BLISSBOUND TRADING INC operates the Cyberskin mobile application and its related app services. In this Policy, “Cyberskin,” “we,” “us,” and “our” refer to BLISSBOUND TRADING INC. This Policy explains how information is handled when you use our iOS or Android app, connect a compatible device, or contact us about the app.
Our address is 2812 Loganrita Ave, Arcadia, California 91006-5528, United States. For privacy questions and requests, contact support@cyberskin.com.
This Policy covers the app and its supporting services. Purchases of physical products through our website are covered by the privacy notice and sales terms presented for those transactions. Third-party websites you choose to visit have their own privacy practices, as explained below.
1 Information handled by the app and our services
Account information
When you create or use an account, we process your email address, account identifier, email verification information, and account status. We also process the nickname, avatar reference, and registration information associated with your profile, where present. We use this information to authenticate you, maintain your account, provide account-based features, and respond to your requests. Login credentials are stored in the app’s secure credential storage to maintain your session.
If a third-party sign-in option is available and you choose it, we process the identity information and authentication token provided through that option to authenticate and associate your account. The sign-in provider also handles information under its own privacy policy. You can use the sign-in methods actually offered in your version of the app.
Connected devices and saved programs
When you bind a compatible device to your account, our services process its model, device identifier, binding relationship, and any custom device name you provide. The app also stores information about known devices locally to support recognition and reconnection. A connected accessory’s identifier is different from a phone’s advertising identifier.
Custom rhythm names, settings, and program files are sent to our services when you create or save them. They are associated with your account so you can retrieve, edit, play, or delete them. The app may cache device configuration, program files, and content locally to support these features. Saved program definitions can contain the instructions needed to play the program. This storage is distinct from the live control commands and AI results generated during device use, which are handled locally as described in Section 2.
Content access and technical information
When the app connects to our services or requests official videos, images, instructions, or training programs, the relevant server or content-delivery service receives the information needed to deliver the request, such as your IP address, the requested resource, request time, and applicable authentication information. Information recorded in service and security logs is used to operate the service, investigate errors, and prevent abuse. These server-side operations are separate from the local media analysis described in Section 2.
Training content provides general instructions. We do not ask you to submit a medical diagnosis, treatment history, or health measurements to use that content. We do not upload a record of local AI classifications or device control instructions as a training or health profile.
Support and information you choose to send
When you submit feedback or contact support, we process your message, contact or account information, and any materials you voluntarily provide. We use them to answer your request, investigate the issue, and maintain the necessary support record. Avoid sending intimate media, passwords, or other unnecessary sensitive information. Materials you deliberately send to support are different from media processed automatically on your device by AI sync.
2 Screen content audio and local AI sync
AI sync analyzes visual content displayed on your screen, together with available playback audio, on your device to synchronize a compatible connected accessory with the video. We do not upload the videos, audio, screenshots or sampled frames, AI recognition results, or live device control instructions used in this process to our servers, Google Firebase, or cloud AI providers. We do not receive that local analysis for human review or model training. Control instructions are transmitted locally to your paired accessory over Bluetooth so the feature can work. User-created program definitions that you choose to save to your account are handled separately under Section 1.
The sampling method depends on the playback source. Official and local video playback use visual and audio samples from the player. Browser AI sync uses system-authorized screen and playback-audio capture, and samples the video region displayed in the app’s browser for local analysis. System screen capture can have a broader scope than the video region used by our analysis; it is not permission limited to the original video file. Avoid displaying unrelated private information while system capture is active. On supported Android versions, playback-audio capture requires the system’s audio-recording permission. That permission supports playback analysis; this feature does not use ambient microphone audio for analysis.
Local processing can use memory buffers, temporary files, and local interprocess storage. For example, iOS browser analysis may briefly write a sampled image to storage shared between the app and its capture extension. This is local temporary processing, not an upload of your media. Local videos selected through the system picker may also have a device-side working copy created by the operating system or picker.
You choose whether to turn AI sync on. The app presents the applicable capture explanation and system authorization when needed. Turning AI sync off stops the analysis and related device synchronization. When the app goes into the background, analysis pauses. The browser’s underlying system capture session may remain active while that browser session remains open, including while analysis is off or paused; stopping analysis does not necessarily end the system capture session. To end system capture, close the in-app browser or use your device’s system capture controls. Revoking permission prevents the related capture feature from operating. Temporary sampling data is handled through the capture lifecycle; the app does not maintain a server-side media or AI-analysis history.
The local analysis is not intended to identify a person or determine your health, sex life, or sexual orientation. Information about connected accessories, saved programs, or content requests can nevertheless reveal sensitive aspects of use when linked to a person. Local processing and the absence of a medical purpose do not remove any protections that applicable privacy law gives that information.
3 Browser activity and third-party websites
When you enter a website address, your device connects to that website. The site and its service providers can receive information such as your IP address, browser information, requested pages, and information you choose to submit. Their handling of cookies, accounts, payments, and browsing activity is governed by their policies.
