SmartSkin Africa Privacy Policy
Effective Date: 1st June 2026
1. Introduction
Welcome to SmartSkin Africa.
SmartSkin Africa ("SmartSkin Africa", "we", "us" or "our") is a digital skincare platform that uses technology, including artificial intelligence and image-analysis technologies, to provide users with personalized skincare insights, information, recommendations and related services.
We are committed to protecting your privacy and handling your Personal Data responsibly, transparently and securely.
This Privacy Policy explains how Personal Data is collected, obtained, used, processed, disclosed, retained and protected when you access or use SmartSkin Africa, including through our web application, platform and related services (collectively, the "Services").
This Privacy Policy forms part of the privacy framework governing the Services and should be read together with the SmartSkin Africa Terms of Use ("Terms").
By using the Services, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires specific consent for particular processing activities, such consent will be obtained separately.
2. Data Controller
2.1 AccessPlus Communications Limited ("AccessPlus") is the Data Controller responsible for the processing of Personal Data in connection with the Services.
2.2 AccessPlus is duly registered with the Ghana Data Protection Commission and is responsible for determining the purposes for which, and the manner in which, Personal Data processed through the Services is handled.
2.3 SmartSkin Africa is the digital platform through which the Services are made available. Where Personal Data is processed through SmartSkin Africa on behalf of AccessPlus, such processing will be carried out in accordance with applicable law, AccessPlus's instructions and appropriate data-protection safeguards.
2.4 Nothing in this Privacy Policy changes the respective ownership, licensing or other rights relating to the SmartSkin Africa platform or its underlying technology as established under the Terms.
3. What Is Personal Data?
For purposes of this Privacy Policy, "Personal Data" means information relating to an identified or identifiable individual, including information that can reasonably be used to identify an individual, whether directly or indirectly.
"Processing" includes collecting, recording, organizing, storing, accessing, using, analyzing, disclosing, transferring, deleting or otherwise handling Personal Data.
"Data Subject" means the individual to whom Personal Data relates. These terms shall be interpreted consistently with applicable data protection law.
4. Personal Data We Collect
Depending on your use of the Services, we may collect and process the following categories of Personal Data.
4.1 Account and Registration Information
This may include:
- (a) name;
- (b) email address;
- (c) telephone number;
- (d) account username and credentials;
- (e) age or date of birth where required for eligibility or service purposes; and
- (f) other information you voluntarily provide when creating or maintaining an account.
4.2 Skincare and Profile Information
Where you choose to provide it, we may collect information relating to your skin, including:
- (a) skin concerns;
- (b) skincare goals;
- (c) skin type or characteristics;
- (d) skincare routines;
- (e) products used or considered;
- (f) preferences; and
- (g) other information you voluntarily provide for the purpose of receiving skincare insights or recommendations.
4.3 Facial Images
Certain SmartSkin Africa features may allow you to submit an image of your face or skin for analysis.
A "Facial Image" means an image containing your face or facial skin submitted through the Services for the purpose of the applicable analysis.
Facial Images may be processed using automated image-analysis and artificial intelligence technologies to identify visible characteristics of the skin and generate skincare-related insights and recommendations.
You are not required to submit a Facial Image where the applicable feature can be used without one. However, features that require image analysis may not be available without submission of the relevant image.
4.4 Technical and Usage Information
When you access or use the Services, certain technical and usage information may be collected automatically, including:
- (a) IP address;
- (b) device type and identifiers;
- (c) operating system;
- (d) browser or application information;
- (e) access dates and times;
- (f) general interaction with the Services;
- (g) diagnostic information;
- (h) performance information; and
- (i) security and fraud-prevention information.
4.5 Communications and Support Information
If you contact us or request assistance, we may process information contained in your communication and information reasonably necessary to respond to your request.
4.6 Transaction Information
Where the Services involve payments or transactions, we may process information necessary to facilitate and verify the relevant transaction.
