The short version: your day-to-day skin logs, exposures and notes are stored on your device and are not uploaded to us. Some features do send limited information to other services, such as AI features, the community, ad measurement and subscriptions. This policy lists exactly what, why, and who receives it. We never sell your data.
1. Who we are
Skintrics is provided by Farezy Limited, a company registered in the United Kingdom. Farezy Limited is the data controller for the information described in this policy. You can reach us at hello@skintrics.app.
2. What stays on your device
Your skin logs, severity ratings, exposure entries, photos, notes, scan history, allergy and sensitivity settings and GP export data are stored on your iPhone using Apple's SwiftData framework. We do not receive, store or have access to this data. If you use iCloud Backup, Apple may back it up as part of your normal device backup, which is governed by Apple's privacy policy.
3. What we collect or process
- Onboarding answers. When you set up the app we ask about your condition, severity, how often it flares, how long you've had it, what you've tried and your goals. These answers are sent to our analytics provider, TelemetryDeck, so we can understand our users in aggregate. They are not linked to your name or email.
- App usage analytics. TelemetryDeck also receives anonymous events about how the app is used (for example, which screens are opened and whether a flow is completed). These do not include the contents of your logs.
- Email address. If you sign in with Apple and choose to share your email (or Apple's private relay address), we add it to our mailing list, hosted by Mailchimp, to send you product updates. You can unsubscribe in any email.
- Sign in with Apple otherwise provides us with a unique anonymous identifier only.
- AI Trigger Reports. If you request an AI-generated report on a suspected trigger, we send a text summary to generate it: your tracked condition, the trigger's name and category, and statistics from your logs (such as flare percentages, days logged and confidence). It does not include your name, email, device identifiers or precise location. The report is saved on your device.
- Meal photo analysis. If you photograph a meal to log it, the photo is sent to our backend, which forwards it to OpenAI to identify the foods in it. You review the result before anything is saved. The photo is not stored by us, and we limit how many scans you can run each day.
- Ingredient label scanning. When you photograph an ingredient label (to get an instant breakdown, or to contribute a product), the text is read on your device. That text (not the photo) is sent through our backend to OpenAI to separate the ingredient list from other packaging text. The breakdown and score are then worked out on your device. We limit how many times this can run each day.
- Product identification. If you choose to submit a scanned product to the community, you photograph the front of the pack. That photo is sent through our backend to OpenAI to read the product name and brand, which you can edit before submitting. It is only sent when you take that step, and it is not stored by us unless you then submit the product (see Product contributions).
- Product contributions. If you contribute a new product or ingredient list, the product name, brand, barcode, ingredients and photos you submit are stored in our database (hosted by Supabase) for review. Once approved, they become visible to all Skintrics users in search. Photos you submit are stored in a public storage bucket, so anyone with a photo's link can view it. Only photograph products, never yourself or anything personal. Contributions are not linked to your name.
- Community. Posts, replies and likes in the community, and your chosen anonymous handle, are stored in Apple's CloudKit database for the Skintrics container. Other users can see your posts under your anonymous handle. Do not include personal information you do not want others to see. If you allow notifications, we use CloudKit subscriptions to alert you about replies and activity in groups you've joined.
- Product recommendations. If you recommend a skincare product to the community, your recommendation and the reasons you choose are stored in CloudKit.
- Location-based data. If you grant location permission, your approximate location is used to request current weather, humidity, UV, pollen and air quality data from OpenWeatherMap. We do not store or log your location.
- Ad measurement. If you allow tracking in Apple's App Tracking Transparency prompt, we share limited events (such as app install, registration, trial start or subscription purchase, with purchase value) with Meta and TikTok so we can measure whether our advertising is working. Those SDKs may also collect device information such as your device's advertising identifier. This never includes your skin logs, onboarding answers or health data. If you decline the prompt, tracking-based sharing is turned off.
- Subscriptions. We use Superwall to display and manage subscription screens, alongside Apple's StoreKit, which handles all payment processing. We do not see your payment details.
4. Third-party services
- Apple — Sign in with Apple, StoreKit, iCloud/CloudKit and App Tracking Transparency.
- OpenWeatherMap — weather, humidity, UV, pollen and air quality for your approximate location.
- Superwall — subscription screens and offers.
- TelemetryDeck — anonymous product analytics, including onboarding answers.
- Mailchimp — marketing mailing list, if you shared your email.
- Meta and TikTok — advertising measurement, only where you allow tracking.
- OpenAI (via a Cloudflare Worker we operate) — AI Trigger Reports, meal photo analysis and ingredient-label text cleanup. Our backend processes each request and returns the result without keeping the content. OpenAI may retain API inputs for a limited period under its own API terms (for example, for abuse monitoring), and those terms apply to its processing.
- Supabase — database for user-contributed products.
- Open Beauty Facts / Open Food Facts — public product databases we search to find products by barcode or name. Only your search term or barcode is sent.
5. Legal basis (UK/EU GDPR)
We process data on the following bases: to provide the features you ask for (contract); with your consent where you give it, for example notifications, location and tracking permissions, and optional email sharing; and for our legitimate interests in understanding and improving the app and measuring our advertising where you have not opted out. Health-related information you enter is processed on your device. Where information you choose to send relates to your health (such as the AI report summary or community posts), we rely on your explicit consent, which you can withdraw by not using those features or by deleting your account.
6. Children's privacy
Skintrics is not directed at children under 13, and we do not knowingly collect information from them.
7. Your rights
Depending on where you live, you may have rights to access, correct or delete personal data we hold about you, to object to or restrict certain processing, to withdraw consent, and to complain to your data protection authority (in the UK, the Information Commissioner's Office). Because your daily logs never reach us, most requests relate to your email address, community content, contributed products and account-level information. Contact us using the details in Section 10 and we will act on it.
8. Data retention and deletion
If you delete your account in the app, all locally stored data (logs, exposures, notes, photos and GP export data) is permanently deleted from your device and cannot be recovered. Content you posted to the community or contributed to our product database is held separately and is not removed automatically; email us to have it deleted. If you delete the app, the on-device data is deleted too. To stop marketing emails, use the unsubscribe link, which removes you from our Mailchimp list. To request deletion of community posts, contributed products or other data you've sent us, email us.
9. Changes to this policy
If we make material changes, we will update the date at the top of this page. Continued use of the app after any changes constitutes acceptance of the updated policy.
10. Contact
Questions or requests about this policy: hello@skintrics.app.