SKNRY Privacy Policy

Last updated: 2026-08-23

1. Who We Are

SKNRY is provided by SKNRY, Inc. ("SKNRY", "we", "us", or "our").

Controller contact:

2. Scope

This Privacy Policy explains how we collect, use, store, share, and delete information when you use the SKNRY mobile application and related services.

3. Information We Collect

We collect information in the following categories.

A. Account and profile information

  • Email address
  • Display name
  • Authentication data from Apple Sign In or Google Sign-In when you choose those methods
  • Date of birth
  • Biological sex or gender selection
  • Skin type
  • Skin concerns
  • Skin longevity goals
  • Lifestyle inputs such as sleep, stress, diet, sun exposure, and water intake

B. Skin, treatment, and routine data

  • Skincare routine steps and completion history
  • Treatment logs, including treatment type, product, zones, units, injector name, clinic name, and treatment date
  • Scheduled-treatment details, including scheduled date, time, notes, and location details you enter
  • Treatment wishlist items
  • Notification preferences, if reminder features are enabled

C. Photos, facial images, and derived analysis

  • Face scan photos, skin selfies, and treatment or progress face photos you capture or select
  • Local copies stored on your device for offline functionality
  • Cloud-stored copies of photos you upload, plus derived analysis data such as skin metrics, overall scores, summaries, recommendations, overlays, and related metadata
  • Face bounds, on-device face landmarks, and preprocessing caches used to generate comparison and morph visualizations

D. Chat and user content

  • Messages and conversation history with Sia
  • Support emails you choose to send to us
  • Product and supplement scan images and extracted structured results

E. Subscription and transaction-related data

  • Subscription status and entitlement information
  • Referral or promotional redemption data

F. Usage, analytics, and diagnostics

  • Approximate location derived from your IP address for UV index and air-quality context
  • Manual screen views
  • Explicit product and funnel events, such as onboarding step, paywall, subscription, scan, routine, treatment, and Sia usage events
  • Crash reports
  • Error logs
  • Device, operating system, and app-version data

Product analytics are treated as pseudonymous personal data, not anonymous data. Before you sign in, SKNRY may use a local onboarding or session identifier to understand onboarding drop-off. After you sign in, SKNRY may use your Supabase user ID as the analytics identifier so usage can be connected across onboarding, registration, and later app use.

G. Website analytics (sknry.app)

This section covers the SKNRY website only. It is separate from the app analytics described above, and the two are not linked.

We use Google Analytics 4 on sknry.app to understand which pages and articles are read, how visitors arrive, and how many people tap through to the App Store. This is measured in aggregate to improve the site. It is not connected to your SKNRY account, and no skin data, scan data, or health information is ever sent to Google.

Google Analytics is loaded only if you accept it. When you first visit, we ask. Until you accept, no Google script is loaded, no analytics cookie is set, and no identifier is created for you. If you decline, that choice is remembered and analytics stays off. If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as a decline without asking.

If you accept, Google Analytics sets cookies to recognise repeat visits and records your approximate location, derived from a truncated IP address, along with pages viewed, referring site, and device and browser type. Google acts as our processor for this data. Retention is set to the shortest period Google offers.

You can change your mind at any time using the Cookie settings link in the site footer, which clears your stored choice and asks again. Clearing your browser storage for sknry.app has the same effect.

Separately, and regardless of your analytics choice, we record when someone taps a download link, together with any campaign parameters in the link, so we can tell which channels bring people to the App Store. This is a first-party record, it is not shared with Google or any advertising network, and it does not identify you.

4. Sensitive Data

Some information processed through SKNRY may be considered as sensitive data under applicable law, including:

  • Face photos
  • Skin-condition and treatment-related information
  • Health-adjacent or wellness-related inferences generated from your scans, routines, and treatment history

Where required by law, we rely on your explicit consent to process this information.

5. Face Data

For this Privacy Policy, "face data" means face scan photos, skin selfies, treatment or progress face photos, face bounds, on-device face landmarks, preprocessing caches, and derived skin-analysis outputs associated with face images, such as skin metrics, overlays, summaries, scores, and recommendations.

SKNRY does not create or retain biometric identifiers, biometric templates, or face templates. SKNRY does not use face data to identify you, verify your identity, authenticate you, or recognize a person.

