SkinPIN: Your Skin Story is operated by BirthTech Innovations Inc. This policy covers the SkinPIN app and skinpin.app. For privacy questions, access, correction or deletion requests, contact sanju.birthtech@gmail.com. Effective October 26, 2026.

We collect the email address you use to sign in. If you choose Apple or Google sign-in, we receive a provider account identifier, verified email address (which may be an Apple private relay address), and your name when provided. Apple or Google handles your provider credentials; SkinPIN never receives your Apple or Google password. You can explore before signing in; guest photos and drafts stay on your device until you choose to sign in and submit them. We retain the provider identifier to recognize your account, and encrypt Apple authorization tokens needed to revoke access when you delete your account. Sign-in providers do not receive your skin photos or reports through this sign-in flow. We also collect profile information you choose to enter, such as name, date of birth, country, skin and hair type, skin concerns, notes and food allergies; and an optional profile picture. We collect only photos you take using an app camera feature or select using the system photo picker. We also collect your scan labels, questions, product and medicine logs, symptoms, meal notes, journal entries and AI results. Food guidance may use the selected profile’s saved skin notes, observations and treatment history. If you explicitly select “Include my recent medical reports” for a meal, up to two recent supported reports are also sent to OpenAI. Uploaded reports are not included by default. We use account identifiers, authentication tokens and a dated AI-consent record to secure the service and remember your choices. Hosting providers process technical request information, including IP address and error/security logs, to operate and protect the service. We do not request your contacts, precise location or microphone for these features.

Face data consists of the face photographs you choose to capture or upload, any saved copies or thumbnails, and generated observations about visible appearance, such as skin texture, redness, spots and approximate image regions. A profile picture or journal photo may also contain a face. We use face photos to check image quality, generate educational skin observations, display your private history, and compare photos you select over time. We do not use face data to identify or authenticate a person, create facial-recognition templates or biometric identity profiles, target advertising, or train our own models. SkinPIN does not access Face ID or TrueDepth face maps. A photo and AI observations are not a medical diagnosis.

OpenAI is our third-party AI processor. You can give AI-sharing permission when you first use an AI feature, or enable it in Privacy & AI sharing. Sign-in does not grant this permission. Creating an account or accepting the terms alone does not enable AI sharing. After you agree, the feature you use sends relevant selected face, skin, nail or food photos; your questions, concerns, symptoms and product notes; relevant profile context such as age, skin type, skin goals and food allergies; and saved photos or findings needed for summaries and comparisons. Photo-quality checking also uses OpenAI, so permission is required before that check. Requests pass through our server to the OpenAI API over HTTPS. We do not include your email address, password or account identifiers in the AI request, although a photo or note may itself identify you. A profile picture is not sent to OpenAI merely because it is your avatar. OpenAI receives a face photo only when it is part of an AI feature you authorize. Declining sends no AI request and leaves non-AI journal, profile and saved-history features available. You can withdraw permission in Profile → Privacy & AI sharing. Withdrawal stops future AI sharing; it cannot recall requests already processed. Material changes to this disclosure require renewed permission.

Vercel hosts our website and API and stores saved scan photos in private Vercel Blob storage. Prisma Postgres stores account and profile records, consent, scan observations and journal data, including meal photos, journal photos and optional profile pictures. OpenAI processes the information described in section 4. Resend processes your email address and login or verification message to deliver email codes; face photos are not sent to Resend. These providers and their infrastructure subprocessors process data to provide and secure the service. Processing and storage can occur outside your country, including in the United States; we do not promise Canada-only or device-only storage. Access to saved account data requires authentication and an ownership check. We use HTTPS, private photo storage and provider security controls. We require service providers handling personal data to provide the same or equal protection described in this policy through applicable data-processing terms, confidentiality, security and restricted-purpose obligations. We do not sell face data or share it with advertisers. The BirthTech research/reference-library integration is disabled in this release; user photos are not added to that library.

SkinPIN retains saved face photos, their observations and other journal records for your ongoing history until you delete the item or your account; there is no automatic expiry while you keep the record. A photo submitted only for a quality check is not saved to our journal by that check. Your device can temporarily cache selected or displayed photos; the operating system manages those temporary files, and deleting an app record does not delete an original photo in your personal Photos library. Our server requests OpenAI processing with response storage disabled (store: false). This is not a promise of zero retention: OpenAI may retain content in abuse-monitoring logs for up to 30 days, with longer retention when required by law or necessary for safety; images flagged for potential child sexual abuse material may be retained for manual review. Provider prompt caches may retain temporary state for up to 24 hours. OpenAI API content is not used for training by default. Infrastructure backup copies may persist for up to 30 days after active-system deletion and are restricted to recovery/security purposes. Legal or safety preservation requirements may extend provider retention. We do not use deleted records for new AI analysis.

To delete a saved skin or face scan, open its result and choose Delete photo. This removes its active stored image and scan record, including generated face observations; copies you separately saved in a journal entry or as a profile picture must be removed there too. To delete a meal, open its result and choose Delete meal. Journal entries have their own delete action, and a profile picture can be removed in Profile. Profile → Delete account permanently deletes all managed profiles, saved photos, meals, journal entries, AI results, sessions and consent records from our active systems. Storage deletion must complete before account deletion reports success; retry if an error is shown. Backup and third-party retention exceptions are described in section 6. You can withdraw OpenAI permission without deleting your account from Privacy & AI sharing. You may also contact us to request access to or correction of your personal information or help with deletion.

An adult parent or legal guardian must manage a child profile and make the relevant data-sharing choices. Do not upload someone else’s image or health-related information without authority to do so. The OpenAI disclosure applies to managed profiles too. We do not use children’s photos for advertising or add them to a research training library. Contact us if a child has supplied information without appropriate guardian authorization.

If you purchase SkinPIN Pro on the website, Stripe processes your payment details. We send Stripe your account email and an internal account identifier, plus the selected plan. We do not send skin photos, medical reports or meal photos to Stripe. SkinPIN stores Stripe customer and purchase references, subscription status, paid access dates, and dated usage counters to apply plan allowances across your profiles. For iPhone purchases, Apple processes payment details. We send Apple a SkinPIN account UUID to link the purchase, and store Apple transaction identifiers, product IDs, expiry and revocation status, and whether the transaction is sandbox or production. We verify Apple-signed transactions to provide and restore access. We do not send skin photos, reports or meal photos to Apple for billing. We do not store full card numbers. Authorized administrators can see account and usage statistics and grant complimentary access; access changes are logged. Deleting your SkinPIN account cancels active Stripe subscriptions before removing your account data. Apple subscriptions continue after SkinPIN account deletion unless you cancel them through your Apple account settings. Apple and Stripe may retain transaction records for legal, accounting and fraud-prevention obligations. Billing and refund questions can be sent to sanju.birthtech@gmail.com.

We publish the effective date and updated policy in the app and at https://skinpin.app/privacy. If the recipient, purpose or scope of AI sharing changes materially, we request new permission before the changed sharing begins. Contact us with any questions about this policy.