Face data consists of the face photographs you choose to capture or upload, any saved copies or thumbnails, and generated observations about visible appearance, such as skin texture, redness, spots and approximate image regions. A profile picture or journal photo may also contain a face. We use face photos to check image quality, generate educational skin observations, display your private history, and compare photos you select over time. We do not use face data to identify or authenticate a person, create facial-recognition templates or biometric identity profiles, target advertising, or train our own models. SkinPIN does not access Face ID or TrueDepth face maps. A photo and AI observations are not a medical diagnosis.

OpenAI is our third-party AI processor. You can give AI-sharing permission when you first use an AI feature, or enable it in Privacy & AI sharing. Sign-in does not grant this permission. Creating an account or accepting the terms alone does not enable AI sharing. After you agree, the feature you use sends relevant selected face, skin, nail or food photos; your questions, concerns, symptoms and product notes; relevant profile context such as age, skin type, skin goals and food allergies; and saved photos or findings needed for summaries and comparisons. Photo-quality checking also uses OpenAI, so permission is required before that check. Requests pass through our server to the OpenAI API over HTTPS. We do not include your email address, password or account identifiers in the AI request, although a photo or note may itself identify you. A profile picture is not sent to OpenAI merely because it is your avatar. OpenAI receives a face photo only when it is part of an AI feature you authorize. Declining sends no AI request and leaves non-AI journal, profile and saved-history features available. You can withdraw permission in Profile → Privacy & AI sharing. Withdrawal stops future AI sharing; it cannot recall requests already processed. Material changes to this disclosure require renewed permission.

SkinPIN retains saved face photos, their observations and other journal records for your ongoing history until you delete the item or your account; there is no automatic expiry while you keep the record. A photo submitted only for a quality check is not saved to our journal by that check. Your device can temporarily cache selected or displayed photos; the operating system manages those temporary files, and deleting an app record does not delete an original photo in your personal Photos library. Our server requests OpenAI processing with response storage disabled (store: false). This is not a promise of zero retention: OpenAI may retain content in abuse-monitoring logs for up to 30 days, with longer retention when required by law or necessary for safety; images flagged for potential child sexual abuse material may be retained for manual review. Provider prompt caches may retain temporary state for up to 24 hours. OpenAI API content is not used for training by default. Infrastructure backup copies may persist for up to 30 days after active-system deletion and are restricted to recovery/security purposes. Legal or safety preservation requirements may extend provider retention. We do not use deleted records for new AI analysis.

An adult parent or legal guardian must manage a child profile and make the relevant data-sharing choices. Do not upload someone else’s image or health-related information without authority to do so. The OpenAI disclosure applies to managed profiles too. We do not use children’s photos for advertising or add them to a research training library. Contact us if a child has supplied information without appropriate guardian authorization.