Privacy Policy

AI Skin Tracker is operated by Naveed Iqbal, a sole operator based in British Columbia, Canada (GST/HST Business Number: 794520379 RT 0001). The designated Privacy Officer is Naveed Iqbal.

For privacy questions, access or correction requests, deletion requests, or complaints, contact: support@aiskintracker.com or through the Help & Support section in the app. We aim to respond within 30 days.

Almost all of your personal data — including your profile, skin analysis results, metric history, scan photos, routine snapshots, streaks, and milestones — is stored locally on your device only. We do not maintain user accounts on our servers.

We store limited pseudonymous, device-linked data on our servers to operate the app. This data does not include your name, facial photos, skin scores, scan images, or skincare history:

• Trial and reward records — a device-generated identifier, trial status, and reward claim records, used solely to prevent abuse and enforce one free trial per device
• Product ratings — your device-linked identifier, the product ID, and your star rating. Optional written feedback if provided. No name, photo, or skin data included.
• Usage events — named action events such as "app_open" and "scan_completed", your device platform, and a timestamp. No photos, skin scores, or personal information are included.

Facial photos, skin-related inferences, estimated skin age, and cosmetic skin metrics may be considered sensitive personal information in some jurisdictions. We process this information only to provide the app's cosmetic scan and routine features, and only with your explicit consent.

We collect facial photos only when you initiate a scan. We use facial photos solely to generate cosmetic skin analysis, visible skin metrics, estimated cosmetic skin age, and personalised routine suggestions.

Each skin analysis captures up to three photos (front-facing, right profile, and left profile) to give the AI a more accurate view of your facial skin. When you complete a scan, your photos are:

• Saved locally on your device in a secure app directory
• Transmitted securely to OpenAI over an encrypted HTTPS connection for cosmetic analysis only
• Processed by OpenAI as our service provider under applicable API and data processing terms — AI Skin Tracker does not store your photos on its own servers
• Not used by OpenAI to train or improve its AI models under the current API terms — OpenAI processes images as a processor under our instructions
• Never shared with third parties, advertisers, or data brokers by AI Skin Tracker
• Automatically managed on your device: photos from your 30 most recent scans are kept; older scan photos are removed. All scan results and metric scores are always retained regardless of photo age.

AI Skin Tracker analyses your photos to produce cosmetic skin metrics, concern identification, and an Estimated Skin Age range based on visible facial characteristics.

• All analysis results and metric scores are stored only on your device
• The Estimated Skin Age is a cosmetic estimate only — it is not a medical or biological assessment and does not indicate your actual age, health, or wellbeing
• We do not assess, diagnose, or treat medical skin conditions — always consult a dermatologist for professional advice
• Analysis data is never sold or shared with insurance companies, employers, or any other third parties

AI Skin Tracker uses OpenAI's GPT-4 Vision model to analyse your facial photos and produce cosmetic appearance scores, visible observations, and routine recommendations. This constitutes automated processing of your facial images.

• Purpose: Cosmetic appearance tracking only. The AI does not diagnose, detect, or predict medical conditions.
• Human review: No human reviews your photos or analysis results. Processing is fully automated.
• Photo retention: Your photos are transmitted to OpenAI solely to generate your results and are not retained by AI Skin Tracker on our servers. OpenAI's data handling is governed by its API data processing terms.
• Consequential decisions: AI Skin Tracker output should not be used as the sole basis for any medical, health, or treatment decision. Always consult a qualified dermatologist or healthcare professional for medical advice.
• Accuracy: AI cosmetic analysis is inherently approximate. Results may vary based on lighting, camera quality, and facial positioning. Scores are cosmetic estimates, not medical measurements.

AI Skin Tracker requests only the permissions it needs:

• Camera: Required for skin scanning — used only when you initiate a scan
• Photo Library: Optional — used only to let you set a profile photo
• Notifications: Optional — used for scan reminders, routine alerts, trial expiry notices, and re-engagement prompts

You can revoke any permission at any time through your device settings. Revoking camera access will prevent new scans until access is restored.