Payment information may be processed by authorized payment service providers in accordance with their own applicable privacy policies and legal obligations.
5. How We Collect Personal Data
We may obtain Personal Data:
- (a) directly from you when you register for or use the Services;
- (b) when you submit information through forms, features or other functionality;
- (c) when you voluntarily submit a Facial Image for analysis;
- (d) through your communications with us;
- (e) automatically through your device or use of the Services; and
- (f) from authorized third-party service providers where reasonably necessary to provide or support the Services and where permitted by applicable law.
We will seek to ensure that Personal Data is collected lawfully, fairly and in a manner that is reasonably necessary and relevant to the purpose for which it is collected.
6. Purposes for Which We Process Personal Data
We may process Personal Data for the following purposes:
- (a) creating and managing user accounts;
- (b) providing and administering the Services;
- (c) carrying out requested skin or image analysis;
- (d) generating skincare insights and recommendations;
- (e) personalizing the Services;
- (f) responding to enquiries and providing customer support;
- (g) communicating with you regarding your account or the Services;
- (h) processing transactions where applicable;
- (i) maintaining, testing, troubleshooting and improving the Services;
- (j) maintaining the security and integrity of the Services;
- (k) detecting and preventing fraud, abuse, unauthorized access and other unlawful activity;
- (l) complying with applicable laws, regulations, court orders and lawful governmental requests;
- (m) enforcing the Terms and protecting our rights, property, users and operations;
- (n) conducting permitted analytics, research and service-improvement activities;
- (o) sending marketing or promotional communications where permitted and, where required, with your consent; and
- (p) carrying out any other purpose disclosed to you at the time the Personal Data is collected or otherwise permitted by applicable law.
We will not use Personal Data for a purpose that is incompatible with the purpose for which it was collected unless permitted by applicable law or otherwise appropriately authorized.
7. Lawful Basis for Processing
We will process Personal Data only where there is a lawful basis for doing so.
Depending on the circumstances, the lawful basis may include:
- (a) your consent;
- (b) the performance of a contract or provision of Services requested by you;
- (c) compliance with a legal or regulatory obligation;
- (d) protection of vital interests;
- (e) a legitimate interest recognized by applicable law, where such interest is not overridden by your rights and interests; or
- (f) another lawful basis recognized under applicable data protection law.
Where processing is based on consent, you may withdraw your consent at any time, subject to applicable law and any consequences reasonably explained to you.
Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
8. Facial Images and Image Analysis
8.1 Facial Images submitted through SmartSkin Africa are processed for the specific purpose of providing the applicable image-analysis feature and generating the related skincare insights or recommendations.
8.2 SmartSkin Africa does not retain Facial Images after the applicable analysis process, except as provided in Clause 8.3.
8.3 Notwithstanding Clause 8.2, a Facial Image may be retained temporarily where reasonably necessary for technical processing, security, troubleshooting, prevention of misuse, service integrity or other legitimate operational purposes. Any such temporary retention will be limited to the period reasonably necessary for the applicable purpose.
8.4 Facial Images will not be retained indefinitely merely because you have an account with SmartSkin Africa.
8.5 We do not use Facial Images for unrelated purposes, including advertising, sale to third parties, or the creation of a facial-recognition profile.
8.6 SmartSkin Africa is not intended to identify or authenticate individuals through facial recognition.
8.7 Where information derived from a Facial Image is retained after the image itself is deleted, such information will be handled in accordance with this Privacy Policy and applicable law.
9. Artificial Intelligence and Automated Processing
9.1 SmartSkin Africa may use artificial intelligence, machine-learning models and automated image-analysis technologies in delivering certain Services.
9.2 These technologies may analyze information submitted by you, including relevant Facial Images, to identify visible skin characteristics and generate skincare-related insights or recommendations.
9.3 AI-generated results are based on the information and images available to the system and may not always be accurate, complete or suitable for every individual.