The app’s browser uses a private browsing configuration and does not save a persistent browsing-history list for your account. The entered address and navigation state can exist during the session. Private browsing does not make you anonymous to the website, your network provider, or other parties involved in delivering the website. Our local AI processing does not prevent those third parties from processing the requests you make to them.
4 Permissions and your choices
We request access in connection with the feature you choose to use:
- Bluetooth and nearby-device access allow scanning, connection, and control of a compatible accessory.
- On older Android versions, location permission is required by the operating system for Bluetooth scanning. We use this permission for scanning, not to obtain GPS coordinates or track your movements.
- System screen-capture authorization and Android playback-audio permission support browser AI sync. The system may require confirmation for each capture session.
- The system photo or file picker lets you select a local video. The app does not need unrestricted access to your entire photo library for that selection.
You can decline or revoke access in your device settings. The affected feature may then be unavailable, but unrelated features do not require that permission merely because another feature uses it. Account-based features require the information needed to authenticate and provide them. Optional media selection, AI sync, and feedback remain your choices.
5 Service providers and other disclosures
We use Tencent Cloud infrastructure in Virginia, United States, to host the app’s backend services and stored app data. Hosting, storage, network-delivery, and email-delivery providers process the information needed to provide the services we engage them to perform. They are permitted to handle that information for the contracted services, subject to appropriate confidentiality, security, and data-protection obligations. They are not authorized by us to use local AI media for their own purposes.
Google provides Google Analytics for Firebase and Firebase Crashlytics for the limited analytics and diagnostic purposes described in Section 6, in app versions where those services are enabled. These services receive technical and usage information separately from our Tencent Cloud backend. Their data practices and processing terms are described in Firebase Privacy and Security and Google’s Privacy Policy.
We may disclose necessary information to comply with a binding legal obligation or valid legal process, protect people and service security, or establish or defend legal claims. We assess such requests and limit disclosure to what is appropriate. If a merger, acquisition, or similar business transfer involves app personal information, the recipient must protect that information consistently with the applicable commitments, and we will provide any notice required by law.
We do not sell app personal information or share it for cross-context behavioral advertising. We do not use the app’s local media analysis to target advertising.
6 Firebase analytics diagnostics and marketing
Our analytics and diagnostics services include Google Analytics for Firebase and Firebase Crashlytics in app versions where enabled. Analytics processes app-instance identifiers, general app interaction events, session information, app and operating-system versions, device characteristics, and approximate region derived from network information to help us understand general app use and improve reliability. Crashlytics processes installation identifiers, crash and error reports, stack traces, app state at the time of an error, and device and operating-system information to help us diagnose failures. These services receive network requests, which expose an IP address during transmission; this does not mean that every service retains the raw IP address.
We do not send your email address, sign-in tokens, accessory identifiers or custom names, saved rhythm contents, entered browser addresses, page titles, local media paths, captured screen content, playback audio, AI recognition results, or live device control instructions to these services. We do not use Firebase to build a profile of your intimate activity or record the content you view. Analytics and crash reporting are separate from the local video-analysis process.
We use these services for app analytics and reliability, without advertising identifiers, personalized advertising, or cross-company advertising tracking. We do not link this app’s analytics to advertising accounts or use it for remarketing. We provide applicable notices and obtain any consent required before collection begins. You can contact support@cyberskin.com about the collection enabled in your app version and to exercise applicable privacy rights.
Local diagnostic files can include app errors, connection state, and control-operation status. These local files are not automatically uploaded in full; separate, limited diagnostic reports are sent through Crashlytics where enabled. If you deliberately provide a local log to support, we handle it as support information. Non-personalized product promotions may appear in the app. We do not use app registration as enrollment in marketing emails; verification, security, support, and essential service messages are separate from marketing.
We do not track your app activity across other companies’ apps or websites, and do not change this practice based on a browser Do Not Track signal. A browser signal does not prevent an independent website you visit from processing its own traffic. We update this Policy and relevant notices before introducing a materially different data use, and obtain consent where required.
7 Storage security and retention
The app is primarily offered to adults in the United States. Our Tencent Cloud backend and its stored app data are hosted in Virginia, United States. If you use the service from another country, your requests and account information sent to that backend will be processed in the United States. Firebase and Google Analytics use Google infrastructure and may process information in the United States and other countries where Google or its service providers operate. A United States project or account setting does not guarantee that every Firebase service processes data exclusively in the United States. Independent websites, sign-in providers, and the operating system handle their own services under their respective policies.
We use reasonable administrative, technical, and organizational safeguards appropriate to the information, including protected credential storage, access controls, and safeguards for service communications. No system can guarantee absolute security. If you believe your account or information has been compromised, contact us promptly.
We retain information according to the following criteria:
- Account information, device bindings, and saved rhythms are retained while needed to provide your account and the features you request, unless you delete the relevant item or your account.
- Support records are retained while needed to handle the request and for related security, dispute-resolution, or legal requirements. Account deletion includes feedback associated with your account, subject to a justified legal exception.
