This policy explains what SkinAI ("we," "us") collects, why, and the choices you have. It applies to the SkinAI mobile app.
The short version
We collect only what the app needs to analyze your skin and run your account.
Your scan photo is analyzed and then discarded from our servers — a copy stays only on your device.
Under our current AI provider tier, your scan photo may be used by that provider to improve their products (see "AI Processing & Skin Scan Photos" below).
We do not sell your data and we do not track you across other apps or websites for advertising.
You can delete your account and its data at any time from the app.
Information we collect
Account information — your email address and name, when you create an account.
Skin analysis data — the skin scores, skin type, concerns, and routines generated from your scans.
Scan photos — the selfie you take is sent to our server only to be forwarded to our AI provider for analysis, then discarded. It is not stored in our database. A copy remains in your device's photo journal, on your device only.
Identifiers — an account ID, your device's push-notification token (if you enable reminders), and an anonymous analytics ID.
Purchase information — whether you have an active subscription. Apple processes the payment; we never see your card details.
Approximate location — a city-level estimate derived from your IP address to show relevant weather and UV context. We do not use GPS and do not request location permission.
Usage data — in-app events (for example, screens viewed and features used) to understand and improve the app.
How we use your information
To provide your skin analysis, personalized routine, and AI guidance.
To create and secure your account and process your subscription.
To send the reminders you opt into.
To understand usage and improve the product.
AI Processing & Skin Scan Photos
Skin analysis and the KIRA chat are powered by a third-party AI provider, Google's Gemini API. Here is exactly how your scan photo is handled:
Your photo is sent from your device to our secure backend server, which forwards it in the same request to Google's Gemini AI service to generate your analysis.
We do not store your scan photo on our servers. It exists only in memory for the duration of the analysis request and is discarded immediately afterward. It is never saved to a database, cloud storage, or logs.
Under our current API usage tier, Google may use content submitted through the API, including your photo, to improve their products and services. We do not control this retention independently of Google's own policies.
A copy of your scan photo may be saved locally on your own device, in your private in-app photo journal, so you can track your progress over time. This local copy is stored only on your device, is never uploaded anywhere beyond the one-time analysis request above, and can be deleted by you at any time within the app. It is also permanently removed if you delete the app.
We do not share your scan photos with any third party other than Google Gemini for the sole purpose of generating your analysis.
Before your first scan, the app asks for your explicit consent to send your photo to Google Gemini for analysis. You can decline, in which case no photo is captured or sent.
Service providers we share data with
We share data only with the providers that help us run the service, and only as needed:
Google (Gemini AI) — skin analysis and chat.
Vercel — backend hosting.
Neon — database hosting (accounts, scan results).
Apple — App Store and subscription payments.
Expo — push-notification delivery.
Open-Meteo & ipapi — weather/UV and coarse location lookup.
We do not sell your personal information or share it with data brokers or advertising networks.
Affiliate links
When you tap a "Shop" or product link, the app opens Amazon in your browser. As an Amazon Associate we may earn from qualifying purchases. Any activity there is governed by Amazon's own privacy policy.
Data retention & deletion
We keep account and scan data while your account is active. You can permanently delete your account and its server-side data at any time in Profile → Settings → Delete account. Scan photos are not retained on our servers at all.
Your rights
Depending on where you live (for example, under GDPR or CCPA), you may have the right to access, correct, or delete your personal data, and to object to certain processing. You can exercise deletion directly in the app, or contact us at support@skinai.app.
Children
SkinAI is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Security
Data is encrypted in transit (HTTPS). Passwords are stored hashed, never in plain text. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
Changes
We may update this policy; we'll revise the "Last updated" date above and, for material changes, notify you in the app.