9.4 The Services are intended to provide general skincare information and recommendations and are not a substitute for professional medical advice, diagnosis, examination or treatment.
9.5 You should seek appropriate professional medical or dermatological advice where you have a medical concern, persistent skin condition, adverse reaction or other concern requiring professional assessment.
9.6 We will not use automated processing to make decisions about you that have legal or similarly significant effects where the decision is based solely on automated processing, except where permitted by applicable law and subject to any rights and safeguards required by law.
10. Processing of Special Personal Data
Certain Personal Data may receive enhanced protection under applicable law.
Where information processed through the Services constitutes Special Personal Data or otherwise requires enhanced protection, we will process such information only where permitted by applicable law and will apply appropriate safeguards.
Where consent is required for such processing, the relevant consent will be obtained before processing takes place.
11. Consent
Where consent is required, we will seek consent in a manner that is appropriately informed, specific and voluntary.
You may withdraw consent where the applicable processing is based on consent.
Withdrawal of consent may affect our ability to provide certain features or Services where the relevant processing is necessary for those features or Services.
12. How We Use and Disclose Personal Data
We do not sell your Personal Data.
We may disclose or make Personal Data available to authorized persons or organizations where reasonably necessary to provide, maintain, secure or improve the Services or where otherwise permitted or required by law.
Such recipients may include:
- (a) technology and hosting providers;
- (b) cloud infrastructure providers;
- (c) software and platform providers;
- (d) artificial intelligence and image-processing service providers;
- (e) analytics and performance service providers;
- (f) payment and transaction service providers;
- (g) cybersecurity and fraud-prevention providers;
- (h) professional advisers;
- (i) regulators, courts, government authorities or law-enforcement agencies where legally required or authorized; and
- (j) other authorized service providers acting on behalf of the Data Controller.
We will take reasonable steps to ensure that third parties handling Personal Data on our behalf are subject to appropriate confidentiality, security and data-protection obligations.
13. Data Processors
13.1 AccessPlus may appoint Data Processors to process Personal Data on its behalf.
13.2 A Data Processor will be permitted to process Personal Data only for authorized purposes and subject to appropriate contractual, technical and organizational safeguards.
13.3 Data Processors may include technology providers, hosting providers, cloud providers, analytics providers, payment providers, security providers and other service providers reasonably necessary for the operation of the Services.
13.4 We will take reasonable steps to ensure that Data Processors comply with applicable data protection requirements.
14. Data Security
14.1 We take reasonable and appropriate technical and organizational measures to protect Personal Data against unauthorized access, loss, misuse, alteration, disclosure, destruction or other unlawful processing.
14.2 Depending on the circumstances, security measures may include:
- (a) access controls;
- (b) authentication mechanisms;
- (c) encryption or equivalent safeguards;
- (d) secure hosting and infrastructure;
- (e) system monitoring;
- (f) security testing;
- (g) internal access restrictions;
- (h) confidentiality obligations; and
- (i) procedures for identifying and responding to security incidents.
14.3 No method of electronic transmission, processing or storage can be guaranteed to be completely secure.
14.4 You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you believe your account has been compromised.
15. Data Retention
15.1 We will retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected, including to:
- (a) provide the Services;
- (b) maintain user accounts;
- (c) meet legal, regulatory or accounting requirements;
- (d) resolve disputes;
- (e) enforce agreements;
- (f) maintain security;
- (g) prevent fraud or misuse; and
- (h) protect our legitimate interests.
15.2 Retention periods may vary depending on the type of Personal Data, the purpose of processing and applicable legal requirements.
15.3 Facial Images submitted for analysis are not retained after the applicable analysis process, except for limited temporary retention as described in this Privacy Policy.
15.4 When Personal Data is no longer required, it will be securely deleted, anonymized or otherwise disposed of in accordance with applicable law and our data-retention practices.
