Privacy Policy
Privacy Policy
Last Updated: May 21, 2026
SkinLab ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, disclosed, stored, and protected by SkinLab. This Privacy Policy applies to our mobile application, website, and related services (collectively, the "Service").
By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.
DEFINITIONS AND KEY TERMS
To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, they are strictly defined as:
Cookie: Small amount of data generated by a website and saved by your web browser. It is used to identify your browser, provide analytics, remember information about you such as your language preference or login information.
Company: When this policy mentions "Company," "we," "us," or "our," it refers to SkinLab, which is responsible for your information under this Privacy Policy.
Country: Where SkinLab or the owners/founders of SkinLab are based, in this case the United Kingdom.
Customer: Refers to the company, organization, or person that signs up to use the SkinLab Service.
Device: Any internet-connected device such as a phone, tablet, or computer that can be used to access SkinLab.
IP Address: Every device connected to the Internet is assigned a number known as an Internet Protocol (IP) address.
Personal Data: Any information that directly, indirectly, or in connection with other information allows for the identification of a natural person.
Service: Refers to the SkinLab application and related services.
Third-Party Service: Refers to advertisers, analytics providers, hosting providers, cloud infrastructure providers, or others who assist us in operating our Service.
App/Application: Refers to the SkinLab mobile application.
You: A person or entity that uses the Service.
INFORMATION WE COLLECT
We may collect several types of information from and about users of our Service, including:
Information You Provide
When using our Service, you may voluntarily provide:
- Name
- Email address
- Account login credentials
- Skin type, skin goals, and skincare routine preferences provided during onboarding
- Daily skin journal entries including sleep hours, water intake, mood rating, skin condition tags, lifestyle factors, and personal notes
- Morning and evening skincare routine steps and facial exercises you log
- Customer support communications
Information Automatically Collected
When you use our Service, certain information may be collected automatically by Firebase (a service by Google LLC) to support authentication, cloud sync, and app reliability, including:
- IP address
- Device type and identifiers
- Operating system version
- App usage events and session data
- Crash reports and diagnostics
We do not use third-party advertising or behavioural analytics SDKs.
FACE DATA AND CAMERA
SkinLab may access your device's front-facing camera to capture still photos of your face and skin when you choose to add a photo to a daily journal entry. No facial recognition, biometric measurement, landmark detection, or identity processing of any kind is performed.
What we collect: Still JPEG photos of your face and skin, captured via the front-facing camera during journal entry logging.
How it is used: Solely for your personal skin progress tracking and, if you opt in, for visual skin analysis via OpenAI's API. It is not used for advertising, profiling, identity verification, or biometric authentication.
Third-party sharing: When you trigger the AI Insights feature, up to two photos are transmitted to OpenAI, LLC over HTTPS for processing. OpenAI does not use API-submitted data to train its models. Their data handling is governed by the OpenAI API Data Usage Policy (https://openai.com/policies/api-data-usage-policies). No other third party receives your photos.
Storage: Photos are stored exclusively on your device within the app's sandboxed container. SkinLab does not upload or store your photos on any server it owns or operates.
Retention: Photos remain on your device for as long as the diary entry they belong to exists. Locally stored photos may be deleted at any time by removing the associated diary entry from within the app. Deleting your account or uninstalling the app permanently removes all locally stored photos. Users may also request deletion by contacting us at funappdev00@gmail.com.
Your consent: By using camera or photo features you consent to the collection and use of face data as described above. You may stop at any time by discontinuing use of these features.
HOW WE USE YOUR INFORMATION
We use collected information to:
- Provide and maintain the Service
- Create and manage user accounts
- Power your personal skin journal, routine tracking, and progress history
- Deliver optional AI-powered skin insights when you request them
- Sync your profile and routine preferences across devices via Firebase
- Respond to customer support inquiries
- Monitor app performance and security
- Detect fraud or misuse
- Comply with legal obligations
THIRD-PARTY SERVICES
Firebase Authentication (Google LLC) — Account sign-in (email, Apple ID, Google)
Firebase Firestore (Google LLC) — Cloud sync of profile and routine data
Google Sign-In (Google LLC) — Optional Google account login
OpenAI API (OpenAI, LLC) — AI skin insights (optional, user-triggered)
StoreKit (Apple Inc.) — In-app subscriptions and purchases
Each provider operates under their own privacy policy and data practices. We are not responsible for the privacy practices of third-party services and encourage you to review their respective policies.
We do not sell your personal information to any third party.
DATA STORAGE AND SECURITY
Daily diary entries and progress photos are stored locally on your device using SwiftData in the app's sandboxed storage.
Profile and routine preferences are stored in Firebase Firestore, hosted on Google Cloud infrastructure.
All data transmitted to Firebase or OpenAI is sent over HTTPS with TLS encryption.
We implement appropriate technical and organisational safeguards to protect your personal information from unauthorised access, disclosure, alteration, or destruction.
No electronic transmission or storage method can be guaranteed to be 100% secure.
DATA RETENTION
We retain personal information only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.
- Diary entries and photos: retained on your device until you delete them or uninstall the app
- Firebase profile data: retained until you delete your account
- Data transmitted to OpenAI: governed by OpenAI's API data retention policy; SkinLab retains no copy
When data is no longer needed, we take reasonable steps to securely delete or anonymise it.
CHILDREN'S PRIVACY
SkinLab is not intended for children under the age of 13 (or the minimum legal age in your jurisdiction). We do not knowingly collect personal information from children.
If we become aware that personal information from a child has been collected without appropriate consent, we will take steps to delete such information promptly.
INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in countries outside your jurisdiction, including the United States, where Firebase and OpenAI are based. Data protection laws in those countries may differ from those in your location.
By using the Service, you consent to such transfers where permitted by applicable law.
YOUR PRIVACY RIGHTS
Depending on your location and applicable laws, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your data
- Withdraw consent for optional features such as AI Insights
- Object to certain processing activities
- Request a portable copy of your data
To exercise any of these rights, contact us at funappdev00@gmail.com.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.
CONTACT US
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
SkinLab
Email: funappdev00@gmail.com
Country: United Kingdom