Last updated June 3, 2026

Privacy Policy

This Privacy Policy explains how Skinfile handles information when you use our private skin photo journal and appointment-prep app.

Information You Add

Skinfile lets you record skin photos, body areas, skin concerns, severity scores, itch and pain levels, context tags, products used, notes, appointment dates, routine history, and generated reports.

Local-First Storage

Skinfile stores photos, logs, routine history, appointment settings, and generated reports locally on your device unless you choose to export, share, or enable an optional encrypted backup feature.

If encrypted backup is enabled, Skinfile encrypts a backup snapshot on your device before upload. The backup service receives an encrypted blob and cannot read your photos, logs, symptoms, notes, or product history.

Encrypted backup requires a Skinfile account so Skinfile can associate the encrypted backup with your account. You can create an account with Sign in with Apple or email/password. Skinfile stores the app session token and backup encryption key in the device Keychain.

How We Use Information

We use information you add to provide your journal, reminders, comparisons, routines, encrypted backup, account-related features, subscriptions, reports, diagnostics, and product improvement.

Skinfile is designed for personal tracking and appointment preparation, not diagnosis, treatment recommendations, advertising, or public sharing.

Exports

If you create a dermatologist visit report, Skinfile generates a PDF on your device. You control whether to share, save, or delete that PDF.

Purchases and Analytics

Skinfile may offer paid subscriptions through Apple In-App Purchase. Apple processes payments, and Skinfile does not receive your full payment card details.

Analytics and subscription services may process diagnostic events, feature usage, paywall events, purchase status, and attribution data to operate the app, provide paid access, troubleshoot issues, and improve product quality.

Service Providers

We may use providers including Apple, Supabase, Amplitude, and Adapty to operate account access, encrypted backup, analytics, diagnostics, attribution, subscriptions, paywalls, and purchase status.

These providers process information only as needed to provide app functionality, security, analytics, subscriptions, support, and related services.

What Skinfile Does Not Do

• Skinfile does not sell your data.
• Skinfile does not show ads.
• Skinfile does not train models on your photos.
• Skinfile does not publicly share your photos.
• Skinfile does not diagnose, treat, prevent, or cure disease.

Permissions

You can revoke camera, photo library, notification, and local authentication permissions in iOS Settings. If you enable app lock, Skinfile uses the device authentication system and does not receive or store biometric data.

Delete Your Data

You can delete local Skinfile data in Settings. This removes local logs, photos stored inside logs, routine data, saved reports, reminders, appointment settings, local unlocks, onboarding personalization, and local analytics counters.

If you use encrypted backup, deleting your backend account removes server-side account records and encrypted backup blobs.

Security

We use reasonable technical and organizational safeguards for the services we operate, including HTTPS/TLS for transmission and account-linked access controls for backend features. No method of storage or transmission is perfectly secure.

Children

Skinfile is not intended for children under 13, and we do not knowingly collect personal information from children.

Contact

Skinfile is operated by Space Cadet d.o.o., Ulica Ivana Šibla 17, 10000 Zagreb, Croatia.

For privacy questions, email hello@skinfile.app.