15.5 Where information is irreversibly anonymized so that it can no longer reasonably be associated with an identifiable individual, it may be retained and used for legitimate statistical, analytical, research or service-improvement purposes.
16. Data Accuracy and Data Minimization
16.1 We will take reasonable steps to ensure that Personal Data processed through the Services is accurate, complete and, where necessary, kept up to date.
16.2 You are responsible for providing accurate and current information and for updating information where appropriate.
16.3 We will seek to collect and process only Personal Data that is reasonably necessary and relevant to the purposes for which it is processed.
17. International Data Transfers
17.1 Some technology, hosting, cloud, software or other service providers used in connection with the Services may operate from locations outside Ghana.
17.2 Where Personal Data is transferred to, stored in or processed from another jurisdiction, we will take reasonable steps to ensure that the transfer and subsequent processing comply with applicable data protection requirements.
17.3 Where required by law, appropriate safeguards or other lawful mechanisms will be used for international transfers.
18. Cookies and Similar Technologies
18.1 The Services may use cookies, device identifiers, pixels, software development kits and similar technologies.
18.2 These technologies may be used to:
- (a) operate the Services;
- (b) maintain user sessions;
- (c) remember preferences;
- (d) improve functionality;
- (e) understand usage and performance;
- (f) maintain security; and
- (g) support analytics and service improvement.
18.3 Where applicable law requires consent for particular cookies or similar technologies, the relevant consent will be obtained.
18.4 You may be able to control certain cookies through your browser or device settings. Disabling certain technologies may affect the functionality of the Services.
19. Direct Marketing
19.1 Where permitted by applicable law, we may send communications relating to the Services, including updates, educational information, promotions and other marketing communications.
19.2 Where consent is required for direct marketing, we will obtain the appropriate consent before sending such communications.
19.3 You may withdraw your consent to direct marketing or opt out of promotional communications at any time through the mechanism provided in the communication or by contacting us.
19.4 Opting out of marketing communications will not prevent us from sending necessary service, account, security or administrative communications.
20. Children and Age Requirements
20.1 The Services are subject to the minimum age requirements set out in the Terms of Use.
20.2 We do not knowingly process Personal Data from children in circumstances where such processing is prohibited by applicable law.
20.3 Where applicable law requires parental or guardian consent for the processing of a child's Personal Data, SmartSkin Africa does not currently provide a mechanism for obtaining such consent. Accordingly, the Services must not be used in circumstances where such consent is required. Parents and guardians are encouraged to notify us promptly if they become aware that a child has accessed or used the Services or submitted Personal Data, including a Facial Image, without the required consent.
20.4 If we become aware that Personal Data has been collected from a child in circumstances where it should not have been collected, including following notification by a parent or guardian, we will take reasonable steps to review the circumstances and delete or otherwise appropriately address the Personal Data in accordance with applicable law.
21. Your Data Protection Rights
21.1 Subject to applicable law, you may have certain rights in relation to your Personal Data, including the right to:
- (a) be informed about the collection and use of your Personal Data;
- (b) request access to Personal Data held about you;
- (c) request correction of Personal Data that is inaccurate, incomplete or outdated;
- (d) request deletion of your Personal Data where permitted by applicable law;
- (e) object to certain processing of your Personal Data where permitted by applicable law;
- (f) withdraw your consent where processing is based on consent;
- (g) object to the use of your Personal Data for direct marketing;
- (h) exercise any rights available under applicable law in relation to decisions based solely on automated processing that significantly affect you; and
- (i) lodge a complaint with the Ghana Data Protection Commission or another competent authority where applicable.
21.2 The exercise of any right is subject to applicable law and any conditions, limitations, exemptions or lawful grounds for refusal that may apply. We may decline, limit or defer a request where permitted or required by law, including where responding to the request would adversely affect the rights of another person, interfere with legal or regulatory obligations, compromise the security or integrity of the Services, or require us to retain information that we are legally required or otherwise lawfully permitted to retain.
