Privacy Policy
Skin Memory is a personal record of your skincare. That means we hold information about your skin, and we take that seriously. This page explains what we collect, why, how long we keep it, and how to get it back or get rid of it.
We've written it to be read. If anything here is unclear, ask us at contact@myskinmemory.app and we'll fix the wording.
The short version
Today, only the waitlist is live. If you've joined it, we hold your email address, the date you consented, and the version of this policy you agreed to. Nothing else.
When the app launches, we'll hold the record you create — your products, your routine changes, your notes.
We don't sell your data. We don't use it for advertising. We don't train AI models on it.
You can export everything, and you can delete everything. Both are free.
We only ask for information a feature actually uses.
1 · Who we are
Skin Memory is an independent project operated by its founder, Amna Akhtar. We are not yet incorporated as a company; when we are, this page will name it and give its registered address.
For any privacy question, contact [PRIVACY EMAIL]. We answer every one.
We are the data controller for the information described here. Where we use other companies to provide the service, they act as processors on our instructions — they're listed in section 7.
2 · What's live today
The app is in development. Right now the only thing running is a waitlist.
If you join the waitlist, we collect your email address, the date and time you gave consent, the version of this policy you agreed to, and how you arrived at the page.
We use it for one thing: emailing you about the launch. Not newsletters, not offers from anyone else, nothing you didn't ask for.
You can leave at any time by clicking unsubscribe in any email or writing to contact@myskinmemory.app. When you leave, we delete your address.
Everything from section 3 onward describes the app and takes effect when you create an account.
3 · What we collect when you use the app
Your account. Email address, language, region, timezone, and birth year. We ask for the year rather than your full date of birth because we only need to know you're old enough.
Your profile. Skin type, sensitivity, concerns and known sensitivities — all optional, all skippable, each shown with the reason we ask.
Sensitive context. Whether you're pregnant or nursing, and whether you're using prescription treatment — only if you tell us. We use these to switch off features that shouldn't apply to you, and for nothing else. You can delete them without deleting your account.
Your record. The products you add, the changes you make, dates, goals, notes about how your skin felt, and any external factors you choose to record. This is the product.
Photos. Optional. Pictures of product packaging so we can identify what you're using. We strip location and device information from every image before storing it. We don't analyse faces, and if we detect one we'll ask you to crop or delete the image.
Consent records. Which permissions you gave, when, which version of this policy applied, and when you withdrew any of them.
Technical information. Sign-in times, device and session records, and error reports. These carry identifiers and status codes — never your products, notes, symptoms, or anything about your skin.
4 · What we don't collect
Your full date of birth. Your precise location. Your contacts. Your browsing outside our site. Any information about you from third parties.
5 · Why we're allowed to hold it
Depending on where you live, different laws describe this differently. In plain terms:
| What | Why we can hold it |
|---|---|
| Account details | To provide the service you asked for |
| Your record | To provide the service you asked for |
| Sensitive context | Your explicit consent, which you can withdraw |
| Photos and AI matching | Your explicit consent, which you can withdraw |
| Analytics | Your consent, which you can withdraw |
| Security and audit logs | Our legitimate interest in keeping the service safe, and legal obligations |
Information about your skin may count as health-related data under the law where you live. Where it does, we rely on your explicit consent, and you can withdraw it. Withdrawing it means we can no longer provide that part of the service.
6 · Your permissions
Four separate switches. Each works on its own, and each can be turned off without closing your account:
Core service. Required. Storing your record so the app functions.
Photo capture and matching. Sending a photo of product packaging to an AI service to suggest a match. Turn it off and you type product names yourself, which always works.
Analytics. Anonymous counts of how features are used. Turning it off changes nothing about the app.
Research. Not currently used. It's listed so it can never be switched on quietly. If we ever want to use it, we'll explain exactly what for and ask again.
