Privacy Policy
Effective date: July 8, 2026
The short version: your face photos and skin analysis never leave your phone. There are no accounts, no ads, no analytics trackers, and we never sell data. The App talks to the network for exactly three things: local weather, optional anonymous claim statistics you can turn off, and subscription validation. The only personal detail we ever hold is an email address you choose to give this website for the launch waitlist.
1. What stays on your device
- Photos and analysis. Photo capture and skin analysis run entirely on your device using Apple's on-device Vision frameworks. Photos, scores, trends, and claim verdicts are stored locally and are never uploaded.
- Routine logs and product lists. Stored locally on your device.
- Health data. If you enable the optional Apple Health integration, the App reads categories such as sleep and mindfulness from HealthKit to compute correlations with your skin metrics. These reads happen on your device only. Health data is never transmitted anywhere, is not stored outside Apple's Health store, and is never included in anonymous contributions.
If you delete the App, its on-device data is deleted with it. You can also erase everything from within the App at any time (Privacy and Data, delete all data).
2. Location and weather
If you grant location access, the App rounds your coordinates to roughly 1 km and sends the rounded coordinates to two services: Open-Meteo (api.open-meteo.com) for temperature, humidity, and UV, and BigDataCloud (api.bigdatacloud.net) to resolve a city name. No account, identity, photo, or health data is attached to these requests. If you do not grant location access, the App works without weather context.
3. Optional anonymous claim data
The App has an optional setting called Contribute anonymous data. When it is on, the App submits product claim results to our aggregate dataset so that DermProof can report statistics such as how often a product claim was supported across trackers. Each submission is keyed by a random identifier (a cohort ID) that is generated on your device and is never tied to your name, email, phone number, or any account, because none exist in the App.
- What is included: product name, brand, category, barcode, the claim, the measured metric and its change, days tracked, and general profile attributes (skin type, goals, concern areas).
- What is never included: photos, location, health data, or anything identifying you.
- Your controls: you can turn contribution off at any time, and you can request deletion of previously contributed records from within the App (Privacy and Data). Deletion requests are executed server side against your random cohort ID.
- Aggregate statistics are only ever published when a claim has a minimum number of contributors, so individual submissions cannot be singled out.
4. Purchases
Purchases are processed by Apple through your Apple ID. We use RevenueCat, a subscription management service, to validate subscriptions. RevenueCat receives purchase receipt information associated with a random app user identifier, not your name or Apple ID. We do not see or store your payment details.
5. Notifications
Reminders and verdict alerts are local notifications scheduled on your device. The App does not use remote push notifications and has no server that could send them.
6. What we do not do
- No user accounts, sign-ins, or profiles on our servers.
- No advertising, no ad SDKs, no cross-app tracking, and no App Tracking Transparency prompt because there is nothing to track.
- No third party analytics SDKs.
- No selling or sharing of personal data with data brokers.
- No uploading of photos, ever.
7. Website waitlist
This website, separately from the App, offers a pre-launch waitlist. If you submit your email address there, we store that address so we can send you the TestFlight invitation and launch announcement. It is stored apart from all App data, is never linked to a cohort ID or to any skin data, and is not used for anything other than those launch emails. Ask us at the contact address below and we will remove it.
8. Data retention
On-device data stays until you delete it or delete the App. Contributed anonymous records stay in the aggregate dataset until you request deletion from within the App. Weather requests are not stored by us at all. Waitlist emails are deleted once the launch announcements have been sent, or sooner on request.
9. Children
DermProof is not directed to children under 13, and we do not knowingly collect information from them. The App has no account system and collects no identifying information from any user.
10. Changes to this policy
If our data practices change, this page and the in-app privacy description will be updated before the change takes effect, and the effective date above will be revised.
11. Contact
Privacy questions and deletion requests: [SUPPORT EMAIL, to be added before publication]. Deletion of anonymous contributions can also be requested directly in the App under Privacy and Data.