Last updated: June 25, 2026
This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You. We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
This Privacy Policy applies to all users who access or use the AI Skin Coach application. It does not apply to third-party websites, services, or applications that may be linked to our Service.
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
Account means a unique account created for You to access our Service or parts of our Service.
Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
AI Analysis Data means the data processed in connection with AI-powered skin analysis features, including skin scan photos, cropped face images prepared for analysis, self-reported skin profile information, product or routine context, prompts, and AI-generated results.
Application refers to AI Skin Coach, the software program provided by the Company.
Company (referred to as either "the Company", "We", "Us", or "Our" in this Privacy Policy) refers to AI Skin Coach.
Country refers to the country or region where You access and use the Service, including but not limited to the United States and the People's Republic of China.
Device means any device that can access the Service such as a computer, a cell phone, or a digital tablet.
Personal Data means any information that relates to an identified or identifiable individual.
Service refers to the Application.
Service Provider means any natural or legal person who processes the data on behalf of the Company.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself, such as diagnostic data, app crash logs, and device performance information.
You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
2.1.1 Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Such information may include, but is not limited to:
Information You provide when setting up an Account or contacting Us, such as Your name or email address
Self-reported skincare profile information, such as skin type, concerns, sensitivities, allergies, routine details, product preferences, or notes
Content You choose to upload or create in the Service, including skin scan photos, product photos, journal notes, and routine information
2.1.2 Usage Data
Usage Data is collected automatically when using the Service. Usage Data may include information such as Your Device's Internet Protocol address, browser type, browser version, pages or screens viewed, time and date of use, time spent on those pages or screens, unique device identifiers, and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including the type of mobile device You use, Your mobile device's unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers, and other diagnostic data.
2.1.3 Subscription and Purchase Data
When You make a purchase or subscribe to Our Service, We use RevenueCat, a third-party service provider, to process and manage Your subscription status. Your payments are processed through Apple, and We do not receive Your full card or payment account details. For more information, please review the RevenueCat Privacy Policy and the Apple Privacy Policy.
2.1.4 AI Analysis Data
For AI skin analysis, we share cropped face images and basic request information with Cloudflare, Inc. through Cloudflare Workers, and with Alibaba Cloud Model Studio / DashScope / Qwen AI model for model inference. These providers process the data only to provide the requested analysis and are required to provide the same or equal protection described in this Privacy Policy.
When You use AI-powered features such as skin scans and AI skincare guidance:
the Application may process certain images on-device first, such as face detection, cropping, or product photo cutout preparation;
We may transmit skin scan photos, cropped face images, and related context to Our secure cloud infrastructure and third-party AI service providers to generate visible skin observations, summaries, scores, and skincare guidance;
related context may include self-reported skin profile information, routine context, product information, language preference, timestamps, app version, and technical request metadata needed to provide the feature; and
We may store AI-generated outputs, such as analysis summaries, concern scores, observations, recommendations, and related logs, to provide the feature, maintain scan history, troubleshoot errors, and improve service reliability.
AI features are intended to provide general skincare information based on visible cues and user-provided context. They are not a medical device, do not provide diagnosis or treatment, and may be affected by lighting, camera angle, blur, makeup, filters, or incomplete information.
2.1.5 Face Data
When You use the skin scan feature, the Application may process face data from a photo You choose to capture or upload. This face data includes the skin scan photo, a cropped face image prepared for analysis, and temporary on-device face detection information such as face position and visible landmark checks used to confirm that one clear face is present.
We do not collect Face ID data, TrueDepth data, depth maps, faceprints, biometric identifiers, or face authentication templates. We do not use face data to identify, authenticate, track, or recognize a person.
Face data is used only to provide the requested skin scan feature: to check photo quality, crop the face area, analyze visible skincare-related cues such as texture, hydration appearance, oil balance, redness, radiance, and similar visible observations, generate a skin analysis result, and show scan history in the app.
Cropped face images may be transmitted to our cloud infrastructure and AI model provider solely to generate the requested skin analysis. We do not sell face data, use it for advertising, or intentionally use it to train our own AI models without explicit consent.
Face scan history, including the cropped face thumbnail and analysis result, may be stored locally on Your device until You delete the record or remove the app. Our backend processes face images transiently for inference and does not intentionally store uploaded face images in an application database. Related technical logs and AI-generated results may be retained as described in the Retention section.
The Company may use Personal Data for the following purposes:
To provide and maintain Our Service, including monitoring usage and performance.
To manage Your Account and enable Service features available to registered users.
To perform Our contract with You, including providing paid features and fulfilling subscription-related obligations.
To process AI-powered features, including preparing uploaded images, generating AI-based observations and recommendations, returning structured results, and supporting related product features.
To contact You regarding updates, notices, security information, customer support, or Service-related communications.
To manage Your requests, support tickets, and customer service interactions.
To evaluate and improve Our Service, user experience, feature quality, AI output reliability, and operational performance.
To detect, prevent, and investigate fraud, abuse, security incidents, or technical problems.
To process subscriptions and purchases, including receipt validation, subscription status checks, renewals, and subscription-related support.
For business transfers, legal compliance, dispute resolution, and enforcement of Our agreements and policies.
