SkinjotPrivacy Policy
In short: your skin entries, photos and period dates are stored encrypted on your phone, not on our servers. Only when you use an AI feature is the information that task needs processed over an encrypted connection, and it is not stored. No ads, and we don't sell your data.
This policy explains how your personal data is processed when you use the Skinjot iOS app and skinjot.com. It also serves as the information notice under Turkey's Personal Data Protection Law No. 6698 (KVKK).
Data controller
Anıl Pekesen, Tulumtaş, 2358. Sk. No:6, Ferce Tulumtaş A1 Blok Daire 28, 06830 Gölbaşı/Ankara, Türkiye. Contact: destek@skinjot.com
What data, and where
| Data | Where it is kept | Why |
|---|---|---|
| Daily entries (score, notes, tags), skin photos, period start dates, products and ingredient lists, medication and supplement logs, profile details (name, skin type, life stage) | Only on your phone, encrypted | The app's core function |
| Email address, password (stored as a one-way hash), optional name | Our account server (Supabase, Frankfurt, EU) | Creating your account and signing in |
| AI usage count (task type and time, no content) | Our account server | Enforcing usage limits |
| Subscription status (active or not, expiry, store) | Our account server and Apple (App Store) | Unlocking Pro features |
| Crash and error reports (technical details, a pseudonymous user ID, no health data) | Sentry | Finding and fixing bugs |
In-app usage events (for example "report screen opened") stay on your phone and are not sent to us. We don't use third-party analytics or advertising tools.
AI features
Features such as photo reading, reading an ingredient list, entry summaries, cycle notes and the dermatologist report run only when you start them. The information that task needs (for example the photo you chose, scores from the relevant period, product and medication names) is sent over an encrypted connection through our server to Anthropic (USA), and the answer comes back to your phone.
- Our server doesn't store this content; it only counts how many tasks you ran.
- Photo analysis asks for your consent the first time and can be switched off at any time.
- Weather and sleep data from Apple Health are not sent to the AI.
- Anthropic states that it does not use data received through its commercial API to train models and deletes it after a limited period.
Optional features
- Weather: If you turn it on, your approximate location is sent only to Apple's weather service (WeatherKit) for today's entry. Your location is not stored; only humidity, UV and temperature are added to the entry.
- Apple Health: With your permission, your sleep duration and period start dates are read and added only to the encrypted records on your phone. Nothing is written to Health, and this data is never used for advertising or marketing.
- Barcode: When you scan a product, only the barcode number is sent to Open Beauty Facts to look up the product name.
- Notifications and widget: Created on your phone. The widget only shows whether you logged today and your streak.
Legal bases
- Account and subscription data: performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)).
- Error reports: legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
- Processing health-related information in AI features and transferring it abroad: your explicit consent (KVKK Arts. 6 and 9; GDPR Art. 9(2)(a)). You can withdraw it at any time by not using AI features and switching off photo analysis.
International transfers
Our account server is in the European Union (Germany). AI tasks and error reports are processed by providers in the USA, limited to the purposes above.
Retention
- Records on your phone stay until you delete them or delete your account.
- Account, usage count and subscription records are deleted when you delete your account.
- Error reports are kept for at most 90 days.
Backups
A backup you export from Settings is encrypted on your phone with a password you choose, and you decide where to save the file. We don't know your password, so we can't open your backup, and if you forget the password the backup can't be opened.
Your rights
Under KVKK Art. 11, and under the GDPR if you are in the EU, you can ask whether your data is processed, request access, correction or deletion, learn who it was shared with, object, and seek compensation.
- Delete your account and all data in the app: Profile › Settings › Delete My Account.
- Get a copy of your data: Settings › Export My Data.
- For anything else, write to destek@skinjot.com. We reply within 30 days.
Children
Skinjot is not designed for users under 16.
Changes
If we update this policy, we change the date at the top of this page.