Privacy Policy

DERMIQ ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect when you use the DERMIQ — AI Skin Coach application ("App"), how we use it, and your rights. Please read this policy carefully before using the App.

1- Who We Are

DERMIQ is an AI-powered skin analysis application. The App is operated by the developer/company listed on the App Store and Google Play product page. For all privacy-related inquiries, contact us at the email address provided in Section 13.

This policy applies to the DERMIQ mobile application available on iOS (Apple App Store) and Android (Google Play Store).

2- Data We Collect

We collect the minimum data necessary to provide the service. Here is a complete breakdown:

Data Type What It Includes Why We Collect It

Account data Email address, display name, authentication provider (email/Google/Apple) Account creation and authentication via Firebase Auth

Profile data Name, age, gender, city/country, climate, skin goals, ingredient preferences, lifestyle notes Personalising your skin analysis and product recommendations

Face photos Front-facing photos you take or upload for analysis Processed by our AI to generate your skin report — see Section 3

Skin analysis results Skin score, metrics, routine, product recommendations, detailed assessment Displaying your report, building your journal, tracking progress

Usage data Number of scans, token usage, cost per scan, plan tier Enforcing plan limits, showing you usage stats

Device data Device type, OS version, app version, anonymous crash reports Improving app stability and compatibility

Analytics events Screen views, feature interactions (anonymised) Understanding how the app is used to improve it

Payment data Subscription status, plan tier, renewal date Managing your subscription — payment details handled by Stripe/App Store/Google Play directly

We do not collect: Social security numbers, government ID, financial account details, precise real-time GPS location, contacts, microphone audio, or any data unrelated to skin analysis.

3- Camera & Photo Access

DERMIQ requires access to your device's camera and photo library to perform skin analysis. This is the core function of the App.

Camera access is used exclusively to capture front-facing photos for skin analysis. We never access your camera silently or in the background.

Photos are compressed on your device before transmission (maximum 800px width, JPEG format) to minimise data transfer.

Photos are transmitted over an encrypted HTTPS connection to our secure analysis server.

Photos are passed to Anthropic's Claude AI model for visual analysis and are

not retained

on our servers after the analysis is complete.

A compressed thumbnail of your photo may be saved to Firebase Storage to display in your scan journal. This thumbnail is private and linked to your account only.

You can revoke camera permission at any time in your device Settings. The App will continue to work with uploaded photos from your library.

Your photos are never: sold to third parties, used to train AI models, shared with advertisers, used for facial recognition or identity verification, or stored permanently on our analysis servers.

4- How We Use Your Data

We use the data we collect only for the following purposes:

Providing the skin analysis service — processing your photo and generating your personalised report

Personalising your analysis — using your profile (age, gender, location, climate, goals) to make recommendations specific to you

Syncing your data across your devices — your scan history, profile, and journal are stored in our cloud database so you can access them on any device logged into your account

Managing your subscription — tracking your plan tier and monthly scan usage

Sending optional weekly skin tip notifications — only if you enable this in Settings

Improving the App — using anonymised analytics to understand how features are used

Responding to your support requests

We do not use your data for advertising, profiling for third-party purposes, or any purpose not listed above.

Third-Party Services

DERMIQ uses the following third-party services to operate. Each service has its own privacy policy:

Service Provider Purpose Data Shared

Firebase Auth Google LLC User authentication Email, UID

Firebase Storage Google LLC Scan thumbnail storage Compressed thumbnail images

Firebase Firestore Google LLC Cross-device data sync Scan results, profile data

Firebase Analytics Google LLC Anonymised usage analytics Anonymised event data, no PII

Claude AI (API) Anthropic PBC Skin analysis processing Your face photo (not retained after analysis)

Stripe Stripe Inc. Payment processing Payment details (handled by Stripe directly — we never see your card details)

Railway / Render Railway Corp / Render Services Backend API hosting API request data (not stored)

Google's privacy policy: policies.google.com/privacy

Anthropic's privacy policy: anthropic.com/privacy

Stripe's privacy policy: stripe.com/privacy

Data Storage & Security

Your data is stored in two places:

On your device

— scan results, profile data, and usage history are stored locally using encrypted on-device storage (MMKV). This data is available offline and loads instantly.