SKNRY uses face data only to provide app functionality, including:

  • Detecting and aligning face regions for scan and comparison features
  • Generating skin metrics, scores, summaries, recommendations, and overlays
  • Showing before/after comparisons, Time Machine, and morph visualizations
  • Supporting treatment and progress tracking
  • Generating scan summaries, daily briefings, and fallback skin-analysis results when needed

SKNRY stores cloud face data while your account is active so you can keep a progress history, compare changes over time, use Time Machine and treatment-progress features, and sync your data across devices. You can delete face photos or request account deletion sooner.

SKNRY deletes cloud-stored face data after 12 consecutive months of account inactivity. Cloud-stored face data includes face scan photos, skin selfies, treatment or progress face photos, face-derived skin metrics, overlays, summaries, scores, recommendations, and related scan or treatment-photo records. Supabase database backups may retain deleted database records for up to 7 days. Supabase Storage objects are permanently removed when deleted through the Storage API. On-device cached face data is cleared when the app next opens or syncs after server purge or account/data deletion.

SKNRY shares face data with service providers only as needed to provide app functionality:

  • AILabTools receives face scan images for primary skin-image analysis and overlay generation. In SKNRY's current integration, returned overlay maps are returned in base64 format, not as provider-hosted URLs. AILabTools states that API-uploaded original files are deleted after processing, base64 returned files are not stored, temporary result URLs may be retained for up to 24 hours if used, and customer data is not used for model training. SKNRY has not separately authorized AILabTools to use face data for model training.
  • Anthropic Claude receives scan photos only for fallback skin-analysis flows, and receives related profile, routine, treatment, scan, and chat context for Sia, summaries, briefings, product/supplement scanning, routine extraction, and fallback analysis. Anthropic states that commercial API inputs and outputs are not used for model training by default and are generally deleted from backend systems within 30 days unless a legal, safety, abuse-prevention, or contractual exception applies.
  • Supabase stores app database records, uploaded media, authentication/session data, and edge-function processing data for account, sync, storage, and backend processing. Supabase acts as SKNRY's infrastructure provider and processes this data under SKNRY's instructions.

SKNRY asks for explicit in-app permission before sharing personal data with third-party AI or image-analysis providers for required app features.

6. How We Collect Information

We collect information:

  • Directly from you when you create an account, complete onboarding, log routines or treatments, send messages, or upload photos
  • Automatically from your device and app usage through analytics and diagnostics tools
  • From authentication providers when you sign in with Apple or Google
  • From subscription infrastructure used to manage in-app purchases and entitlements

7. How We Use Information

We use your information to:

  • Create and maintain your account
  • Authenticate you and keep you signed in
  • Store and sync your routines, treatment logs, chats, and photos across devices
  • Analyze face scan images and generate skin metrics, scores, summaries, and recommendations
  • Generate treatment, product-application, and time-based progress visualizations when you request those features. These visualizations are illustrative only and do not predict or guarantee results.
  • Personalize Sia responses, daily briefings, routine suggestions, and scan summaries
  • Identify skincare products and supplements from images you submit
  • Provide subscription features and manage access entitlements
  • If you opt in to AI Improvement, use photos, scan results, routines, product usage, treatment logs, and related skin-tracking data to research, develop, train, fine-tune, validate, benchmark, evaluate, improve, and commercialize SKNRY models, algorithms, datasets, and app features, including current and future systems for skin analysis, treatment-response modeling, product-response modeling, before/after comparison, appearance simulation, outcome estimation, personalization, quality control, safety evaluation, synthetic or derived data generation, and related research and product development
  • If you opt in to Anonymous Aggregate Insights, use scan results, routines, product usage, treatment logs, profile attributes, and related skin-tracking data to create anonymous aggregate statistics, benchmark datasets, trend reports, research summaries, commercial analytics, and business insights for SKNRY, clinics, skincare companies, product manufacturers, research organizations, and similar customers
  • Improve app reliability, security, fraud prevention, and abuse prevention
  • Measure feature usage, onboarding drop-off, subscription conversion, activation, retention, and app performance
  • Comply with legal obligations and enforce our Terms

We do not sell your personal data. If you opt in to Anonymous Aggregate Insights, SKNRY may create, use, and share aggregated, non-identifying statistics, benchmark datasets, trend reports, research summaries, commercial analytics, or model-derived insights with business, research, skincare, wellness, or treatment-industry partners. These outputs are designed not to identify you and do not include photos, individual scan records, row-level records, face geometry, face landmarks, biometric templates, biometric identifiers, direct account identifiers, free-text notes, exact treatment dates, clinic names, or injector names.

