Last updated: May 21, 2026
SkinLab ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, disclosed, stored, and protected by SkinLab. This Privacy Policy applies to our mobile application, website, and related services (collectively, the "Service").
By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.
To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, they are strictly defined as:
We may collect several types of information from and about users of our Service, including:
When using our Service, you may voluntarily provide:
When you use our Service, certain information may be collected automatically by Firebase (a service by Google LLC) to support authentication, cloud sync, and app reliability, including:
We do not use third-party advertising or behavioural analytics SDKs.
SkinLab may access your device's front-facing camera to capture still photos of your face and skin when you choose to add a photo to a daily journal entry. No facial recognition, biometric measurement, landmark detection, or identity processing of any kind is performed.
What we collect: Still JPEG photos of your face and skin, captured via the front-facing camera during journal entry logging.
How it is used: Solely for your personal skin progress tracking and, if you opt in, for visual skin analysis via OpenAI's API. It is not used for advertising, profiling, identity verification, or biometric authentication.
Third-party sharing: When you trigger the AI Insights feature, up to two photos are transmitted to OpenAI, LLC over HTTPS for processing. OpenAI does not use API-submitted data to train its models. Their data handling is governed by the OpenAI API Data Usage Policy. No other third party receives your photos.
Storage: Photos are stored exclusively on your device within the app's sandboxed container. SkinLab does not upload or store your photos on any server it owns or operates.
Retention: Photos remain on your device for as long as the diary entry they belong to exists. Locally stored photos may be deleted at any time by removing the associated diary entry from within the app. Deleting your account or uninstalling the app permanently removes all locally stored photos. Users may also request deletion by contacting us at funappdev00@gmail.com.
Your consent: By using camera or photo features you consent to the collection and use of face data as described above. You may stop at any time by discontinuing use of these features.
We use collected information to:
Each provider operates under their own privacy policy and data practices. We are not responsible for the privacy practices of third-party services and encourage you to review their respective policies.
We do not sell your personal information to any third party.
Daily diary entries and progress photos are stored locally on your device using SwiftData in the app's sandboxed storage.
Profile and routine preferences are stored in Firebase Firestore, hosted on Google Cloud infrastructure.
All data transmitted to Firebase or OpenAI is sent over HTTPS with TLS encryption.
We implement appropriate technical and organisational safeguards to protect your personal information from unauthorised access, disclosure, alteration, or destruction.
No electronic transmission or storage method can be guaranteed to be 100% secure.
We retain personal information only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.
When data is no longer needed, we take reasonable steps to securely delete or anonymise it.
SkinLab is not intended for children under the age of 13 (or the minimum legal age in your jurisdiction). We do not knowingly collect personal information from children.
If we become aware that personal information from a child has been collected without appropriate consent, we will take steps to delete such information promptly.
Your information may be transferred to and processed in countries outside your jurisdiction, including the United States, where Firebase and OpenAI are based. Data protection laws in those countries may differ from those in your location.
By using the Service, you consent to such transfers where permitted by applicable law.
Depending on your location and applicable laws, you may have the right to:
To exercise any of these rights, contact us at funappdev00@gmail.com.
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.
If you have any questions about this Privacy Policy or our privacy practices, please contact us at: