Your skin coach
that knows
your day.

This Privacy Policy explains how SkinMama ("we," "us," "our") collects, uses, shares, and protects information when you use the SkinMama mobile application and related services. By using the Services, you agree to this Privacy Policy.

1. Information We Collect

A) Information You Provide

Account Information (required): Name, email address.

Required Analysis Information: Gender/sex, skin questionnaire responses, and face photos (three photos — front, left and right — that you take in-app when you start a skin scan). See Section 4 for how face data is handled.

Forum / Community: Posts, comments, reactions, images, and text you choose to publish; your display name and profile elements.

Community Post Attachments: When you create a community post, it may include and publicly display app-generated information such as skin analysis results, product recommendations, and routine details. These become public within the forum.

Support Communications: Information you provide when contacting support.

B) Information Collected Automatically

• Device and app information (model, OS version, app version, language)
• General location derived from IP address (country/region level)
• Usage and performance data (feature usage, screens viewed, timestamps)
• Diagnostics data (crash logs and error reports)

2. Device Permissions and Push Notifications

Camera / Photos

To use scan/analysis features, we request access to your camera and/or photo library. Photos are captured only when you actively start a scan, and only after you have accepted the in-app consent notice that names the AI provider they are sent to. You can manage permissions in your device settings.

Push Notifications

We may send push notifications related to account activity, reminders, or app features. You can disable notifications at any time through your device settings.

3. How We Use Information

We use information to:

• Create and manage accounts and authenticate users
• Provide skin analysis, scan history, progress tracking, and personalized routines
• Operate forum features and maintain community safety
• Detect, prevent, and address abuse, fraud, spam, and policy violations
• Monitor and improve app performance, stability, and reliability
• Provide customer support and respond to requests
• Comply with legal obligations and enforce our Terms and policies

4. Face Data: What We Collect, How We Use, Share, Store, Retain and Delete It

This section describes every way SkinMama handles face data. The in-app consent notice shown before your first scan summarises it; this is the full statement.

4.1 What face data we collect

When you run a skin scan, you take three photos of your face in the app: front, left side and right side. From those photos our AI provider derives skin analysis outputs: an estimated skin age, a skin health score, and a list of observed skin conditions (for example oiliness, texture, pores, pigmentation, dark circles). We do not create facial-recognition templates, faceprints or any biometric identifier, we do not use Face ID or any face-matching technology, and we never use face data to identify you or anyone else.

4.2 How we collect it

Face photos are collected only through the in-app camera flow, only when you actively start a scan, and only after you accept the consent notice shown in the app. Nothing is captured in the background.

4.3 How we use it

• To generate your non-medical skin analysis and show it to you
• To keep your scan history so you can see how your skin changes over time
• To build your personalised skincare routine and product recommendations from the derived analysis outputs
• If you use the optional skin preview feature, to generate a preview image from your front photo

We do not use face photos for advertising, for identification, or to train AI models, and we never sell them.

4.4 Who we share it with

Your face photos are sent to OpenAI, L.L.C. (United States), our AI provider, which analyses them and returns the derived outputs described in 4.1 and, if you use the skin preview, the generated preview image. The photos travel over an encrypted (TLS) connection from our servers to OpenAI's API. OpenAI processes them as our service provider under the OpenAI Services Agreement and API data-usage terms, which provide protection at least equal to this Policy: OpenAI does not use data submitted through its API to train its models, encrypts data in transit and at rest, maintains SOC 2 Type 2 certified security controls, and retains API inputs for up to 30 days solely to monitor for abuse, after which they are deleted. No other third party receives your face photos. Your face photos are never sold and never shared for advertising.

4.5 Where it is stored

Your face photos and the derived analysis outputs are stored in your private SkinMama account storage, hosted for us by Supabase on Amazon Web Services in the Asia-Pacific (Singapore) region. Photos live in a private storage bucket, encrypted at rest and in transit; access is restricted by row-level security so that only your authenticated account can read or delete them. SkinMama staff do not review face photos except where you ask us to for support.