- Service and security logs are retained only for the period needed to investigate incidents, prevent abuse, and meet applicable obligations. A retained record that can still identify you remains personal information even if a direct account reference has been removed.
- Firebase analytics and diagnostic information is retained under the applicable service’s retention settings and deletion processes, limited to what is needed for the purposes in Section 6 and applicable legal obligations. Requests concerning information that can reasonably be linked to you include relevant service-provider records; account deletion does not automatically identify every installation-based analytics or crash record. We may need proportionate information about the affected app installation to locate such records, and will explain any inability to identify a record or applicable retention exception.
- Local caches and working files are retained according to the related session, feature, and operating-system lifecycle. Removing a local copy does not by itself delete an account or a server-side saved program.
- Where backup copies remain after deletion from active systems, they are restricted from ordinary use and removed through the applicable backup lifecycle. If a backup is restored, the deletion must also be applied to restored personal information.
Any information retained after an account-deletion request is limited to a legitimate security, legal, or claims-related purpose for the necessary period. We explain applicable exceptions when responding to your request. We do not treat a record as anonymous simply because its account identifier has been removed.
8 Delete your account or selected data
You can initiate account deletion inside the app by opening your profile, selecting “Delete Account,” and confirming. Account deletion removes your account and associated personal information from our active account systems, including profile information, sign-in associations, device bindings and custom device names, saved custom rhythms and their stored program files, and feedback associated with the account. The account becomes unavailable after successful deletion; object-storage cleanup, service-provider requests, and backup removal can follow separate processing steps. Applicable retention criteria and exceptions are described in Section 7. Once deletion is completed, it cannot be undone.
You can also request deletion without installing or signing in to the app. Visit our account deletion page or email support@cyberskin.com with the subject “Cyberskin account deletion request.” Identify the account you want deleted. We verify ownership using proportionate steps; if you cannot access the registered email address, contact us so we can assess an alternative verification method. Never send your password.
To keep your account while deleting selected information, use the available item-deletion controls or follow our data deletion page. You can email us with the subject “Cyberskin data deletion request” and identify the information you want removed. Some information is necessary to maintain an account or feature; we will explain if the request would require closing the account or disabling that feature.
We aim to complete verified web or email deletion requests within 30 days of receiving the request, and sooner where practicable. If verification or an applicable legal exception affects completion, we will explain the status and any lawful extension within the required response period. We do not require you to reinstall the app to submit a web request.
Uninstalling the app, signing out, or disconnecting a device does not by itself delete your account. Deleting an account does not erase your physical accessory or the original videos in your system photo library or files. Some app-local device records, program caches, or diagnostic files may remain on that device after account deletion until cleared by the app, operating system, or removal of the relevant local data. This does not permit continued use of deleted account data for our server-side services. Contact support for help with local-data removal. If you choose to contact a sign-in provider or third-party website, their own records must be managed through their services.
9 Privacy rights and requests
You can contact us to request access to your app personal information, correction, deletion, or a copy, and to ask questions about its handling. Depending on where you live and the law that applies, you may also have rights to restrict processing, object to certain uses, withdraw consent, or appeal a decision. Withdrawing consent does not undo processing lawfully completed before withdrawal.
Send requests to support@cyberskin.com. We may request information reasonably necessary to verify your identity and authority. Where applicable law allows an authorized agent, the agent may contact us with evidence of authorization. We do not require you to provide unrelated sensitive information to exercise a right. We respond within applicable legal deadlines and explain any lawful refusal or extension. If an appeal right applies, reply with the subject “Privacy request appeal.” You may also contact the relevant regulator where the law provides that option.
Where the California Consumer Privacy Act applies, California residents have rights to know or access the categories and specific pieces of personal information collected, correct inaccuracies, delete information subject to exceptions, and receive equal treatment for exercising their rights. They also have rights concerning sale or sharing and certain uses of sensitive personal information. Our no-sale and no-cross-context-advertising-sharing practices are described above. We use sensitive information only as needed to provide requested services, protect security, or meet applicable obligations, rather than for unrelated profiling.
The information categories, sources, purposes, service-provider disclosures, and retention criteria in Sections 1 through 7 describe the app’s practices. We do not discriminate against you for exercising a privacy right. A deletion or permission withdrawal can nevertheless make a feature unavailable where the information or access is necessary to provide it.
10 Adults only
Cyberskin is intended only for people who are at least 18 years old and meet any higher applicable local age requirement. It is not directed to children or minors. We do not knowingly maintain an app account for a person who does not meet these requirements. If you believe such a person has provided us personal information, contact support@cyberskin.com so we can investigate and remove the information as required.
11 Changes and contact
We update this Policy when our practices or applicable requirements change. The date above identifies the latest revision. For material changes, we provide appropriate notice through the app or another suitable channel, and request consent where required. Publishing a revised policy does not by itself authorize an incompatible new use of information previously collected.
Privacy, deletion, and app support requests may be sent to:
BLISSBOUND TRADING INC
2812 Loganrita Ave, Arcadia, California 91006-5528, United States