We do not intentionally use Your skin scan photos or other AI Analysis Data to train Our own models without Your explicit consent.
We may share Your Personal Data in the following situations:
2.3.1 With Service Providers
We may share Your Personal Data with Service Providers that help Us operate, secure, and improve the Service.
Specifically:
RevenueCat: We use RevenueCat to manage in-app subscriptions and purchases. RevenueCat may process device identifiers, purchase history, receipts, and subscription status to provide subscription management services.
Apple: Purchases and subscription payments are processed through the Apple App Store, which handles Your payment information directly.
Cloud and AI Service Providers: We may use secure cloud hosting, API infrastructure, and third-party AI model providers to process AI Analysis Data on Our behalf for image handling, model inference, response generation, reliability monitoring, and security.
Analytics Providers: We do not currently use third-party analytics providers. If that changes, We will update this Privacy Policy accordingly.
We do not authorize Service Providers to use Your Personal Data for their own direct marketing to You through Our Service.
2.3.2 Business Transfers and Legal Disclosures
We may share Personal Data in connection with a merger, acquisition, financing, asset sale, legal process, law enforcement request, or where otherwise required or permitted by applicable law.
The Company will retain Your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.
We may apply different retention periods to different categories of Personal Data:
Account Information: retained for the duration of Your account relationship and for a limited period afterward to resolve disputes, provide support, or comply with legal obligations.
Usage Data: retained for up to 24 months for security monitoring, troubleshooting, feature evaluation, and service improvement.
Subscription and Purchase Data: purchase receipts and transaction records may be retained for up to 7 years to comply with tax, accounting, and financial recordkeeping obligations.
AI Analysis Data: Face Data and AI Analysis Data`: face photos and cropped face images are processed to provide the requested skin scan. Scan history, including cropped face thumbnails and analysis results, may be stored locally on Your device until You delete the record or remove the app. Our backend processes uploaded face images transiently for inference and does not intentionally store uploaded face images in an application database. AI-generated results and related technical logs may be retained for up to 24 months where needed to provide scan history, troubleshoot service issues, investigate fraud or abuse, support users, or comply with legal obligations.
In some cases, We may process certain images or requests transiently and not retain them long-term where technically feasible.
When retention periods expire, We will delete, anonymize, or securely isolate the relevant data in accordance with applicable law and Our backup, recovery, and security procedures.
Your information, including Personal Data, may be processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This means that information may be transferred to and maintained on computers located outside of Your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.
Because Our AI, cloud infrastructure, customer support, and subscription service providers may operate in multiple jurisdictions, Your Personal Data and AI Analysis Data may be processed in the United States or other countries where those providers operate.
Where required by applicable law, We will implement appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You, subject to applicable law.
You may update, amend, or delete Your information through the Service where those controls are available, or contact Us to request access to, correction of, or deletion of Personal Data that You have provided to Us.
Please note that We may need to retain certain information where We have a legal obligation or lawful basis to do so, including records related to subscriptions, transactions, disputes, security incidents, and fraud prevention.
If the Company is involved in a merger, acquisition, financing, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data becomes subject to a different privacy policy where required by law.
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities.
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of users of the Service or the public
Protect against legal liability
The security of Your Personal Data is important to Us. We use commercially reasonable administrative, technical, and organizational measures designed to protect Personal Data, including access controls, encryption in transit where appropriate, and security review practices. However, no method of transmission over the Internet or electronic storage is completely secure, and We cannot guarantee absolute security.
We use RevenueCat, Inc. to manage in-app subscriptions and purchases. RevenueCat helps Us:
Validate and manage App Store purchases
Track subscription status, renewals, trials, and cancellations
Restore entitlements across supported devices and sessions
Support subscription-related customer service and fraud prevention
When You use paid features, RevenueCat may process:
Anonymous or pseudonymous device and app user identifiers
Purchase receipts and transaction metadata from Apple
Subscription status, plan details, renewal dates, and expiration dates
App version and platform information relevant to subscription support
For more information:
To provide AI-powered skin analysis and guidance, We may use cloud infrastructure providers and third-party AI model providers. These providers may process AI Analysis Data solely to help Us deliver the requested feature, support infrastructure reliability, maintain security, and handle operational troubleshooting.
Depending on the feature and system configuration, AI Analysis Data shared with such providers may include:
Skin scan photos or cropped face images
Self-reported skin type, concerns, sensitivities, and routine context
Product, scan, and prompt context needed to generate responses
Technical metadata such as request timestamps, app version, and error diagnostics
We require these providers to process data on Our behalf and under applicable contractual or platform terms.
Our Service is not designed for users under the age of 18. We do not knowingly collect Personal Data from children under 13 without verifiable parental consent. If You are a parent or guardian and believe that Your child has provided Us with Personal Data, please contact Us so that We can take appropriate action.
Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third-party site. We strongly advise You to review the privacy policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and, where required, by providing additional notice in the Service.
We will update the "Last updated" date at the top of this Privacy Policy when changes become effective. If a revision materially changes how We collect, use, or disclose Personal Data, We will take any additional steps required by applicable law, including obtaining consent where required.
If You have any questions, requests, or complaints regarding this Privacy Policy or the processing of Your Personal Data, You can contact Us at:
Email: carolsheng0215@gmail.com