SkinLogs Privacy Policy

Last updated: 2026-09-04

SkinLogs ("the app") is a personal tool for tracking how your skin's appearance changes over time — photos, notes, and simple check-ins that stay on your own device. This policy explains what data the app handles and why.

What SkinLogs is not

SkinLogs is not a medical device. It does not diagnose, treat, cure, or prevent any medical condition, and is not a health-monitoring tool. It does not use AI or any automated analysis of your photos or data — everything you see in the app is either something you entered yourself or simple arithmetic (an average, a count, a plain trend comparison) computed from your own entries, entirely on your device. SkinLogs does not replace a qualified medical professional. See the in-app disclaimers shown before every scan and on the consent screen.

What data is collected

• Photos you take or upload. Saving a scan is purely local: the photo is stored on your device and is never sent anywhere.
• Folder names and body locations you type in, if you choose to organize scans into tracking folders.
• Scan history metadata (date of each photo, and any notes you add) that the app keeps locally so you can review changes over time.
• Diary entries you log yourself (severity, itch, triggers, relief notes, comfort check-ins) and routine/treatment entries (what you're using, how often, whether you did it) — all stored locally only.
• Email address and password, to create the account SkinLogs requires to sign in. Your password is never stored in plain text; only a salted cryptographic hash of it is kept, using industry-standard PBKDF2.
• Subscription status (whether you have an active subscription, and its renewal date), so the app knows which features to unlock on your account.
• IP address at signup, retained on your account record to help detect abuse of the free trial. For example, several accounts created from the same IP address in a short span may indicate someone creating a new account with a different email specifically to get another free trial after a previous one ended. It is not used for advertising, and it is never combined with your photos, diary entries, or routine data.

SkinLogs contains no advertising or third-party analytics/tracking SDKs, and never sends your photos, diary entries, or routine data to us or to any third party.

Where your data is stored

Photos, folders, scan history, diary entries, routine/treatment data, planner entries, and reminder settings are stored locally on your device only, excluded from iCloud/Google Account device backups. None of this is stored on our servers or seen by us. Uninstalling the app, or using the in-app "Delete all data" option (Settings, or "Clear all saved data" in the History tab), permanently deletes this local data.

Your account record (email address, password hash, subscription status, and the IP address used at signup) is stored on our server (a Cloudflare Workers deployment) so you can sign in from that account. You can permanently delete your account at any time with the in-app "Delete account" option in Settings — this also deletes your locally stored data, since it no longer belongs to any account. If you no longer have the app installed, you can instead request deletion by contacting us at the email below.

How the app's on-screen summaries work

Scan, Library, and Planner are always free. Diary, Routine, Compare (side-by-side photo comparison), and Progress report (trend summaries, adherence rate, and pattern correlations built from your own logged entries) are free for a 30-day trial from signup, then require an active subscription. Every one of these features is deterministic local arithmetic over data you already entered — a Progress report's "trend" line, for example, is just an average of your logged severity numbers for the first half of a period compared to the second half. None of it involves AI, none of it is sent off your device to be computed, and none of it is a medical assessment.

How payment is handled

Subscriptions are purchased through Google Play Billing (Android) or Apple's In-App Purchase (iOS), depending on which app you're using. We never see or store your payment card details — Google or Apple handles the transaction directly, and our server receives only a purchase token or receipt, which it verifies with the platform's own API to activate your subscription.

Third parties involved

• Google Play Billing (privacy policy): processes subscription payments on Android and reports purchase status back to our server. We never see or store your payment details.
• Apple In-App Purchase (privacy policy): processes subscription payments on iOS the same way.
• Cloudflare Turnstile (privacy policy): a bot-verification check shown during sign-up and login, which sees your IP address and browser signals as part of that check. It doesn't see your email, password, or any app data.

Notifications

If you turn on rescan or treatment reminders, SkinLogs schedules a local notification on your device at the frequency you choose. This does not involve any server or third party; it's handled entirely by your device's operating system.

Your choices

• Delete all locally stored data at any time with "Delete all data" in Settings (or "Clear all saved data" in the History tab).
• Permanently delete your account, and everything tied to it, with "Delete account" in Settings — no need to contact us. If you don't have the app installed, you can instead request deletion by emailing us.
• Turn off reminders at any time.
• Uninstalling the app removes all locally stored data.

Children's privacy

SkinLogs is not directed at children and is not intended for use by anyone under 13.

Changes to this policy

If this policy changes, the "Last updated" date above will change and, for material changes, we'll make reasonable efforts to note it in the app's store listing.

Contact

Questions about this policy or your data can be sent to support@skinlogs.com.