Who we are
SkinCare AI is an AI skincare companion operated by Omnivatis (“we”, “us”). Contact: omnivatissynergy@gmail.com.
Information we collect
- Contact info — email and name for your account.
- Face photos and other user content — the selfie you choose to scan, product packaging photos, the skin readings produced from them, product shelf data, and AM/PM routine check-offs and reminder times. See Face photos and face data.
- Skin diary — the dates, skin-feeling selections and notes you choose to save. These are stored with your account so you can review and edit them. Diary text and selections are not sent to the AI provider or included in analytics events. You can delete individual entries from Skin diary.
- Acne care — adult confirmation, your self-described concerns, treatment instructions, suitability answers you choose to share, care schedules, and symptom check-ins. Optional progress photos are stored in our database and served only to your authenticated account. Album photos are sent to AI only when you separately agree to use a starting photo for an illustrative goal preview. Delete individual photos and check-ins in My acne progress, or all acne care data in My acne care plan.
- Purchases — subscription product and entitlement dates from Apple App Store / Google Play (we do not store full payment card numbers).
- Identifiers — account ID; device / push tokens for Firebase Cloud Messaging and analytics.
- Usage data — product events (sign-in, paywall, purchase/restore, face/product scans, scan-limit reached) via Firebase Analytics.
- Diagnostics — crash data via Firebase Crashlytics.
How we use information
- App functionality — authenticate you, store scan images (Amazon S3), generate skin/product guidance, save diary check-ins, run routines and reminders, and enforce subscription scan quotas.
- Analytics & reliability — understand feature use and fix crashes.
Face photos and face data
What we collect. When you start a skin scan, SkinCare AI collects the single face photo you take with the camera or pick from your photo library. Optional acne progress photos are collected separately for your private album. We do not create or store a faceprint, face template, face-geometry map, or any other biometric identifier; we do not use Face ID, TrueDepth, ARKit face tracking, or face recognition; and we never use a photo to identify or authenticate anyone.
How it is used. At your request, an AI scan produces limited visible observations. New scans do not measure hydration, oil production, acne severity, or clearance. The photo and result are kept with your account so you can revisit them. We do not use face photos for advertising, profiling, or model training, and we never sell them.
Who receives it. The photo is uploaded over TLS to our API (Omnivatis, hosted on Amazon Web Services) and passed to OpenAI, our AI processor, which returns a structured description. OpenAI processes it under its API terms as our processor and does not use API content to train its models. No other third party receives your face photos, and we do not share them with advertisers, data brokers, or analytics providers.
Where it is stored. AI scan photos are stored as encrypted objects in Amazon S3 in the EU (eu-north-1), and the readings derived from them are stored in our MongoDB database. Access is limited to your own authenticated account and to our operators for support and security.
How long we keep it. A face photo is retained until you delete it or your account. You can erase every scan photo and result at any time in Settings → AI & photo data → Delete my scan photos, or delete your whole account in Profile → Delete account; both remove the images from our database and from S3. Deleting your account removes all face photos and scan results within 30 days at the latest, including from backups.
Your permission. Before the first scan, the app shows a disclosure naming what is sent, who receives it, and how long it is kept, and no photo leaves your device until you tap “Agree”. You can withdraw that permission at any time in Settings → AI & photo data; new scans then stop until you agree again.
AI processing
AI goal previews are optional, synthetic illustrations, not predictions of treatment results or evidence of progress. After separate agreement, we send OpenAI your starting scan or earliest front-facing album photo and your chosen visual goal. Treatment details and check-ins are not sent for this edit. The generated image is stored privately in our database, outside the progress album. Delete it in your care plan; deleting its source photo, all acne care data, or your account also removes it. Withdrawing AI permission stops new previews. Image edits do not offer the text API’s response-storage setting; provider security retention may apply. API content is not used for model training by default.
Face and product photos, plus a fixed instruction prompt, are sent to our AI provider — currently OpenAI — to produce limited visible observations or ingredient extracts. Your name, email address, and account identifiers are not sent with them. Outputs are wellness guidance only, not a medical diagnosis. Avoid uploading images of others without their permission.
AI-organized care guidance has separate, optional permission. When you request it, we send OpenAI only your program week, whether a treatment is recorded, and the latest dryness, stinging, and peeling ratings. We do not include names, treatment text, diary notes, or progress album photos. The model selects topics from our source catalog; it does not write new treatment instructions or change your plan. Requests disable response storage, although provider security retention may still apply. Withdraw AI permission in Settings to stop future processing. Your care program and private progress album work without AI.
Health information and sources
Skin readings, tips, and product suggestions are general wellness information. Each health statement in the app is backed by public health and dermatology sources (including MedlinePlus/NIH, NIAMS, NHS, WHO, FDA, and the American Academy of Dermatology), listed with links in Settings → Sources & references and under each scan result. SkinCare AI is not a medical device and does not diagnose, treat, or prevent any condition.
Sharing
We do not sell your personal information and we do not share it for cross-context behavioural advertising. We share data only with the processors needed to run SkinCare AI, each bound by an agreement to protect it to at least the standard described here:
- Amazon Web Services — API hosting and encrypted S3 image storage (EU region).
- OpenAI — AI analysis of selected scan photos, separately approved goal-photo edits, and optional organization of a limited care summary; API content is not used for model training by default.
- MongoDB Atlas — database for accounts, scan results, skin diary entries, acne care records and private progress photos, routines, and shelf products.
- Google Firebase — analytics events, crash reports, and push notifications. Photos are never sent to Firebase.
- Apple App Store / Google Play — subscription purchase and entitlement validation.
Retention & deletion
- Acne care records and progress photos — retained until you delete individual check-ins or photos, delete all acne care data, or delete your account.
- Skin diary entries — kept until you delete an entry or your account. Use Skin diary to view, edit or delete an entry.
- Face and product photos — kept until you delete them. Settings → AI & photo data → Delete my scan photos erases all of them immediately, from the database and from S3.
- Scan results, routines, shelf products — kept while your account is active.
- Account — Profile → Delete account removes your account, acne care records and progress photos, scans, photos, routines, shelf products, diary entries, and notifications; anything remaining in backups is removed within 30 days.
Store subscriptions must be canceled separately in Apple / Google settings.
Children
SkinCare AI is not directed to children under 13 (or the minimum age required in your region).
Changes
We may update this policy. The “Last updated” date above will change when we do.