Lid Lover app privacy policy

Effective 30 October 2026

This policy explains how Dermii collects, uses, stores and shares your information when you use the Lid Lover app. It covers the app only. Our website, dermii.com.au, has its own privacy policy.

At a glance

• The app is for adults, 18 and over, who are in the Dermii 30 Day Challenge.
• It keeps your email, your routine sessions, your check-ins, your videos, your messages to Kellie and your reminder details.
• Check-ins and videos are optional, and we only collect them with your consent.
• We don't sell your information. There are no ads, and no third-party analytics.
• The app's own data is stored in Australia. A few services we use are overseas.
• You can delete your account in the app, any time. It's immediate.

1. Who we are

The Lid Lover app is made and run by Dermii Pty Ltd (ABN 93 666 001 181), an Australian business.

Contact us at team@dermii.com.au for anything in this policy.

When this policy says "we", "us" or "Dermii", it means this business.

2. Who the app is for

Lid Lover is for members of the Dermii 30 Day Challenge. To use it you need a 30-day Lid Lover Starter Bundle from Dermii and a place in the Challenge. The app is for adults, 18 and over.

3. What we collect, and why

We collect only what the app needs to work. Here is each type, with the reason.

Your email address (required). You sign in with your email and a six-digit code. We use it to find your Challenge group, to keep your account separate from everyone else's and to send you account messages.

Your routine sessions (required). Each time you tap Done, we save which session it was and when. We use this to show what's due today, to fill your 30-day ring and to decide which reminder to send. We also use it, in totals, to see how the Challenge is going.

Your check-ins and eye comfort ratings (optional). The app asks how your eyes feel. For example, how comfortable they've been, how often they feel gritty or tired, and how many days you reached for eye drops. You get a one-tap check-in at night and a short weekly check-in. Your day one and day thirty ratings are also on pages 7 and 18 of the booklet, so you never need the app to show them. We use your answers to show you your own progress, to let Kellie support you, to check a money-back claim if you make one and to see how the Challenge is going overall. We only look at ratings combined with everyone else's, so no one can be picked out.

Your videos, with sound (optional). These are the 30-second videos you choose to record or pick from your phone and send. They show your face and voice. We use them to check your answer before we pay Blink Bucks. When you send one, you tick one box to agree that Dermii may use it, with your first name, in our posts and ads.

Your messages to Kellie (optional). What you write to her in the app. She replies by email. We use your messages to answer you and to support you through the Challenge.

Your push notification token (optional). This is a code your phone gives the app so we can send reminders. We store it with the type of device (iOS, Android or web), whether notifications are allowed and when the token was last updated. We don't store your operating system version, app version or device model. We remove the token when you delete your account.

Your reminder times and time zone. The times you pick, and your phone's time zone, so reminders arrive when you want them. Our server keeps them.

Your Blink Bucks list. The record of each video you've sent, its status and what it earned. The credit itself is store credit held by Shopify.

Your order number, if you link an order. If you tap "I've already bought", we keep the order number and the Shopify customer it belongs to, so we can match you to your Challenge group. If you start a money-back claim in the app, we record that you did.

What we don't collect. The app doesn't collect your location or contacts, and it can't browse your photos or files. It uses your camera and microphone only when you record a video, and it takes only the video you record or choose.

4. Why we're allowed to collect it, and your consent

Information the app needs to work. Your email, sessions and reminder details are reasonably necessary to run the app and the Challenge you joined.

Health information. Under Australian privacy law, information about your health is sensitive information, and the law is stricter about it. Your eye comfort check-ins are health information. We only collect them with your consent. Every check-in is optional, and the app asks you to agree before your first one. The screen tells you that your day one and day thirty ratings also go to Klaviyo, and that they stay on your email profile until you ask us to remove it. If you choose Not now, nothing is collected or sent. You can skip any check-in, stop answering at any time or delete your account. If you stop, we stop collecting.

The app is a routine and reminder tool. We don't use your answers to give you advice about your eyes.

Videos. Sending a Challenge video is optional, and so is the Challenge video reward. It's your choice each time. When you send one, you agree that Dermii may use it, with your first name, in our posts and ads. The app asks you to agree with one tick before the video goes. The box isn't ticked for you, and the video can't be sent without it. That's part of what the $100 in Blink Bucks is for. If you send a video that earns no Blink Bucks, Dermii may use it in the same way, with your first name, in our posts and ads. When we use a video that earned Blink Bucks, we say you received store credit for sharing it.

You can ask us to stop using it at any time. Email team@dermii.com.au and we'll take it down from our posts and pause any ad using it within five business days. We can't take back copies other people have already shared. Blink Bucks already added to your Dermii account stay yours.

Reminders. The app asks your permission before it sends push notifications. You can turn them off in the app or in your phone's settings.

