Privacy Policy

Sabil Cosmetics app · Last updated 2026-10-29

This policy explains what personal data the Sabil Cosmetics app ("Sabil", "we") collects, why, who it is shared with, how long it is kept, and how you can delete it. Sabil is operated by Borderless Goods (보도래쓰 굳스), business registration no. 887-36-01633, Republic of Korea.

1. Data we collect

Account: your phone number (used to sign in with a one-time code), and the name and email you choose to give.
Delivery addresses: recipient name, phone number, address, and an optional photo of the address or entrance.
Orders and payments: items ordered, amounts, order status and delivery tracking, and receipt images you upload for bank transfers. Card and bank details are entered with our payment providers and are never stored by us.
Notifications: a push notification token for your device, if you allow notifications.

We do not use advertising or tracking SDKs, and we do not sell your data.

2. Why we use your data

To create and secure your account and sign you in.
To take, pay for, ship and support your orders, and handle cancellations and refunds.
To send order status notifications, if you allow them.
To meet legal obligations, such as keeping transaction records under Korean e-commerce law.

3. Who we share data with

We share data only with service providers that we need to run the app:

Google Firebase: phone number sign-in.
Supabase and Railway: database, file storage and server hosting.
Toss Payments and CLICK: payment processing.
Delivery companies (for example CJ Logistics): recipient name, phone number and address to deliver your order.
Expo and Apple / Google push services: delivering notifications.

We may also disclose data when required by law.

4. How long we keep data

Account, addresses and push tokens: until you delete them or delete your account.
Order and payment records: kept for the period required by Korean e-commerce law (up to 5 years), in a form no longer linked to a deleted account.
Earlier versions of the app offered an optional skin scan, which is no longer available. If you used it, your saved results are kept until you delete your account, and any photos you chose to keep are deleted after 365 days at the latest.

5. Delete your Sabil Cosmetics account

You can delete your Sabil Cosmetics account and its data at any time, in any of these ways:

In the app: open Profile, tap Delete account and confirm. The deletion happens immediately.
On the web: at aura-beauty.up.railway.app/account/delete, confirm your phone number with a one-time code and delete the account.
By email: write to 1543431a@gmail.com from your account's details, with the subject "Delete my Sabil Cosmetics account". We delete it within 10 days.

What is deleted: your profile (name, email), phone sign-in account, saved addresses, push notification tokens, and saved skin scan results and kept photos.

What is kept: order and payment records, including payment receipt images, which Korean e-commerce law requires us to keep for up to 5 years. They are no longer linked to your account and are deleted when that period ends.

6. Your choices and rights

You can turn notifications off in your device settings and withdraw photo access at any time.
You can ask us to access, correct or delete your data using the contact details below.

7. Children

Sabil is not intended for children under 14, and we do not knowingly collect their data.

8. Changes

We will update this page when our practices change and show the new date at the top.

9. Contact

Privacy officer: ABDULKHAMIDOV AKBARJON SOBITKHON UGLI
Email: 1543431a@gmail.com
Phone: +82-10-2496-5221
Address: 경기도 수원시 영통구 권광로276번길 72-6, 1층 101호(매탄동), Republic of Korea