21.3 We may take reasonable steps to verify your identity before processing a request. We may also request additional information reasonably necessary to understand, authenticate or process your request.
21.4 Exercising a right does not affect the lawfulness of processing carried out before the exercise of that right and does not require us to delete or cease processing Personal Data where continued processing is permitted or required by applicable law.
21.5 Certain requests or choices may affect your ability to access or use particular features of the Services where the relevant Personal Data is necessary to provide those features.
21.6 Where applicable law permits us to charge a reasonable fee for responding to a request, or to refuse a request that is manifestly unfounded, excessive or repetitive, we may do so in accordance with applicable law.
22. Exercising Your Rights
22.1 Requests concerning your Personal Data or the exercise of any applicable data protection right may be submitted using the contact details provided in this Privacy Policy.
22.2 We may request reasonable information necessary to verify your identity before processing a request.
22.3 We will consider and respond to valid requests within the period required by applicable law.
22.4 Where we are unable to comply with a request, we will provide an explanation where required by applicable law.
23. Third-Party Services and Links
23.1 The Services may contain links to or integrations with third-party websites, applications, products or services.
23.2 Third-party services may operate under their own terms and privacy policies. We do not control and are not responsible for the privacy practices, security, content or availability of third-party services.
23.3 You should review the applicable terms and privacy policies of any third-party service before providing Personal Data directly to that third party.
24. Personal Data Breaches and Security Incidents
24.1 We maintain reasonable measures and procedures for identifying, assessing and responding to Personal Data breaches and security incidents.
24.2 Where a Personal Data breach occurs, we will take reasonable steps to contain and investigate the incident, mitigate potential harm and implement appropriate remedial measures.
24.3 Where a Personal Data breach or security compromise is subject to notification under applicable law, we will notify the Ghana Data Protection Commission and/or affected Data Subjects within the applicable timeframe and in the manner required by law.
25. Data Protection Supervision and Accountability
25.1 AccessPlus will maintain appropriate measures, policies and procedures to support compliance with applicable data protection requirements.
25.2 Where required or appropriate under applicable law or regulatory requirements, AccessPlus may designate a qualified person or function to oversee relevant data protection matters.
26. Complaints
26.1 If you have concerns about the processing of your Personal Data or believe that your privacy rights have been infringed, you may contact us using the details provided in this Privacy Policy so that we may review and address the matter.
26.2 You may also lodge a complaint with the Ghana Data Protection Commission or any other competent authority where applicable.
27. Changes to This Privacy Policy
27.1 We may update this Privacy Policy from time to time to reflect changes in the Services, technology, applicable law or our privacy practices.
27.2 Where a change is material, we will provide appropriate notice through the Services or by another reasonable means.
27.3 The revised Privacy Policy will state its updated Effective Date.
27.4 Your continued use of the Services after the effective date of the revised Privacy Policy constitutes acknowledgment of the updated Privacy Policy to the extent permitted by applicable law.
28. Governing Law
This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Republic of Ghana, including the Data Protection Act, 2012 (Act 843), as amended or replaced from time to time, and any other applicable data protection and privacy laws.
Nothing in this Privacy Policy limits any mandatory rights or protections available to a Data Subject under applicable law.
29. Contact Information
For questions, requests, complaints or other matters concerning this Privacy Policy or the processing of your Personal Data, please contact:
Email: support@smartskin.app
Phone: +233 550 590 714
Address: 28 Djanie Ashie Road, East Legon, Accra, Ghana.
30. Acknowledgement
By accessing or using SmartSkin Africa, you acknowledge that you have read and understood this Privacy Policy.
Where applicable law requires consent to a particular processing activity, such consent will be obtained separately in the manner required by law.
This Privacy Policy, together with the SmartSkin Africa Terms of Use and any applicable privacy notices or consents presented to you when using specific features, governs the processing of Personal Data in connection with the Services.