5. How we use your information

We use it to:

• run the app, show you what's due and send the reminders you chose
• keep your Challenge details up to date, such as your start date and group
• pay Blink Bucks for approved videos
• check a money-back claim if you make one
• answer your messages and support you through the Challenge
• see, in totals, how the Challenge is going and how to make it better
• keep the app secure and stop misuse

We don't use your information to make decisions that affect you without a person involved.

6. What we don't do

• We don't sell your information.
• There are no ads in the app.
• We don't use third-party analytics or tracking tools in the app, and we don't collect your advertising ID. We do look at how members use the app, such as how many finish the thirty days, so we can improve the Challenge.
• We don't share your information with advertisers or data brokers.

7. Who handles your information

Staff at Dermii, including Kellie, can see what they need to run the Challenge. Videos are stored privately. They aren't public and other members can't see them. Kellie and a small number of Dermii staff watch each video to check it before any Blink Bucks are paid.

We also use these companies to run the app. They handle your information for us. We use them only to run the app and our emails and texts.

Company	What it does	Where
Supabase	Stores your account, app data and videos	Sydney, Australia
Vercel	Runs the app's server	Server functions in Sydney, Australia
Expo	Delivers push notifications. Your token and the text of each reminder pass through its servers	Overseas
Google (Firebase Cloud Messaging)	Delivers reminders to Android phones, through Expo	Overseas
Klaviyo	Our email and text service. It holds your Challenge details such as your start date and group. The app tells Klaviyo when you install the app, allow reminders, mark a session done, miss one, send a video, have one approved, submit a day one or day thirty rating (with your comfort score and eye drop days), start a money-back claim or tap reorder	Overseas
Shopify	Holds your orders and sends your sign-in code. The app reads your order status from it to confirm you're a member	Overseas

Overseas services. The app's own data is stored in Australia. Some of these service providers (Expo, Google, Klaviyo and Shopify) process data overseas, including in the United States and Canada, so a small amount of your information can be handled outside Australia.

Other disclosures. We may share information if the law requires it, or if it's needed to protect someone's safety. We'll tell you if the business is sold and your information moves with it.

8. How long we keep it

We keep your app data while your account is open. We will delete app accounts that haven't been used for 2 years.

When you delete your account in the app, your app data and videos are deleted straight away. Email requests take up to 30 days. Any Blink Bucks not yet added to your Dermii account are lost when you delete, so read the warning on the deletion page first. Our hosting provider keeps routine backups, so deleted data can remain in them for a short time before they roll off.

Some information stays after you delete your account, because it isn't part of the app:

• Your Klaviyo email profile, if you delete in the app. It holds the app activity recorded on it, such as sessions marked done and your day one and day thirty comfort scores. The emails and texts aren't part of the app, so deleting in the app doesn't remove the profile. To stop them, use the unsubscribe link in any email or reply STOP to any text. If you ask by email instead, we remove the profile and unsubscribe you as well.
• Your Shopify order records. We keep these for tax and consumer law.
• Blink Bucks already added to your Dermii account. They're store credit held by Shopify, so they stay and you can still use them.
• A video already used in a post or ad, as you agreed when you sent it. Deleting your account doesn't take it down. To have it removed, email us and we'll do it within five business days.

9. Keeping your information safe

In plain terms:

• Your information travels between the app and our servers over an encrypted connection (HTTPS).
• There's no password to steal. You sign in with a six-digit code sent to your email, and after five wrong tries a code stops working and you ask for a new one.
• Supabase encrypts the database and the file storage where your data and videos are kept. Videos sit in a private bucket and are uploaded through one-time secure links, and only Dermii staff can view them.
• Only the Dermii staff who need to see your information to do their job can reach it.

No system is perfectly safe. If something goes wrong that's likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner, as the law requires.

10. Children

Lid Lover is not for anyone under 18. We don't knowingly collect information from people under 18. If we learn that we have, we'll delete it.

11. Seeing, correcting and deleting your information

See and correct. You can ask to see the personal information we hold about you, in the app and in Klaviyo and Shopify, and ask us to correct it. Email team@dermii.com.au from the email address on your account. We'll reply within 30 days.

Delete. You can delete your account in the app. Go to Settings, then Delete account. It's immediate, and it removes your app data and your videos. Any Blink Bucks not yet added to your Dermii account are lost, so read the warning on the deletion page first. You can also ask by email, and you don't need the app to do it. An email request also removes your Klaviyo profile and unsubscribes you. The full steps, and what's deleted and what stays, are on our deletion page: https://dermii.com.au/pages/delete-app-account

Withdraw consent. You can stop answering check-ins, turn off reminders, or ask us to stop using a video you sent by emailing team@dermii.com.au, any time.

12. Questions and complaints

If you have a question or a concern about your privacy, email team@dermii.com.au first. We'll reply within 30 days and try to put it right.

If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

13. Changes to this policy

We may update this policy. When we do, we'll change the date at the top of this page. If a change is important, such as a new use of your information, we'll also tell you in the app or by email before it starts.

This version is effective from 30 October 2026.

Contact

Dermii
team@dermii.com.au