Last updated: 5 July 2026

This Privacy Policy explains how Care Cute Aesthetic GmbH (“we”, “us”),
operator of kbeauty-shop.com, processes personal
data in the Kbeauty mobile app (the “App”). It complements our general
Privacy Policy and
Imprint. Where the two differ, this
policy governs the App.

1. Data we process

  • Account data — name, email and password (stored encrypted) when you
    register or sign in, so you can place and view orders.
  • Order & delivery data — cart contents, billing/shipping address and
    order history, to process purchases and shipping.
  • Photos & camera — if you use the CareCute AI skin analysis, the photo
    you capture or upload is sent to our server and to our AI provider solely to generate
    skincare recommendations. Photos are not used to identify you, are not shown to other
    users, and are not sold. They are processed transiently and not retained for advertising.
  • Voice messages — if you send an audio message to the AI assistant, the
    recording is transcribed to provide a reply, then handled as above.
  • Device identifier — a random per-device ID used to apply fair-use rate
    limits to the AI assistant. It is not linked to advertising identifiers.
  • Approximate location (IP-based) — used to select your language and
    shipping zone. We do not collect precise GPS location.
  • Technical/usage data — basic diagnostics needed to run the App securely.

2. Why we process it (legal bases — GDPR)

  • To perform our contract with you: account, cart, orders, shipping (Art. 6(1)(b)).
  • Your consent: AI skin/photo/voice analysis, which you enable explicitly in the App
    (Art. 6(1)(a)). You can withdraw consent at any time.
  • Our legitimate interests: security, fraud prevention and fair-use limits (Art. 6(1)(f)).
  • Legal obligations: tax and bookkeeping for orders (Art. 6(1)(c)).

3. Service providers we share data with

We use carefully selected processors, only as needed to run the App:

  • Google (Gemini / Vertex AI) — AI analysis of your text, photo or audio.
  • Stripe, Klarna, EPS — payment processing at checkout.
  • Sendcloud and carriers (Österreichische Post, DPD, GLS) — shipping.
  • Brevo — transactional order emails; Klaviyo — marketing emails
    (only if you opt in).
  • Apple — App Store distribution and, where applicable, sign-in and payments.
  • Our EU hosting provider.

We do not sell your personal data. Where a provider is outside the EU/EEA, transfers rely on
EU Standard Contractual Clauses or an adequacy decision.

4. Retention

Account and order data are kept while your account is active and as required by tax law.
AI photos/audio are processed transiently and not stored for advertising. You can ask us to
delete your account and associated data at any time.

5. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or port your data, to
object to processing, and to withdraw consent. To exercise these rights, or to delete your
account, contact us at shop@kbeauty-shop.com. You may
also lodge a complaint with your data protection authority (in Austria, the
Österreichische Datenschutzbehörde).

6. Children

The App is not directed to children under 16 and we do not knowingly collect their data.

7. Contact

Care Cute Aesthetic GmbH — see our Imprint
for full company details. Data protection enquiries:
shop@kbeauty-shop.com.

8. Changes

We may update this policy; the “Last updated” date shows the latest revision.