Your health data

What counts as health data in Skinby

Photos of your face taken during a scan, which can count as biometric data.
Information about your skin: your answers about skin type, sensitivity, products, pregnancy status and symptoms, your scan results, and your check-ins.

Where it is handled

All of it is collected, used and stored on your phone. Skinby does not receive it, does not store it on a server, and does not build face templates that leave your phone. Scan photos are deleted as soon as the result is made. The exceptions are in test builds (TestFlight): "Help improve Skinby" (adults only, off by default) lets you donate a skin-only crop of a scan, described under "Help improve Skinby"; "Help check Skinby's answers" (adults only, off by default) lets you tell Skinby whether an answer was right, with no photo; and an optional feedback card can open an email that you can read and edit first, containing the result words and the area readings, but no photos. It is sent only if you press send in your own email app, and it is not offered to people under 18.

Help improve Skinby (test builds, optional)

In test builds, an adult can separately agree to donate the skin-only crop of a scan. This is the only time health data leaves the phone. It needs your own agreement (an on switch and a statement that you are 18 or older), it is a separate choice for each scan, it is stored on Skinby's own server with no name or contact detail, it is used only to check and improve how Skinby reads skin, and you can withdraw your agreement and delete everything you donated from Settings at any time. It is not available in every state.

Why it is used

Only to give you the result and the options you asked for inside the app, and to remember your choices on your phone. It is not used for advertising, profiling, or training models.

Who it is shared with

No one. Skinby does not sell or share your health data. Five features contact outside services, each sending only what it needs: the UV index sends the ZIP code you typed to the U.S. EPA; the dermatologist finder sends nearby ZIP codes to the CMS provider registry; a barcode that is not an FDA acne product is sent, as digits only, to Open Beauty Facts; product photos load from Open Beauty Facts or DailyMed and ingredient drawings from PubChem when you open them (only the product or compound number is sent); and Skinby reads its own on/off switches from a public settings table (no data about you is sent, but the host can see your IP address, as any web server can). None of them receives your photos, results or answers. In test builds, if you choose to donate a scan, the skin-only crop goes to the Skinby server, as described under "Help improve Skinby"; and if you choose to answer questions about scans, your answers (never a photo) go to the same server, as described under "Help check Skinby's answers". Purchases go through Apple and RevenueCat, which receive purchase records but no health data.

Your rights

See your data: Settings, Export my data.
Delete your data: Settings, Delete everything on this phone.
Withdraw consent: stop using the scan, turn off camera access in your phone’s Settings app, or delete the app.
Ask a question or make a request: support@skinby.app.

Teens and children

Skinby is for ages 13 and up. Under 13, the app does not continue and does not ask again. Ages 13 to 17 get the same app and the same privacy as everyone else; Skinby shows no ads and no shopping links to anyone.