, or safety of FozDoc, our users, or others, and detect, prevent, or address fraud, abuse, or security issues.

We do not sell your personal data and do not share it with third parties for their own independent direct marketing purposes.

Under Egyptian Personal Data Protection Law No. 151 of 2020, processing of personal data is generally prohibited unless the data subject has consented or another legal basis applies.

For most processing, including account data, skin analysis images, and biometric-related data, our primary legal basis is your explicit consent.

You may withdraw your consent at any time, but this will not affect the lawfulness of processing carried out before withdrawal; it may also limit or disable some or all functionalities of the Service.

In limited cases, we may process personal data without consent where this is required by applicable law or necessary to establish, exercise, or defend legal claims, or to comply with court orders or binding decisions from competent authorities.

Service Providers (Processors)

Face images and facial geometry are processed only on FozDoc’s backend systems and are not shared with external providers for their own use.

Business Clients and Partners

We only share aggregated, anonymized, or pseudonymized statistics with our business partners (such as retailers, pharmacies, or beauty brands), so that they cannot identify you from this information. We do not share your identifiable face images or facial geometry with business partners.

Affiliates and Group Companies

Our group entities may access personal data where necessary for the purposes described in this policy, subject to appropriate safeguards.

Legal and Regulatory Recipients

Competent authorities, courts, or regulators when we believe disclosure is required by applicable law or necessary to protect our legal rights or those of others.

We may also share de-identified, anonymized, or aggregated information that does not identify you, for research, analytics, or business purposes.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including providing the Service, training and improving our models, complying with our legal obligations, and resolving disputes, and then securely delete or anonymize it.

General Retention

• Account and transactional data: kept for the duration of your account plus a reasonable period to comply with recordkeeping obligations and limitation periods.
• Support and communication records: retained for as long as necessary to address your request and for a limited subsequent period.

Facial Images and Biometric-Related Data Used for the Service and for Model Training

When you perform a skin analysis, your face images and derived facial measurements are processed to produce your cosmetic assessment and recommendations and to enable progress tracking over time. From the moment they are stored, these images and measurements are handled in a way that removes direct identifiers and are stored under technical identifiers rather than your plain name or contact details.

We retain these anonymized or pseudonymized analysis images and derived facial measurements for at least two years and until you have completed at least two additional analysis scans, so that we can:

• Show you your cosmetic progress over time; and
• Train, test, and improve our AI and AR models for cosmetic skin assessment.

After the applicable retention period in our internal schedule has passed, we delete the underlying data or irreversibly anonymize it so that it can no longer be linked back to you, except where a longer retention period is required by law or needed to establish, exercise, or defend legal claims. We do not store raw face images or identifiable facial geometry for model-training purposes indefinitely.

Subject to conditions and exceptions under Egyptian law, you have the following rights in relation to your personal data:

• Right to be informed about the processing of your personal data;
• Right to access your personal data and obtain information about how it is processed;
• Right to request rectification, updating, or completion of inaccurate or incomplete data;
• Right to request erasure of your personal data where the legal conditions are met;
• Right to restrict or object to certain forms of processing, including direct marketing;
• Right to withdraw consent at any time where processing is based on consent;
• Right to lodge a complaint before the competent Egyptian data protection authority or Personal Data Protection Center, once fully established and operational.

You can exercise your rights by contacting us at info@artrixx.com. We may need to verify your identity before responding, and we may not always be able to fully comply with your request where a legal obligation or overriding legitimate interest applies; in such cases, we will explain our reasons as required by law.

We apply appropriate technical and organizational security measures designed to protect personal data against unauthorized access, accidental loss, alteration, or destruction. These measures may include:

• Encryption in transit (e.g., TLS/SSL) and at rest where appropriate;
• Access controls and authentication;
• Segregation of duties and least-privilege access;
• Regular security assessments and monitoring.

However, no system can be completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and immediately notifying us of any suspected unauthorized use of your account.

Where data are transferred outside the Arab Republic of Egypt to countries that may have different data protection rules, such transfers will take place in compliance with applicable Egyptian law and any requirements or approvals set by the competent Egyptian authority.

The Services are not directed at children under 18 years of age, and we do not knowingly collect personal data from children without appropriate consent from a parent or legal guardian where required by law. If you believe that a child has provided us with personal data without such consent, please contact us so that we can take appropriate steps.

We may update this Privacy Policy from time to time. Material changes will be notified through the app, our website, email, or other appropriate means before they take effect. Your continued use of the Services after the effective date of an updated policy constitutes your acceptance of the changes.