HypeProof — Privacy Policy

Last updated: October 23, 2026

Privacy Policy

_Last updated: pending._

LearnUpNow SRL is the data controller responsible for the HypeProof platform. We are committed to protecting user privacy in accordance with applicable data protection legislation in the European Union, United Kingdom and United States, including the EU General Data Protection Regulation (GDPR), UK GDPR, Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), and applicable US privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), where applicable.

1. Camera Access & Optical Scanner Data Processing

HypeProof may request access to your device camera solely to scan cosmetic product labels, ingredient lists, packaging and marketing claims. Captured images and extracted text may be processed locally on your device or transmitted securely to third-party AI services for Optical Character Recognition (OCR), ingredient identification and cosmetic claim analysis.

Camera access requires your device or browser permission. HypeProof does not sell captured packaging images to third parties.

1. Facial Recognition & Biometric Data Non-Collection Policy

Although HypeProof may request camera access to scan cosmetic packaging, the platform does not employ facial recognition technology, generate biometric templates or intentionally collect or process biometric identifiers for the purpose of uniquely identifying or authenticating individuals.

HypeProof's biometric non-collection practices are designed to align with applicable privacy legislation, including the Illinois Biometric Information Privacy Act (BIPA) and other relevant US state biometric privacy laws; Articles 4(14) and 9 of the EU GDPR; and the corresponding provisions of the UK GDPR and Data Protection Act 2018.

1. Third-Party AI Data Processing Disclosure

To deliver real-time cosmetic ingredient identification, scientific evaluation and marketing claim analysis, HypeProof may securely transmit user-submitted content, including photographs of product packaging, extracted text and manually entered claims, to third-party cloud AI and natural language processing providers.

Such information is transmitted for the purpose of delivering the requested services. Where personal data is involved, its processing is subject to applicable data protection requirements, including those governing security, retention and international data transfers.

1. Scan History Storage & Right to Deletion

In the current web application, your scan history is stored locally in your browser using localStorage. You can delete this locally stored history at any time using the in-app "Clear" function.

Clearing browser history does not necessarily delete information previously transmitted to third-party AI providers or retained in separate technical systems.

Where applicable under EU GDPR, UK GDPR, the Data Protection Act 2018 and US privacy legislation, including CCPA/CPRA, users may exercise their rights to access, rectify or delete personal data and exercise other applicable data protection rights.

If user accounts and cloud synchronisation are introduced, HypeProof will provide additional information about associated data storage, retention and deletion procedures.

1. Age Restrictions & Children's Privacy

HypeProof is not intended for children under the age of 13 and does not knowingly solicit personal information from children in this age group.

HypeProof seeks to comply with applicable children's privacy legislation, including the Children's Online Privacy Protection Act (COPPA) in the United States; Article 8 of the EU GDPR and applicable national legislation; and the UK GDPR, Data Protection Act 2018 and Children's Code (Age Appropriate Design Code).

Where parental authorisation is legally required, HypeProof will not knowingly process children's personal data without the necessary authorisation. The age at which children may independently consent to certain data processing activities varies across EU jurisdictions, while the UK Children's Code may apply to services likely to be accessed by individuals under 18.

If HypeProof becomes aware that a child's personal data has been processed without the legally required authorisation or safeguards, appropriate corrective measures, including deletion where required, will be taken.