We use the following service providers to operate AI Skin Tracker. These providers process data only as needed to provide their services to us, subject to applicable contractual and legal obligations:

• OpenAI: Receives your facial photos and scan request data solely to generate your cosmetic skin analysis and routine suggestions. OpenAI acts as our service provider under applicable API and data processing terms. OpenAI does not use your images to train its AI models under current API terms. Photos may be processed on servers outside Canada, including in the United States. See openai.com/privacy.
• RevenueCat: Manages in-app subscriptions and purchase verification. RevenueCat receives pseudonymous device identifiers and purchase event data — no photos, skin scores, or skin analysis data are ever shared. See revenuecat.com/privacy.
• Hosting and database provider: Limited pseudonymous device-linked records (trial status, reward records, product ratings, usage events) are stored on our servers. No photos, skin scores, or personal identity information are stored.

Your device's region setting (country code) is read locally to display relevant product links. No precise location data is collected, transmitted, or stored. Product links open a live Google Shopping search — AI Skin Tracker does not use affiliate tracking and receives no commission from product purchases.

The following pseudonymous, device-linked data is stored on our servers. None of it contains your name, photo, skin scores, or any content from your scans:

• Trial and reward records — a device-generated identifier, a record of any reward claimed and when, and a flag indicating whether this device has previously used a free trial
• Product ratings — your device-linked identifier, the ID of the product you rated, and your star rating (1–5). Optionally, any written feedback you provide.
• Usage events — named action events such as "app_open" and "scan_completed". These include your device platform (iOS) and a timestamp. No photos, skin scores, or personal information are ever included.

This data is used solely to operate app features, prevent abuse, and improve the product. It is never used for advertising or sold to third parties.

To request deletion of any server records associated with your device, contact us at support@aiskintracker.com. We will process your request and confirm deletion within 30 days.

If you contact us through the website support form or submit a testimonial, we may collect your name (optional), email address, category, message, star rating, and submitted experience. This information is used solely to respond to your support request or, in the case of approved testimonials, to display your experience on the website.

• Support requests: name, email address, category, and message — used to respond and resolve your issue
• Testimonial submissions: optional display name, message, and star rating — reviewed before any public display; unapproved submissions are not shown

You may request deletion of any support or testimonial submission by emailing support@aiskintracker.com. We will process your request and confirm deletion within 30 days.

Facial photos and scan results stored locally remain on your device unless you delete them, clear app data, or uninstall the app. The app retains photos from your 30 most recent scans locally to support scan history and before/after comparisons.

Limited server-side device-linked records are retained only as long as needed to operate trials, rewards, verify purchases, prevent fraud, support product ratings, respond to support requests, fulfil legal obligations, and maintain security. Trial and reward records are retained for as long as necessary to prevent abuse and enforce trial limits, unless deletion is requested or required by law. We periodically delete or de-identify records that are no longer needed.

Device backups controlled by iCloud may persist under your own device and Apple ID settings. AI Skin Tracker does not control backup retention on Apple's servers.

AI Skin Tracker lets you share your scan results and skin journey as branded image cards. These are generated entirely on your device from your locally stored skin data and shared via your device's standard share sheet. AI Skin Tracker does not transmit your share card images to our servers at any point.

• All photo transmissions to our AI service use HTTPS encryption
• No user accounts or passwords — there is nothing to compromise on our end
• Local data is protected by your device's built-in security (passcode, Face ID, Touch ID)
• Device-linked data stored on our servers is held in an encrypted database, access-controlled and not exposed publicly
• Subscription data is managed entirely by Apple and RevenueCat — we do not handle or store payment information

• Use "Clear All Data" in Profile settings to erase all scan history, metric data, routine snapshots, and profile information from your device immediately
• Uninstalling the app removes all associated data from your device

For device-linked records stored on our servers (trial status, reward records, product ratings), contact us at support@aiskintracker.com. We will confirm deletion within 30 days. Note that iCloud backups are controlled by your own device and Apple ID settings and may persist independently of in-app deletion.

