Introduction

At SkinPal AI ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "Service").

By using SkinPal AI, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the Service.

Website Analytics

This website uses Google Analytics with IP anonymization to understand aggregate usage and page performance. Advertising storage, ad user data, and ad personalization remain disabled.

You can opt out of Google Analytics across all websites with the Google Analytics opt-out browser add-on.

This website also uses Microsoft Clarity to record how pages are used (taps, scrolls and the order of screens) so that we can find and fix confusing steps. Before anything is sent, Clarity masks every photo and the live camera view, so a recording never contains your face. Recordings carry no name or email. We link a Clarity session to the anonymous Google Analytics visitor identifier so that a drop-off seen in one can be examined in the other. Microsoft keeps recordings for up to 30 days and aggregated heatmaps for up to 13 months.

Website Tools, Reports and Purchases

The free tools on this website analyse your photo inside your browser. The photo, the live camera view and the measurements never leave your device: nothing is uploaded to us or to anyone else. Your results, your answers and, if you choose to continue, your photo are kept only in your browser's own storage on your device, and clearing this site's data removes them.

If you buy the full report or the yearly plan on this website, payment is handled by Stripe. We never see your card number. The email address you enter at checkout is used for Stripe's receipt and, through Resend, for the email we send you with your report link and, for the yearly plan, your activation link. We do not add it to any marketing list. The emails contain links only, never your report, your photo or your measurements.

The report itself, including the PDF, is built on your device and is never stored by us. Your report link opens on up to three devices; we tell them apart with a random identifier kept in each browser, not with anything about you.

To activate the yearly plan in the SkinPal app you sign in with Google. The sign-in is handled by Supabase; we record that your Google account email belongs to that purchase on the Stripe subscription and in RevenueCat, which is what grants the app access. That record is kept while the subscription exists and can be removed on request at hello@skinpalai.app.

What We DO NOT Collect

⚠️ Important Clarification

We do NOT use Face ID or any biometric authentication technology
We do NOT create a faceprint or use face data to identify, recognise or authenticate anyone
We do NOT perform face scanning for authentication purposes
We ONLY capture regular photos using your device camera

SkinPal AI analyses standard photographs that you take with your camera. These are regular image files (like any photo on your phone), not Face ID data and not an identity check. On devices with a TrueDepth camera, the app also reads the face geometry iOS provides while you frame the shot, so that it can measure the right part of your face. That geometry stays on your device, is never uploaded, and is deleted when the scan ends — see Face Geometry (TrueDepth Camera) below.

Information We Collect

1. Personal Information

Email address (when you create an account, or when you buy a report or plan on this website)
Name (if provided)
Profile information (age, gender, skin type - optional)
Authentication data from Google or Apple Sign-In

2. Facial Photographs (NOT Face ID)

Standard camera photographs that you voluntarily take for skin analysis
Extracted skin metrics from photos including:
- Hydration levels
- Texture patterns
- Pore visibility
- Acne detection
- Dark spots and pigmentation
- Overall skin tone uniformity
Skin analysis history and progress tracking
Skincare routine information (if provided)

📸 We Use Photos, NOT Face ID

SkinPal AI does NOT use Face ID or biometric authentication. We only analyze regular photographs taken with your camera.

These are standard image files (JPEG/PNG) - the same as any photo in your camera roll. We process these photos using AI to extract skin health metrics. Your photos are encrypted and stored securely. We never sell your photos, and we never share them with third parties for their own purposes; the only companies that see one are the AI providers described in How Your Analysis Is Generated, acting on our instructions.

To delete your photos and data: Use Delete Account in the app's Settings, or email hello@skinpalai.app if you cannot access the app.

3. Face Geometry (TrueDepth Camera)

On iPhone and iPad models that have a TrueDepth camera, the app uses Apple's ARKit face tracking while you frame and take a scan. From it the app reads the outline mesh of your face that iOS provides, how far your face is from the camera and how far it is turned, the brightness, direction and colour temperature of the light around you, and the depth map of the frame you capture. We call this face geometry.

