SkinLab ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, disclosed, stored, and protected by SkinLab. This Privacy Policy applies to our mobile application, website, and related services (collectively, the "Service").
This policy explains our data practices. It does not replace a separate consent where one is required by law, and using the Service does not waive your data protection rights.
Cosmetic Estimates and Personal Information
Depending on the features you use, SkinLab uses photos, profile information, routine details, and journal check-ins to produce cosmetic estimates, skin scores, observations, product-fit ratings, routine suggestions, and weekly summaries. These outputs are generated information about your skin and habits and may be stored with your account as described below.
These inferences can be wrong, incomplete, or affected by lighting, image quality, and the information you provide. They are not a medical diagnosis, a professional assessment, a guarantee of results, or confirmation that a product will be safe for you. Consult a qualified dermatologist before acting on a suggestion or changing your skincare routine. Our product safety information and limits on results explain this further.
Describing an output as a cosmetic estimate does not remove protections that apply to your personal information, including any information that qualifies as health-related data under applicable law. You may contact us about inaccurate information or to exercise the rights described in Your Privacy Rights. This policy does not ask you to waive those rights or release us from responsibility for an adverse reaction.
Definitions and Key Terms
To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, they are strictly defined as:
- Cookie: Small amount of data generated by a website and saved by your web browser. It is used to identify your browser, provide analytics, remember information about you such as your language preference or login information.
- Company: When this policy mentions "Company," "we," "us," or "our," it refers to SkinLab, which is responsible for your information under this Privacy Policy.
- Country: Where SkinLab or the owners/founders of SkinLab are based, in this case the United Kingdom.
- Customer: Refers to the company, organization, or person that signs up to use the SkinLab Service.
- Device: Any internet-connected device such as a phone, tablet, or computer that can be used to access SkinLab.
- IP Address: Every device connected to the Internet is assigned a number known as an Internet Protocol (IP) address.
- Personal Data: Any information that directly, indirectly, or in connection with other information allows for the identification of a natural person.
- Service: Refers to the SkinLab application and related services.
- Third-Party Service: Refers to advertisers, analytics providers, hosting providers, cloud infrastructure providers, or others who assist us in operating our Service.
- App/Application: Refers to the SkinLab mobile application.
- You: A person or entity that uses the Service.
Information We Collect
We may collect several types of information from and about users of our Service, including:
Information You Provide
When using our Service, you may voluntarily provide:
- Name
- Email address
- Account login credentials
- Skin type, skin goals, and skincare routine preferences provided during onboarding
- Daily skin journal entries including sleep hours, water intake, mood rating, skin condition tags, lifestyle factors, and personal notes
- Morning and evening skincare routine steps and facial exercises you log
- Customer support communications
Information Automatically Collected
When you use our Service, certain information may be collected automatically by Firebase (a service by Google LLC) to support authentication, cloud sync, and app reliability, including:
- IP address
- Device type and identifiers
- Operating system version
- App usage events and session data
- Crash reports and diagnostics
The app uses Firebase Analytics to record usage and purchase-related events. The website uses Firebase/Google Analytics for usage measurement and App Store link clicks. These services may process device or browser identifiers and event information.
Face Data and Camera
SkinLab may access your camera when you choose to capture a photo for your skin journal or a skin scan. On-device face and facial-landmark detection helps guide framing and assess whether your face is positioned for capture. This capture guidance is not intended to identify you or authenticate your identity.
What we collect: Photos you capture or select for journal entries and skin-analysis features, and the cosmetic observations generated from them.
How it is used: Photos support your personal skin journal and progress comparisons. When you use photo-based AI features, they also help generate cosmetic observations, routine suggestions, or reports. These are estimates about appearance, not an assessment of your health.
Third-party processing: When you use AI-powered features, photos and relevant profile, routine, or journal information may be transmitted through Firebase Cloud Functions to the AI provider to generate the requested analysis or report. SkinLab uses OpenAI for these features. This is different from keeping a photo only in your local journal. Provider handling is governed by the applicable provider terms and data practices.
