skincurve

Privacy Policy

Last updated: 22 June 2026

1. Who is responsible

The controller for data processing in connection with the skincurve app and this website is the operator named in our Imprint. You can reach us at hello@skincurve.app.

2. Overview

skincurve is a cosmetic tracking tool. We designed it to keep your data minimal and, wherever possible, on your device. We do not sell your data and we do not use your photos for advertising.

3. Your photos and face data

What we collect: When you take a scan, the app captures a selfie photo that typically shows your face ("face data"). We do not create or store any biometric face template or "faceprint", we do not perform facial recognition or identification, and we do not use Apple's TrueDepth/ARKit face data.

How it is used: The selfie is used solely to generate cosmetic skin-appearance scores (hydration, redness, blemishes, texture, overall) and cosmetic tips. It is never used to identify you, for advertising, or for profiling.

Storage: The photo and the resulting scores are stored only locally on your device (in the app's sandbox, excluded from unencrypted iCloud backup by default). We do not keep a server-side copy or gallery of your photos.

Sharing & processing: To generate the scores, the photo is sent over an encrypted connection to our processing backend (Supabase Edge Function), which forwards it to our AI provider (Anthropic) for analysis. This processing is ephemeral: the image is used only to compute the scores in that single request, is not stored on our or the provider's servers, and is not used to train AI models.

Retention: Face data is not retained on any server. On your device, the photo and scores remain until you delete the scan or uninstall the app.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you give during onboarding and can withdraw at any time by not taking further scans.

4. Camera

The app requests camera access solely to capture your scans. You can revoke it any time in iOS Settings.

5. Subscriptions

Subscriptions are processed by Apple via the App Store; we never receive your payment details. We use RevenueCat to manage and verify subscription status. Processing is based on the performance of our contract with you (Art. 6(1)(b) GDPR).

6. Analytics

We use TelemetryDeck, a privacy-first analytics service, to understand aggregate, anonymous usage (e.g. how many users complete onboarding or a scan). It does not use advertising identifiers and does not track you across apps. Legal basis: our legitimate interest in improving the app (Art. 6(1)(f) GDPR).

7. Processors & third parties

Some of these providers may process data outside the EU/EEA. Where that is the case, transfers are safeguarded by appropriate measures such as the EU Standard Contractual Clauses.

8. Retention

Photos are not stored on our servers. Your scans and scores remain on your device until you delete them or uninstall the app. Analytics data is aggregated and anonymous.

9. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, objection, and to withdraw consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise these rights, contact hello@skincurve.app.

10. Children

skincurve is not directed at children. If you are under the age required in your country to consent to data processing, please do not use the app without a parent or guardian.

11. Changes

We may update this policy. The current version is always available at this URL with the date shown above.

12. Not medical advice

skincurve is a cosmetic and tracking tool. The scores and tips are cosmetic only and do not constitute a diagnosis or medical advice, and do not replace consultation with a qualified professional.