In the cloud

— your data is also synced to Firebase Firestore (Google Cloud infrastructure) so it is available when you log in on a new device. This data is encrypted in transit (TLS) and at rest.

We implement the following security measures:

All API communication is encrypted via HTTPS/TLS

Your Anthropic API key is stored server-side only — never in the app

Firebase security rules ensure you can only access your own data

On-device storage is encrypted using device-level encryption

We do not log or store face photos on our servers after analysis is complete

No method of transmission or storage is 100% secure. However, we use industry-standard practices to protect your data and will notify you promptly in the event of a data breach affecting your personal information.

Data Retention

Data Retention Period

Face photos Deleted from our servers immediately after analysis is complete. Never retained.

Scan thumbnails Retained in Firebase Storage until you delete the scan or delete your account.

Scan results & journal Retained until you delete individual scans or delete your account.

Profile data Retained until you delete your account.

Account data Retained until you delete your account. Deletion is permanent and irreversible.

Usage logs Retained for 12 months for billing and dispute resolution purposes.

Analytics data Anonymised. Retained per Google Analytics / Firebase Analytics data retention settings (default 14 months).

To delete your account and all associated data, go to Profile → Settings → Delete Account, or contact us at the email in Section 13.

Children's Privacy

DERMIQ is not directed at children under the age of 13 (or under 16 in the European Union). We do not knowingly collect personal data from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at the address in Section 13 and we will delete the data promptly.

The App is rated 4+ on the App Store and Google Play for content purposes, but users are required to be 13 or older (16 in the EU) to create an account.

Your Rights (GDPR / CCPA)

Depending on your location, you have the following rights regarding your personal data:

Right to access

— You can request a copy of all personal data we hold about you.

Right to rectification

— You can update or correct your profile data at any time in the App under Profile → Edit.

Right to erasure

— You can delete individual scans from your journal at any time. You can delete your entire account and all associated data via Profile → Settings → Delete Account.

Right to data portability

— You can export your scan history as a PDF from within the App at any time.

Right to object

— You can opt out of analytics tracking by disabling analytics in your device settings (Limit Ad Tracking on iOS, opt-out on Android).

Right to withdraw consent

— You can revoke camera and notification permissions at any time in your device Settings without affecting your ability to use the App with uploaded photos.

For EU/EEA users (GDPR): the legal basis for processing your data is the performance of our contract with you (providing the skin analysis service) and your consent where applicable (notifications, camera access).

For California users (CCPA): we do not sell personal information to third parties. You have the right to know what data we collect and to request its deletion.

To exercise any of these rights, contact us at the email address in Section 13. We will respond within 30 days.

Payments & Subscriptions

DERMIQ offers paid subscription plans processed through:

Apple App Store (iOS) — governed by Apple's payment terms

Google Play Store (Android) — governed by Google's payment terms

Stripe (direct web payments where applicable)

We do not store or have access to your credit card number, bank account details, or full payment information. All payment processing is handled directly by Apple, Google, or Stripe.

We receive confirmation of your subscription status and renewal dates from these providers. This information is used only to manage your plan tier within the App.

Subscriptions auto-renew unless cancelled at least 24 hours before the renewal date. To cancel, go to your App Store / Google Play subscription settings.

Not a Medical Device

Important: DERMIQ is a cosmetic skincare guidance tool and is not a medical device. It is not intended to diagnose, treat, cure, or prevent any skin condition or disease. The analysis provided by DERMIQ is for informational and cosmetic purposes only.

If you have concerns about your skin health, a rash, lesion, or any condition that may require medical attention, please consult a qualified dermatologist or healthcare professional. Do not rely solely on DERMIQ for medical decisions.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

Update the "Effective Date" at the top of this policy

Notify you via a push notification or in-app message

Where required by law, ask for your renewed consent

Your continued use of the App after changes become effective constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

Previous versions of this policy are available upon request.

For any privacy-related questions, data access requests, or concerns, please contact us:

Page updated

Google Sites

Report abuse