Privacy Policy
SkinScore AI is built so that it has to know as little about you as possible. There is no account, no name, no e-mail and no advertising. This page says exactly what the app does with your photo and the few other things it touches.
1. Your selfie and face data
What we collect. A photograph of your face: the selfie you take in the app. From your second scan on, the app may also send your previous selfie (the most recent one within 30 days) alongside the new one, so the result can say what changed. No other face data is collected: the app does not create a face template or faceprint, does not recognise who is in a photo, and cannot match one face to another.
Your permission first. Before the first scan the app shows a consent screen that says what is sent, to whom, and for how long it is kept, and asks you to agree. Nothing is sent until you do. If you do not agree, the camera does not open.
Where it goes and why. The photo travels over an encrypted connection (HTTPS) to our server (Fly.io, Frankfurt, Germany), which forwards it to Google LLC's Gemini API, a third-party AI service. Gemini looks at the image and returns the score, the skin-age estimate and the notes. That is the only purpose. We send it together with an anonymous install identifier and your app language, never with your name, e-mail or location. We do not share face data with anyone else, and we never sell it.
How long it is kept.
- Our server: the photo is held in memory only for the seconds the analysis takes and is discarded when the result comes back. It is never written to disk, never logged, never backed up. Retention: zero.
- Google: on the paid Gemini API tier we use, Google states that it does not use prompts or images to train its models; it may log requests for a limited period solely to detect abuse, under the Gemini API terms linked above, which bind Google to protections at least equal to ours.
- Your phone: the photo and the result are saved on your device only, so you can look back at earlier scans. Deleting a scan in the app deletes its photo; deleting the app deletes all of them.
On-device face geometry. To draw the face map, the app detects where your eyes and face are on the device (Google ML Kit, running locally). That geometry is stored with the scan on your phone and never leaves it.
Deletion and questions. Because the server stores no photo, there is nothing for us to delete on request; deleting the app removes everything on your side. For anything else about face data, write to the address in section 7.
2. Your answers
During setup you tell the app your age, what you care about, and roughly how you sleep and drink. These stay on your phone. Your age is used only locally, to compare with the estimated skin age. None of it is sent to us.
3. What our server sees
| Data | Why | Kept |
|---|---|---|
| An anonymous identifier (a random ID created on your phone, or the anonymous ID RevenueCat assigns to the install) | To enforce the free-scan limit and the daily limit for subscribers, and to check whether the install has an active subscription | With the counters below |
| Your IP address | To stop abuse (too many requests in a minute) | Up to 30 days |
| Timestamps of your scans | Daily limits and our own spending cap | Up to 30 days; the count of free scans used is kept as long as the identifier exists |
| Your interface language | So the result is written in your language | Not stored |
The server runs on Fly.io in Frankfurt, Germany. None of this is linked to your name, because we never have it.
4. Purchases
Subscriptions are sold through Apple's App Store or Google Play and managed by RevenueCat, which receives the purchase receipt and the anonymous identifier so that your subscription works, including on a new phone via "Restore purchases". We never see your payment details.
5. Crash reports and anonymous usage counts
So that we can fix crashes and see where people get stuck, the app sends two kinds of technical data, both under the same anonymous identifier and never with your photo, your score or anything you typed:
- Crash reports to Sentry: the error, the app version, the device model and OS version. No screenshots, no performance traces.
- Usage events to PostHog (EU servers): coarse milestones such as "finished onboarding", "took a scan", "opened the paywall", "started a trial", with properties like the plan name or a yes/no. No session recording, no advertising identifier, no cross-app tracking.
These are used only to run and improve the app. They are never sold, never used for advertising and never combined with data from other apps or sites.
6. What we do not do
- No selling or sharing of your data for advertising.
- No ad networks, no advertising identifiers, no tracking across other apps or websites.
- No face recognition, no biometric database.
- No processing of anyone under 13. The app asks for your age and does not accept an age below 13.
7. Your choices and rights
Everything personal lives on your phone, so you are in control of it: delete a scan, change your answers in Profile, or delete the app. For anything our server holds under an anonymous identifier, or for a question under the GDPR or Turkey's KVKK, write to 942alicankesen@gmail.com. Because we cannot tell which identifier is yours, we may ask you to read it from the app so we can locate and delete the matching records.
8. Not medical advice
The score, the skin age and every note in the app describe how your skin looks in one photo. They are not a diagnosis, a treatment recommendation or medical advice. See a doctor or dermatologist for anything that worries you.
9. Changes
If this policy changes in a way that matters, the app will say so on its next update and this page will show the new date.