Storage: Journal photo files are stored in the app’s local storage. Photos used for AI analysis are also transmitted for processing as described above. Generated skin-scan results and weekly reports may be stored locally and synced with your account; they are distinct from the original photo files.
Retention: Local journal photos can be removed by deleting their associated entries. Uninstalling the app removes its local data but does not, by itself, delete account data held remotely. For account-data deletion or questions about a photo submitted for processing, use the available account controls or contact funappdev00@gmail.com.
Your choices: You can decline camera access or stop using photo-based features. Camera permission does not by itself authorise unrelated use of your photos. Where separate consent is required for processing, it must be obtained for that purpose; the rights in this policy continue to apply.
How We Use Your Information
We use collected information to:
- Provide and maintain the Service
- Create and manage user accounts
- Power your personal skin journal, routine tracking, and progress history
- Deliver optional AI-powered skin insights when you request them
- Sync account-linked profile, routine, journal, and insight data via Firebase
- Respond to customer support inquiries
- Monitor app performance and security
- Detect fraud or misuse
- Comply with legal obligations
Third-Party Services
- Firebase Cloud Functions and Crashlytics (Google LLC) — Server-side processing of feature requests and error diagnostics.
- Qonversion — Subscription-related services integrated in the app.
- Firebase/Google Analytics — App and website usage measurement, including App Store link clicks.
- Web3Forms — Processing and forwarding the name, email, topic, and message you submit through the website contact form.
- Firebase Authentication (Google LLC) — Account sign-in (email, Apple ID, Google)
- Firebase Firestore (Google LLC) — Account-linked storage and sync of profile, routine, journal, and insight data
- Google Sign-In (Google LLC) — Optional Google account login
- OpenAI API (OpenAI, LLC) — AI skin insights (optional, user-triggered)
- StoreKit (Apple Inc.) — In-app subscriptions and purchases
Each provider’s terms and privacy practices apply to its processing. We remain responsible for the obligations that data protection law places on us, including where service providers process information on our behalf. Contact us for questions about the providers involved in a feature you use.
We do not sell your personal information to any third party.
Data Storage and Security
Routine and journal data, photos, and generated insights are stored locally in the app’s storage.
When you sign in, account-linked profile information, products, routines, completions, journal data, skin-scan results, and weekly reports may also be stored in Firebase Firestore for sync and continuity.
All data transmitted to Firebase or OpenAI is sent over HTTPS with TLS encryption.
We implement appropriate technical and organisational safeguards to protect your personal information from unauthorised access, disclosure, alteration, or destruction.
No electronic transmission or storage method can be guaranteed to be 100% secure.
Data Retention
We retain personal information only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.
- Local diary entries and photos: retained until deleted or the app is uninstalled; this does not remove synced account copies
- Account-linked cloud data: retained to provide the Service and handled through account-deletion controls or a deletion request, subject to applicable retention obligations
- AI processing data: subject to the provider’s applicable retention practices; generated insights may remain in your local or synced history until deleted
When data is no longer needed, we take reasonable steps to securely delete or anonymise it.
Children's Privacy
SkinLab is not intended for children under the age of 13 (or the minimum legal age in your jurisdiction). We do not knowingly collect personal information from children.
If we become aware that personal information from a child has been collected without appropriate consent, we will take steps to delete such information promptly.
International Data Transfers
Your information may be transferred to and processed in countries outside your jurisdiction, including the United States, where Firebase and OpenAI are based. Data protection laws in those countries may differ from those in your location.
International transfers remain subject to applicable data protection requirements. Using the Service does not waive your rights concerning those transfers. Contact us for information about the transfers and safeguards relevant to your data.
Your Privacy Rights
Depending on your location and applicable laws, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your data
- Withdraw consent for optional features such as AI Insights
- Object to certain processing activities
- Request a portable copy of your data
To exercise any of these rights, contact us at funappdev00@gmail.com.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Where a change requires additional notice or consent, we must provide that notice or obtain that consent before applying the change to the affected processing. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
- SkinLab
- Email: funappdev00@gmail.com
- Country: United Kingdom