4.6 How long we keep it and how it is deleted

• SkinMama: face photos and analysis outputs are kept for as long as your account exists, so your scan history is available to you. When you delete your account (Profile → Delete Account, or by email to support@skinmama.app), your face photos are removed from storage and your analysis outputs are deleted from our database at the same time. Deleted data may persist in encrypted backups for a limited period before it is overwritten.
• OpenAI: keeps its copy of your photos for up to 30 days for abuse monitoring only, then deletes it. OpenAI's copy is never used for training.

The Services provide informational and cosmetic/self-care guidance — not medical diagnosis or treatment.

5. Public Forum / Community

SkinMama includes a public forum. Content you post — including app-generated analysis results, product recommendations, and routine details — may be visible to other users and may be shared outside the Services. Do not create a post if you do not want this information to be public.

6. AI Features and What Is Sent to OpenAI

SkinMama's AI features are powered by OpenAI. Each feature sends OpenAI only what it needs to answer you:

• Skin analysis and skin preview: your three face photos (see Section 4).
• AI chat: the messages you type, any photo you attach to a message, and a summary of your skin profile, latest scan results and current routine so the answer fits your skin.
• Product scan, product compare and Skin Match: the product-label photos you take, the products you pick, and a summary of your skin profile and routine.
• Routine generation and weekly insight: your questionnaire answers, derived scan results and routine logs (no photos).
• Community safety: forum posts and comments are checked by OpenAI's moderation model before or after publication.

OpenAI processes this content as our service provider: it does not use it to train its models, it is encrypted in transit and at rest, and it is retained for up to 30 days for abuse monitoring, then deleted. We do not store your chat messages as a user-accessible history; we may keep them briefly for service operation, safety and troubleshooting.

7. When We Share Information

We share information only as needed to operate the Services, with service providers bound to protect it at least as well as this Policy requires:

• OpenAI (United States) — AI processing of face photos, chat, product scans and insights, as described in Sections 4 and 6
• Supabase (hosted on Amazon Web Services, Singapore region) — database, authentication and encrypted file storage
• Google Firebase — app analytics and push-notification delivery
• Sentry — crash and error diagnostics
• RevenueCat — subscription status; payments themselves are processed by Apple or Google

We may also share information if required by law, to protect safety, or in connection with a business reorganization. We do not sell your personal information. Face photos are shared only with OpenAI and only for the purposes in Section 4.

8. Third-Party Websites and Services

The Services may contain links to third-party websites. We are not responsible for their privacy practices.

9. International Data Transfers

Your information may be processed in countries where we or our service providers operate. We take measures to protect information during international transfers, consistent with applicable law.

10. Data Retention

We retain information as long as necessary to provide the Services, resolve disputes, and comply with legal obligations. When you delete your account, we delete associated personal information, your face photos and your scan history from our production systems, except where limited retention is required for legal compliance or fraud prevention. Face-data retention, including our AI provider's 30-day limit, is set out in Section 4.6.

11. Security

We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission over the Internet is 100% secure. To the maximum extent permitted by law, we are not liable for unauthorized access resulting from circumstances outside our reasonable control.

12. Legal Bases (EEA/UK)

If you are located in the EEA or UK, we process personal information based on: performance of a contract, consent (for photo analysis), legitimate interests, and legal obligations.

13. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your information. To exercise your rights, contact support@skinmama.app.

14. Do-Not-Track

There is no consistent industry standard for honoring DNT signals, so we do not respond to them.

15. Children

SkinMama is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 is using the Services, contact us and we will take appropriate steps.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date and may provide additional notice for material changes.

17. Contact Us

By downloading, accessing, or using the Services, you agree to these Terms and our Privacy Policy.

1. Acceptance of Terms

By creating an account, downloading the app, or using the Services, you agree to be bound by these Terms and our Privacy Policy, which is incorporated by reference.

2. Eligibility

You must be at least 13 years old to use the Services. If you are under the age of majority in your jurisdiction, you represent that you have permission from a parent or legal guardian.

3. Changes to These Terms

We may update these Terms at any time. Your continued use of the Services after changes become effective means you accept the updated Terms.

4. Privacy

Your use of the Services is governed by our Privacy Policy. By using the Services, you acknowledge you have read and understood how we process your information.

5. Account Registration and Security

You agree to provide accurate information, keep your login credentials secure, and notify us promptly if you suspect unauthorized access. You are responsible for all activity under your account.