Face geometry is used for three things, all of them on your own device: to tell you in real time whether you are at the right distance, facing straight ahead and lit well enough for a usable scan; to place the measurement zones (forehead, nose, cheeks, chin) on the right part of your face and correct for the angle and lighting, so that scores such as oiliness, hydration and redness can be compared from one scan to the next; and to work out the face proportion measurements shown in your report.

Face geometry never leaves your device

It is never uploaded — not to our servers, not to our AI providers, not to anyone else.
It is held only while the scan is being taken and analysed, and is then discarded.
The one exception is an unfinished first-time setup: so that you do not have to take the scan again, the capture is kept on your device only, is excluded from iCloud backups, and is deleted as soon as setup finishes, or within seven days.
It is never used to identify, recognise or authenticate anyone, never used for advertising, and never sold or shared.
Deleting the app removes it. It is not part of your account, so there is nothing to request from us.

4. Usage Data

App usage patterns and frequency
Features accessed
Device information (type, OS version)
IP address (for security and analytics)

How We Use Facial Photographs (Not Face ID)

Your camera photographs are analyzed by AI exclusively for:

AI-powered skin condition analysis to detect issues like acne, dryness, and uneven texture
Progress tracking by comparing photos over time to show skin improvements
Personalized skincare recommendations based on detected skin conditions
Daily skin health score calculation based on analyzed metrics

🔒 Photo Protection Commitment

Remember: We analyze regular photos, NOT biometric data or Face ID.

Photos are never sold, and never shared with third parties for their own purposes
Photos are stored securely on our servers with encryption
Only you have access to your photos through your authenticated account
Photos are retained as long as you maintain an active account
All photos are permanently deleted within 30 days of account deletion
To delete your account: Use Delete Account in the app's Settings, or email hello@skinpalai.app if you cannot access the app

How We Use Your Information

We use your information to:

Provide AI-powered skin analysis
Track your skin health progress over time
Personalize recommendations based on your skin type
Improve our AI algorithms and Service quality
Communicate with you about your account and updates
Ensure security and prevent fraud
Comply with legal obligations

How We Protect Your Data

End-to-end encryption for all data transmission
Secure cloud storage with industry-standard encryption
Regular security audits and updates
Limited access to personal data (need-to-know basis)
Automatic data anonymization for AI training
Secure authentication through trusted providers

Your Rights and Choices

You have the right to:

Access - Request a copy of your personal data
Correction - Update or correct inaccurate data
Deletion - Request deletion of your account and data
Portability - Export your data in a machine-readable format
Opt-out - Unsubscribe from marketing communications
Restrict - Limit how we process your data

Delete Your Account and Data

You can start account deletion directly in the app.

To delete your account and associated photos:

Open Settings in SkinPal AI
Choose Delete Account and confirm the request
If you cannot access the app, email hello@skinpalai.app from your registered email address
Your account and associated data will be deleted within 30 days

⚠️ Warning: Deletion is permanent. You will lose all your photos, skin analysis history, and progress data. This cannot be undone.

Data Retention and Deletion

Photo Retention (Not Face ID Data)

Active accounts: Camera photos retained as long as your account is active
Account deletion: All photos permanently deleted within 30 days of an in-app or verified email request
AI provider handling: Where a photo is processed by an LLM provider (see How Your Analysis Is Generated), our agreements bar its use for model training and permit only transient retention for abuse monitoring before deletion. They do not keep a copy for their own purposes.
No biometric data: We don't store Face ID or any biometric information
Deletion request: Use Delete Account in Settings, or email hello@skinpalai.app if you cannot access the app

Other Data Retention

Active account data: Retained while your account is active
Deleted account data: Removed within 30 days of deletion request
Anonymized analytics: May be retained indefinitely for improvement
Legal compliance: Some data may be retained as required by law

How Your Analysis Is Generated

Your skin measurements are produced by our own image-processing pipeline — facial landmark detection, colour-space analysis and our in-house trained detection models. This is how metrics such as hydration, oiliness, redness, texture, tone, skin type and blemish detection are calculated. In the current iOS and Android apps this pipeline runs on your device; older versions ran it on our servers.