7 · Who else touches your data
We use these companies to run the service. They can only process data on our instructions, and their contracts prohibit using it for anything else.
| Company | What for | What they receive |
|---|---|---|
| [HOSTING PROVIDER] | Running the website | Technical request data |
| [DATABASE PROVIDER] | Storing your record and files | Account details, your record, photos |
| [EMAIL PROVIDER] | Sending you email | Email address |
| [AI PROVIDER] | Reading product photos | The photo only — nothing about you or your record |
| [ANALYTICS PROVIDER] | Usage counts, if you consent | Anonymous event data |
The AI provider receives the image and nothing else — not your name, not your account, not your record. Its contract prohibits training models on what we send.
We do not sell your data. We do not share it with advertisers, brands, insurers, employers, or data brokers. Nobody pays us to see it.
We will disclose information if the law requires it. If that happens and we're allowed to tell you, we will.
8 · Where your data is held
Our providers store data in [REGIONS]. If you're somewhere else, that means your information crosses a border. Where the law requires safeguards for that, we use [MECHANISM — e.g. standard contractual clauses].
9 · How long we keep things
| What | How long |
|---|---|
| Waitlist email | Until you unsubscribe, or until we launch and you don't join |
| Account and record | While your account exists |
| Sensitive context | While your account exists, or until you delete it separately |
| Photos | While your account exists, or until you delete them individually |
| Consent records | While your account exists, plus a short period afterwards to prove what was agreed |
| Security logs | [PERIOD] — these carry no information about your skin |
| Backups | Deleted data expires from backups within [PERIOD] and cannot be restored into the live service |
10 · Your rights
Wherever you live, you can:
- See what we hold.
- Export all of it, in a machine-readable file and as a readable timeline. Free, from your settings, without asking anyone.
- Correct anything wrong. Your record keeps corrections visible rather than overwriting history, so you can see what changed and when.
- Delete everything. Free, and it means deletion — not a disabled account.
- Withdraw any permission without losing your account.
- Complain to your data protection authority if you think we've got this wrong. We'd rather you told us first at [PRIVACY EMAIL] so we can fix it.
Depending on where you live you may also have the right to object to certain processing, or to ask us to restrict it. Write to us and we'll explain what applies.
How to delete. From Settings, or by writing to [PRIVACY EMAIL]. We'll confirm it's you, then remove your record, your files, and the copies held by our providers, and expire the backups on the schedule above. We keep a record that the deletion happened, with nothing about you in it. You'll see the status the whole way through.
How long we take. Export within 24 hours. Deletion begins immediately and completes across all systems within [PERIOD].
11 · Keeping it safe
Encrypted in transit and at rest. Photos and free text encrypted separately. Every user's rows are isolated at the database level, and we test that with real accounts before every release. Staff access uses separate accounts with two-factor authentication, minimum necessary permissions, and an audit trail — nobody browses records without a logged reason.
We run dependency and secret scanning continuously, and an independent security test before launch.
If something goes wrong and your data is affected, we'll tell you in plain language, tell the regulator where required, and publish what we changed as a result.
12 · Support
Our support team can explain how the product works, where a piece of information came from, and how to export or delete. They cannot interpret your symptoms, tell you what caused a reaction, or recommend treatment — that isn't what this product does. They can't see your raw photos or notes without a logged, authorised reason.
13 · Age
You need to be at least 16, or older if that's the minimum where you live. We check before you create an account, so we don't collect anything from someone who turns out to be too young.
If you believe someone underage has an account, tell us at contact@myskinmemory.app and we'll remove it.
14 · Artificial intelligence
One feature uses AI: reading a photo of product packaging to suggest what it is.
It receives the image and nothing else. It suggests — you confirm. It cannot write to your record, decide anything about safety, or see anything about you. Its provider is contractually prohibited from training on what we send. You can switch it off and enter products manually.
We do not train AI models on your record. We do not let anyone else do so.
15 · Cookies
We use what's necessary to keep you signed in and to keep the service secure. If you consent to analytics, we also count feature usage — with no information about your skin attached. No advertising or tracking cookies, and no third-party trackers.
16 · Changes
If we change this policy in a way that affects you, we'll tell you before it takes effect and, where it matters, ask again rather than assume. Previous versions stay available so you can see what changed.
17 · Contact
[PRIVACY EMAIL]
We aim to reply within [PERIOD]. If you'd prefer to write to a postal address, ask and we'll provide one.