AI Skin Tracker is not directed to children under 13. The app is intended for users aged 13 and older, or older where required by local law. We do not knowingly collect personal information from anyone under 13 years of age. Users under the age of majority may use the app only with parent or guardian consent.

If you scan another person, including a child, you must be their parent or legal guardian and you confirm that you consent to the cosmetic analysis of that person's image on their behalf. You confirm that you have the authority to provide this consent. In all cases, the AI analysis is a cosmetic assessment only and is not a medical evaluation.

If you believe a child under 13 has independently used the app, please contact us at support@aiskintracker.com so we can assist with deletion of any associated records.

AI Skin Tracker is operated from British Columbia, Canada. We use service providers that may process data in Canada, the United States, or other locations. Facial photos transmitted to OpenAI for analysis may be processed on servers located outside Canada, including in the United States, where they may be subject to foreign laws.

By using AI Skin Tracker, you acknowledge and consent to this cross-border transfer of your data for cosmetic analysis purposes. We take reasonable steps to ensure that your data is handled securely regardless of where it is processed.

AI Skin Tracker is currently available only in the United States and Canada. Access to the app, website, and all associated services is restricted to users in these two countries. Users located outside the United States and Canada cannot download, use, or access AI Skin Tracker.

We do not sell personal information and do not share it for cross-context behavioural advertising purposes.

U.S. State Privacy Rights. If you are located in the United States, additional privacy rights may apply depending on your state of residence. Regardless of whether applicable law formally requires it, we make the following commitments to all U.S. users:

• Access: You may request a summary of the personal information we hold about you (device-linked records on our servers).
• Correction: You may request correction of inaccurate personal information we hold.
• Deletion: You may request deletion of device-linked records held on our servers. We will confirm deletion within 30 days.
• No sale: We do not sell your personal information to third parties.
• No sharing for advertising: We do not share personal information for cross-context behavioural advertising.
• Sensitive data: We collect facial photos and skin-related inferences only with your explicit consent at first launch. You may withdraw consent by contacting us and requesting deletion.
• Appeal: If we deny a request, you may appeal by contacting us at support@aiskintracker.com.

California residents may have additional rights under the California Consumer Privacy Act (CCPA/CPRA). Washington state residents may have additional rights under the My Health MY Data Act regarding consumer health data. To exercise any of these rights, contact us at support@aiskintracker.com.

AI Skin Tracker processes facial images and generates cosmetic appearance scores relating to visible skin characteristics. In certain U.S. states (including Washington under the My Health MY Data Act), this may constitute "consumer health data."

• What we collect: Facial photos (transmitted for analysis then discarded from our servers), and locally stored cosmetic appearance scores and metrics.
• Why we collect it: Solely to provide you with personalised cosmetic appearance analysis, skincare routines, and progress tracking features.
• Who we share it with: OpenAI (for analysis, under API terms), and no other parties. We do not sell consumer health data.
• Your rights: You may request access, correction, or deletion of any data we hold. You may withdraw consent at any time by contacting us and deleting the app.
• Not medical data: AI Skin Tracker's output is cosmetic appearance information only. It is not a health record, medical diagnosis, or clinical measurement.

To exercise your consumer health data rights, contact our Privacy Officer at support@aiskintracker.com.

Our website at aiskintracker.com currently uses only essential hosting and security technologies and does not use advertising cookies or tracking pixels. If we add analytics, advertising, or non-essential cookies in the future, we will update this policy and provide any required consent choices.

We may update this privacy policy from time to time to reflect changes in the app or applicable law. Any changes will be reflected here with an updated "Last updated" date. Continued use of the app after changes constitutes acceptance of the revised policy.