8. When We Share Information

We share information for the purposes described in this Policy, including operating SKNRY, using service providers, complying with law, protecting rights and safety, and creating opted-in anonymous aggregate insights.

Service providers and processors

We currently use service providers that may receive limited data necessary for their role, including:

  • Supabase for authentication, database, storage, and edge-function infrastructure
  • Anthropic Claude for chat, scan summaries, daily briefings, product scanning, supplement scanning, and some skin-analysis flows
  • AILabTools for primary skin-image analysis and overlay generation
  • ipapi.co for approximate IP-based location lookup used for UV index and air-quality context
  • Open-Meteo for UV index and air-quality data
  • RevenueCat for subscription and entitlement management
  • Sentry for crash reporting, diagnostics, and error logging
  • PostHog for product analytics and usage tracking
  • Apple and Google for authentication and app-store purchase infrastructure

We require our service providers to protect personal data with safeguards that provide the same or equivalent level of protection described in this Privacy Policy and required by applicable law.

For face-data-specific provider processing, retention, and storage practices, see Section 5, Face Data. For other service-provider processing, SKNRY uses the providers listed above only as needed to operate the app, manage subscriptions, provide analytics and diagnostics, support authentication, and provide requested app features.

Depending on the feature you use, these providers may process:

  • Account identifiers
  • Face or product images
  • Chat content
  • Skin-profile and treatment context
  • Diagnostics and device metadata
  • Approximate location and environmental context for UV index and air-quality features
  • Subscription identifiers and status
  • Pseudonymous product analytics identifiers, including Supabase user ID after authentication and local onboarding or session IDs before authentication

We may also disclose data:

  • If required by law, court order, or regulator
  • In connection with a merger, acquisition, financing, or sale of assets
  • To protect our users, services, rights, or property

9. AI and Automated Processing

SKNRY uses automated systems and third-party AI models to:

  • Analyze face images
  • Generate skincare summaries and recommendations
  • Personalize Sia conversations and briefings
  • Extract routine, product, and supplement information from text or images

If you opt in to AI Improvement, SKNRY may use pseudonymized or de-identified photos, scan results, routines, product usage, treatment logs, and related skin-tracking data to research, develop, train, fine-tune, validate, benchmark, evaluate, improve, and commercialize SKNRY models, algorithms, datasets, and app features, including current and future systems for skin analysis, treatment-response modeling, product-response modeling, before/after comparison, appearance simulation, outcome estimation, personalization, quality control, safety evaluation, synthetic or derived data generation, and related research and product development. This AI Improvement consent is optional and is separate from the AI processing required to provide app features.

Before data is used for AI Improvement, SKNRY removes direct account identifiers where practical. However, facial images, skin information, treatment history, and related skin-tracking data may still be personal or sensitive data even after identifiers such as name, email, or user ID are removed.

You can withdraw AI Improvement consent in Privacy & Legal. Withdrawal stops future use of your data for AI improvement datasets, training runs, evaluation sets, and model-development work. Withdrawal does not affect processing that already occurred before withdrawal, and may not remove the influence of your data from models, aggregate statistics, or evaluation results already created before withdrawal.

If you opt in to Anonymous Aggregate Insights, SKNRY may use scan results, routines, product usage, treatment logs, profile attributes, and related skin-tracking data to create and share aggregated, non-identifying statistics, benchmark datasets, trend reports, research summaries, commercial analytics, and business insights. These outputs are designed not to identify you. Photos, individual records, row-level records, face geometry, face landmarks, templates, biometric identifiers, direct account identifiers, free-text notes, exact dates, clinic names, and injector names are not shared with partners or customers. SKNRY applies aggregation safeguards such as minimum cohort sizes, suppression of small or identifying cohorts, removal of direct identifiers, exclusion of free-text notes and exact dates, and restrictions against reidentification. If a statistic or output cannot meet SKNRY's aggregation and anonymization safeguards, SKNRY will not release it as an aggregate insight.

You can withdraw Anonymous Aggregate Insights consent in Privacy & Legal. Withdrawal stops future use of your data for aggregate-insights datasets and reports. It does not affect anonymous aggregate statistics, reports, or outputs already created before withdrawal.

You can withdraw required scan AI processing consent in Privacy & Legal. Because SKNRY treats AI scan analysis as core functionality, withdrawing this consent blocks app access until you accept the required scan AI processing again.

AI outputs and AI features are educational and informational only. They do not provide medical advice, diagnose conditions, predict or guarantee individual outcomes, or replace advice from a qualified professional.

10. Legal Bases for Processing

Depending on where you are located, we process personal data under one or more of the following legal bases:

  • Performance of a contract: to provide the app, maintain your account, synchronize your data, and deliver requested features
  • Consent: for camera access, photo-library access, notifications, analytics where required, and other processing that requires your permission
  • Legitimate interests: for security, fraud prevention, service integrity, abuse prevention, and limited diagnostics or analytics where permitted
  • Legal obligations: where we must retain, disclose, or otherwise process data to comply with applicable law

Where we process special category personal data, including facial images, skin-condition information, treatment-related information, or health-adjacent inferences, and you are located in the EEA, UK, or Switzerland, we rely on your explicit consent under applicable data protection law.

If we rely on consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

11. Data Retention

We retain personal data for as long as needed for the purposes described above, including to provide your account and comply with legal obligations.

In general:

  • Account, profile, routines, non-photo treatment logs, messages, and non-face uploaded media are retained until you delete them or request account deletion
  • Face data is retained and deleted according to the Face Data section above, including deletion of cloud-stored face data after 12 consecutive months of account inactivity unless you delete it sooner
  • On-device face landmarks and preprocessing caches are stored locally for comparison and morph visualization and are removed when local photo/cache cleanup occurs, when account/data deletion occurs, or when the app next opens or syncs after server-side face-data purge
  • Subscription and billing-related records may be retained as needed for accounting, fraud prevention, and legal compliance
  • Crash, diagnostics, analytics, and security logs may be retained for shorter operational periods based on service-provider retention settings
  • Supabase database backups may retain deleted database records for up to 7 days before automatic deletion. Supabase Storage objects are permanently removed when deleted through the Storage API.

When account deletion is requested, SKNRY deletes app account data and uploaded media and then attempts to delete the matching PostHog analytics person for the Supabase user ID using a server-side PostHog API key. If the analytics provider API is unavailable during deletion, SKNRY logs the failure for follow-up and can complete manual deletion through PostHog.

If law requires us to keep certain records, we will retain only what is necessary for that purpose.

12. Your Choices and Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Withdraw consent
  • Restrict or object to certain processing
  • Request portability of data you provided to us
  • Lodge a complaint with a data protection regulator

You can currently manage some data directly in the app, including account-related content, product analytics preference, required scan AI processing consent, AI Improvement consent, Anonymous Aggregate Insights consent, and deletion requests from the Privacy & Legal area. The Product Analytics toggle controls PostHog product analytics capture on that device. The AI Improvement and Anonymous Aggregate Insights controls let you opt in to or withdraw optional data uses.

To exercise rights you cannot complete in the app, contact us at support@sknryapp.com.

13. International Transfers

We and our service providers may process data in countries other than your own, including the United States and other jurisdictions where our vendors operate.

Where required by law, we use appropriate safeguards for cross-border transfers, such as contractual protections or other approved transfer mechanisms.

14. Security

We use administrative, technical, and organizational measures intended to protect personal data, including:

  • Authenticated access controls
  • Row-level access controls in our backend
  • Secure cloud storage
  • Signed URLs for private media access
  • On-device protected storage for authentication sessions

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15. Children

SKNRY is not intended for children under 18, and the app is designed to restrict onboarding below that age threshold.

If you believe a child has provided personal data to us, contact us and we will investigate and delete the data where appropriate.

16. Third-Party Services

Third-party services integrated into SKNRY have their own terms and privacy practices. We encourage you to review them, especially:

  • Apple
  • Google
  • Supabase
  • RevenueCat
  • Sentry
  • PostHog
  • AILabTools
  • ipapi.co
  • Open-Meteo

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and, where required, provide additional notice or request renewed consent.

18. Contact Us

For privacy questions, rights requests, or complaints, contact: