Privacy Policy

SKIN MAX ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Display name (if provided)
• Profile photo (if provided)

If you sign in with Google, we receive your basic profile information from Google, including your name, email address, and profile picture.

User-Generated Content

We collect content you voluntarily provide, including:

• Skincare routine information (products, schedules)
• Routine tracking data and streaks
• Skin analysis data and results

Website Email Signups

If you enter your email address on our website, we store it (along with the signup date and which form you used) to notify you when SKIN MAX launches and to send occasional product updates. Every email includes an unsubscribe link, and you can also ask us to remove your address at any time.

Face Data and Photo Processing

What Face Data We Collect

Our app uses Apple's Vision framework to detect the presence and location of faces in photos you capture. This technology identifies the face bounding box (location coordinates) to help you position your face correctly and to crop photos to the relevant area for skin analysis.

We do NOT collect:

• Facial geometry or biometric identifiers
• Facial landmarks or feature measurements
• Data that could be used for facial recognition or identity verification

How We Use Face Data

Face detection is used exclusively for:

• Providing real-time guidance to help you position your face in the camera viewfinder
• Automatically cropping captured photos to focus on your face for accurate skin analysis

No facial recognition, identity verification, or biometric profiling is performed.

Photo Transmission and Processing

When you request a skin analysis, your cropped face photo is:

1. Compressed on your device
2. Securely transmitted via HTTPS to our backend (Google Firebase Cloud Functions)
3. Forwarded to Anthropic's Claude AI for general skincare observations
4. Processed in memory by our Cloud Function; we do not save the photo to your account or database

The AI provides general observations about visible skin appearance, such as dryness or texture. It does not perform facial recognition, identify you personally, or provide medical advice, diagnosis, or treatment.

Face Data Retention

• Face photos: We do not save scan photos to your account, Firestore database, or Firebase Storage. Photos are held temporarily on your device and processed in memory by our Cloud Function. Anthropic normally deletes API inputs and outputs within 30 days, with exceptions described in its data retention policy.
• Analysis results: Text-based results (skin scores, concerns, recommendations) are stored in your account until you delete them.

Your Control Over Face Data

You have complete control over your face data:

• You choose when to capture photos—we never access your camera without your explicit action
• You can review the captured photo before submitting it for analysis
• You can delete all analysis results at any time via Settings → Privacy → "Delete All My Data"
• You can delete your entire account and all associated data at any time

Automatically Collected Information

We may automatically collect certain information, including:

• Device type and operating system version
• App usage statistics
• Crash reports and performance data

How We Use Your Information

We use the information we collect to:

• Provide and maintain the SKIN MAX service
• Sync your data across your devices
• Track your skincare routine progress and streaks
• Analyze your skin photos to provide insights (when requested)
• Improve and optimize our app
• Respond to your support requests

Data Storage and Security

Your data is stored securely using Google Firebase services, including:

• Firebase Authentication: Securely manages your account credentials
• Cloud Firestore: Stores your routine data and preferences

All data is transmitted using industry-standard encryption (TLS/SSL) and stored in secure cloud infrastructure.

Third-Party Services

We use the following third-party services:

• Google Firebase: For authentication, data storage, and cloud functions. Firebase Privacy Policy
• Google Sign-In: For optional account authentication. Google Privacy Policy
• Resend: To store website email signups and send launch and product update emails. Resend Privacy Policy
• Anthropic: For AI-powered skin analysis. Face photos are sent to its API. Anthropic normally deletes API inputs and outputs within 30 days, subject to policy exceptions. Anthropic Data Retention Policy

For skin analysis, face photos pass through Google Firebase Cloud Functions to Anthropic. We do not add them to our account database or photo storage.

Website Analytics

Our website uses Google Analytics to understand how visitors interact with our site. This helps us improve the user experience. Google Analytics collects:

• Pages visited and time spent on site
• Device type and browser information
• Geographic region (country level)
• How you found our website (referral source)

We have enabled IP anonymization to protect your privacy. This data is used only for website improvement and is not linked to your app account.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data, including:

• Account information
• Routine data and tracking history

Some data may be retained in backups for a limited period as required for legal or operational purposes.

Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Delete your account and associated data
• Export: Request an export of your data

To exercise these rights, please contact us at support@skin-max.app.

Children's Privacy

SKIN MAX is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us: