Your privacy, in plain words

This website

The skinby.app website sets no cookies, runs no analytics and loads nothing from any other company: its fonts, scripts and images are served from skinby.app itself. The sample scans on the home page are made up for the page and run in your browser.

• The iPhone waitlist: if you enter your email, we store the email address, the day you added it, the version of the waitlist text you agreed to and that you said you are 13 or older. It is used for one email when the iPhone app is available and for nothing else. It is never sold or shared. To have it removed, email support@skinby.app and it is deleted.

What Skinby stores on your phone

These stay on your phone and are not sent to Skinby:

• Your age and your answers to the setup questions.
• The products you add to your shelf, and, if you start a 28-day test, its dates and the words from each scan.
• Only if you turn it on: one photo from each scan, kept on your phone for then-and-now comparison (in a 28-day test, or in Skin over time, a Premium feature). Photos kept for a test are deleted when you end the test; all kept photos are deleted when you press "Delete my kept photos" or delete everything. They are never uploaded.
• The result of your latest scan: the words and measurements, not the photos.
• Your daily check-ins and skin tags, products you said you started or stopped, and the routine you built.
• A ZIP code, only if you type one for the UV index or the dermatologist search.
• Counts of scans and questions, your reminder choices, and a saved copy of Skinby’s on/off switches.

Photos and the camera

To scan, Skinby asks for camera access. It takes three photos, finds your face in them on the phone, measures the skin on the phone, and compares patterns on the phone with a model that is part of the app. The photos themselves are not uploaded (in test builds an adult can choose to donate a skin-only crop of a scan, described under "Help improve Skinby"). Skinby deletes them from the phone as soon as the result is made, or right away if you leave the scan.

You can turn camera access off at any time in your phone’s Settings app.

What leaves your phone, and why

A few features need the internet. Each sends only what it needs:

• UV index: the ZIP code you typed is sent to the U.S. Environmental Protection Agency to get today’s UV index.
• Find a dermatologist: ZIP codes near yours are sent to the U.S. government’s public provider registry (CMS NPPES). Nothing else is sent. Skinby does not rank, rate or recommend any provider.
• Reading an ingredient list with the camera: the photo of the label is read on your phone with Apple’s text reader and deleted right away. Only the words it read stay in the box, for you to check and edit. Nothing is sent anywhere unless you press check on a list you pasted or read, and even then the check runs on your phone.
• Product barcodes: when you scan or type a barcode that is not an FDA acne product, the barcode number is sent to Open Beauty Facts, an open product database, to look the product up. Nothing else is sent.
• Product photos and ingredient drawings: the product bank is stored in the app, but when you open a product its photo loads from Open Beauty Facts (or, for an FDA drug label, the label picture loads from DailyMed at the National Library of Medicine), and an ingredient page loads its chemical drawing from PubChem (NIH). These requests carry only the product or compound number, never anything about you or your skin.
• Purchases: if you buy Premium, Apple handles the payment. Skinby uses a service called RevenueCat to confirm that your purchase is active. It receives an anonymous ID and your purchase record, not your name or email, and not your photos or results.
• On/off switches: Skinby may fetch a small public settings file that can turn a feature off remotely. This request contains no personal information, though the host can see your IP address as any website can.

Help improve Skinby (test builds, adults only)

Test builds of Skinby can include an optional setting called "Help improve Skinby". It is off until you turn it on, it is only for people 18 and over, and it is not available in every state. When it is on, after you see a scan result you can choose to donate that one scan, one scan at a time.

• What is sent: a picture of the skin of your face from that scan, with your eyes, eyebrows and lips and everything that is not skin replaced by flat grey on your phone first; the skin-tone group Skinby estimated; how even the light was; the app version; and, if you choose, whether the answer matched your skin.
• What is not sent: your name, email, phone number, contacts, location or ZIP code, a device identifier, the other photos from the scan, the condition names Skinby gave, or your answers.
• How it is sent: to Skinby's own server (hosted by Supabase) with an anonymous sign-in, so there is no account and nothing that names you. The request appears in Settings under "What left this phone" as "Photo donation (your choice)".
• What it is used for: only to check and improve how Skinby reads skin, including on different skin tones and in different light. It is not sold, not used for advertising, and not shared with other companies.
• How long it is kept: until you delete it. In Settings, "Help improve Skinby" has a button that deletes everything you donated, and "Delete everything on this phone" deletes your donations first (if they cannot be deleted, nothing is erased and the app says so).
• You can turn it off at any time. Turning it off stops new donations; deleting removes the old ones.

Help check Skinby's answers (test builds, adults only)

Test builds can also include an optional setting called "Help check Skinby's answers". It is separate from donating a photo, it is off until you turn it on, it is only for people 18 and over, and it is not available in every state. When it is on, after some scans Skinby asks one short question: whether its answer matches what a doctor told you or what you know, or whether your skin is clear. You can skip any question.

• Which scans it asks about: mostly the ones where Skinby is least sure, because those teach it the most, plus a random sample of the confident ones and of the clear-skin ones, so it can learn how often it is right.
• What is sent when you answer: your answer, whether a doctor or you say so, the condition you picked, how sure Skinby was in a word, whether the question was a random sample, the skin-tone group it estimated, how many photos the scan used, how even the light was, the app version, and the day (not the time).
• What is not sent: a photo, your name, email, phone number, contacts, location or ZIP code, or a device identifier.
• How it is sent: to Skinby's own server (hosted by Supabase) with the same anonymous sign-in as above. The request appears in Settings under "What left this phone" as "Answers about scans (your choice)". "Not sure" and "Not this time" send nothing.
• What it is used for: only to check how often Skinby is right, including on different skin tones, and to help it learn. It is not sold, not used for advertising, and not shared with other companies.
• How long it is kept: until you delete it. "Help improve Skinby" in Settings has a button that deletes every answer you sent, and "Delete everything on this phone" deletes them first.

What Skinby does not do

• It does not upload your photos. In test builds, a skin-only crop of a scan is uploaded only if an adult chooses to donate it.
• It does not show ads or work with advertisers.
• It does not sell your data or share it for marketing.
• It does not use analytics or tracking tools.
• It does not read your location, contacts, photo library or Apple Health data.
• It does not use your photos or answers to train any model. The exceptions are in test builds, for adults who choose them: a skin-only crop you donate, and the answers you give about whether a result was right. They are used only to check and improve how Skinby reads skin.
• It lists, in Settings, every request it makes to an outside service: who was contacted and when, never what was sent. Purchases go through Apple and RevenueCat and are not in that list.

Teens

Skinby is for ages 13 and up. If you say you are under 13, the app does not continue, and it does not ask again. If your iPhone shares an age range with apps (iOS 26 and newer, where state laws apply), Skinby uses it and acts on the lower limit. Everyone gets the same app and the same privacy: your photos and answers stay on your phone. The only differences for ages 13 to 17 are that the pregnancy question is not asked and the optional beta-feedback email is not offered. Skinby does not knowingly collect personal information from children under 13.

Your choices

• Export a copy of what Skinby keeps on your phone: Settings, Export my data.
• Delete everything on your phone: Settings, Delete everything on this phone. Because Skinby has no account, nothing is kept anywhere else.
• Reminders are off until you turn them on, and you can turn them off in Settings.
• Deleting the app also removes its stored data from your phone.

Your rights

Skinby does not hold personal information about you on its own servers, so there is nothing for us to look up, correct or delete on your behalf. The export and delete tools in the app give you direct control. If you live in a state with a privacy law, you can still write to support@skinby.app and we will answer. The health data policy covers additional state requirements for health information.

Security

Your data stays inside the app on your phone, protected by your phone’s own security. Skinby does not run a server that stores your data. Keep your phone locked.

Changes and contact

If this policy changes in a way that matters, the app will say so and the date above will change. Questions: support@skinby.app.