6. Services Overview

SkinMama may include: skin analysis, scan history, personalized skincare routines, a public community forum, and an AI chatbot. We may change, suspend, or discontinue any part of the Services at any time.

7. User Content and Public Forum

Your Content

You retain ownership of content you submit. Community posts may publicly display app-generated information (analysis results, product recommendations, routine details). By publishing, you acknowledge this information becomes public.

License to Operate

By posting content, you grant us a worldwide, non-exclusive, royalty-free license to host, store, reproduce, modify, publish, display, and distribute your content solely to operate and improve the Services.

Prohibited Content

You agree not to post content that is illegal, threatening, hateful, defamatory, violates others' privacy or IP rights, is spam or impersonation, or attempts to disrupt the Services.

8. Skincare and Medical Disclaimer

9. Face Photos, Permissions, and Processing

Scan/analysis features require you to submit face photos, which are processed only when you actively submit them and only after you accept the in-app consent notice. Your photos are analysed by our AI provider, OpenAI, and stored in your private account storage as scan history, exactly as described in Section 4 of our Privacy Policy. Scan history cannot be turned off while your account exists; delete your account to remove it, and your face photos are deleted with it.

10. Acceptable Use

You agree not to reverse engineer the Services, bypass access controls, use automated tools to scrape or overload the Services, or use the Services in violation of applicable law.

11. Intellectual Property

The Services (including software, designs, text, graphics, logos) are owned by us or our licensors. You may not copy, modify, distribute, sell, or create derivative works without our written permission.

12. Purchases and Subscriptions

Pricing and billing terms are shown at purchase. Payments are processed by Apple/Google. Subscriptions may auto-renew unless canceled per the platform's rules. Refunds are governed by the applicable platform's policies.

13. Termination

You may delete your account at any time from in-app settings. We may suspend or terminate your access if you violate these Terms. Upon termination, your right to access the Services ends.

14. Disclaimers

To the maximum extent permitted by law, the Services are provided "as is" and "as available." We disclaim all warranties, express or implied. We do not guarantee the accuracy of any AI-generated outputs.

15. Limitation of Liability

To the maximum extent permitted by law, we are not liable for any indirect, incidental, special, or consequential damages. Our total liability will not exceed the amount you paid to us in the six months before the claim, or NPR 1,000 if you paid nothing.

16. Indemnification

You agree to defend and hold harmless SkinMama and its affiliates from claims arising from your use or misuse of the Services, your User Content, or your violation of these Terms.

17. Third-Party Links and Services

We do not control third-party websites linked from the app; your use of them is at your own risk. The service providers we use to run the Services (including OpenAI for AI processing) are listed in Section 7 of our Privacy Policy and are bound to protect your information.

18. Dispute Resolution

These Terms are governed by the laws of Nepal. Disputes will be resolved by binding arbitration administered by the Nepal Council of Arbitration (NEPCA). You agree to resolve disputes individually, not as part of a class action.

19. International Users

Your information may be processed and stored in countries where we or our service providers operate. You agree to comply with local laws applicable to your use of the Services.

20–21. Severability & Entire Agreement

If any provision is held invalid, the remaining provisions remain in effect. These Terms and the Privacy Policy constitute the entire agreement between you and SkinMama.

22. Contact

1. How to Delete Your Account

A) In-App Deletion — Primary Method

1. Open SkinMama
2. Go to Profile / Settings
3. Select Delete Account
4. Follow the on-screen steps to confirm

B) Deletion by Email

If you can't access the app, email us from the address associated with your account:

2. What Gets Deleted

• Account profile information (name and email)
• Scan history, including your face photos, removed from our storage at the moment of deletion
• Derived analysis results, indicators, and scores
• Routines and recommendations stored in your account
• Forum content (posts, comments, reactions) to the extent supported by law

3. Public Forum Content

If you posted publicly, other users may have already copied or shared that content outside SkinMama. Account deletion removes your data from our systems but cannot guarantee removal of copies made by others.

4. Irreversibility

5. Processing Time

• In-app deletion — typically processed immediately
• Email deletion — processed after identity verification, within a reasonable period

6. Limited Retention

We may retain limited information after deletion only where necessary for legal compliance, security, fraud prevention, or dispute resolution. Retained data is not used to provide active Services to you.

7. Contact