Alongside that image processing, we use large language models (LLMs) to generate parts of your experience: written insights, your personalized routine, the optional AI chat, and a small number of visual cross-checks. These models are operated by enterprise AI providers in the United States who process the data on our behalf under written agreements. Where a visual cross-check is involved, the photograph is included in what is processed.

Protections that apply

Your data is not used to train these models.
Providers may retain submissions only transiently for safety and abuse monitoring, after which they are deleted. They do not keep a copy for their own purposes.
No provider may sell your data, use it for advertising, or share it onward.
We never send your name, email address or account identifiers alongside your photo.
We do not sell your data, and we do not use your photos to train our own models without your separate, explicit opt-in.
We will identify a specific provider on request — contact hello@skinpalai.app.

Your control

A photo is only ever captured and processed when you choose to start a scan.
You can stop future processing at any time by not scanning, and delete all stored photos via Delete Account in Settings.

Third-Party Services

We use the following third-party services:

Supabase - Database, authentication and encrypted photo storage (hosted in the United States)
LLM providers - written insights, routine generation, AI chat and visual cross-checks (United States)
Google Analytics - Website usage analytics with IP anonymization
Microsoft Clarity - Website session recordings and heatmaps, with photos and the camera masked
Google/Apple Sign-In - Secure authentication
Stripe - Payment processing for website purchases; card details stay with Stripe
RevenueCat - Subscription and purchase entitlements for the app and the website plan
Resend - Transactional email for website purchases (receipt-adjacent links only)
Cloud Storage - Secure photo storage

These services have their own privacy policies. We only share necessary data for service functionality.

Children's Privacy

SkinPal AI is intended for users age 17 and older. We do not knowingly collect personal information from anyone under 17. If you believe an underage user has created an account, contact us at hello@skinpalai.app.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will notify you via email or in-app notification.

Frequently Asked Questions

Q: Does SkinPal AI use Face ID?

No. SkinPal AI does NOT use Face ID or any biometric authentication. We only use regular camera photos for skin analysis. These are standard image files (JPEG/PNG), not biometric scans.

Q: Is my biometric data collected?

We never create a faceprint and never use your face to identify you. We analyse regular photographs that you take with your camera. On devices with a TrueDepth camera, the app also reads face geometry (the mesh, distance, angle and lighting that iOS reports) to place its measurements correctly — that stays on your device, is never uploaded, and is deleted when the scan ends. No Face ID, no biometric authentication, no face recognition.

Q: How do I delete my photos and data?

Open Settings in SkinPal AI and choose Delete Account. If you cannot access the app, email hello@skinpalai.app from your registered email address with "Data Deletion Request" in the subject line.

Q: What happens to my photos after deletion?

All your photos and associated data are permanently deleted from our servers within 30 days of your in-app or verified email request. This deletion is complete and irreversible.

Q: Are my photos shared with anyone?

They are never sold or shared for anyone else's purposes. Your photos are stored securely on our encrypted servers and only you can reach them through your authenticated account. A copy of a photo is processed by the enterprise AI providers described in How Your Analysis Is Generated, who act only on our instructions, may not train on it and may not share it onward. Face geometry from the TrueDepth camera is never sent to them or to us.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: hello@skinpalai.app

Response Time: We aim to respond within 48 hours

Legal Compliance

This Privacy Policy is designed to comply with applicable privacy laws including:

General Data Protection Regulation (GDPR) - EU
California Consumer Privacy Act (CCPA) - California, USA
Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
Other applicable regional privacy laws