Privacy Policy

1. Overview

Dermenda (“we”, “us”, “our”) is a clinical skincare tracking app. We treat your skin photos, logs, and profile data as sensitive health-adjacent information. This Privacy Policy explains what we collect, how we use it, how we keep it safe, and the choices you have.

2. What we collect

• Account information: email address, display name, authentication tokens, and subscription status.
• Skin profile: skin type, concerns, age range, sex, cycle-tracking preferences, and other onboarding answers you provide.
• Photos and media: selfies, face-map captures, and any images you upload for analysis.
• Daily logs: sleep, stress, water intake, diet notes, cycle day, product usage, voice-journal transcripts, and any other lifestyle entries.
• Product scans: barcodes, ingredient lists, likelihood scores, and retailer/product details you scan or save.
• Usage data: app interactions, feature usage, error logs, and device type (no advertising identifiers).
• Approximate location: only when you explicitly enable location-based weather; we read weather from your approximate coordinates and do not store precise GPS.
• Payment data: handled entirely by Stripe. We do not store full card numbers.

3. How we use your data

• Run AI photo analysis, breakout forecasting, trigger detection, and routine recommendations.
• Generate your personal insights, trends, and dermatologist-ready reports.
• Process subscriptions and manage your Pro access.
• Improve model accuracy and fix bugs (using aggregated or de-identified data where possible).
• Send you optional reminders or digests if you opt in.

4. Data storage and security

Your data is stored in encrypted cloud databases and object storage. Photos are encrypted at rest and transmitted over TLS. Access is restricted to authenticated users and a small set of authorized administrators. We do not sell your data and we do not use it for advertising.

5. Sharing your data

• Service providers: Stripe for payments, cloud hosting/infrastructure, and AI inference providers under strict confidentiality.
• Dermatologist share links: only when you explicitly generate a share link from the app. Shared reports expire after 7 days and are protected by a unique token.
• Legal requirements: only if required by law, court order, or to protect our rights and users.

6. Your rights

You can access, update, or delete most data from Settings. You may also request a full data export or account deletion by contacting us. Deleting your account removes your profile, photos, logs, scans, and routines from active systems.

7. Cookies and local storage

We use minimal cookies and browser local storage for authentication, session state, and UI preferences. We do not use third-party advertising cookies.

8. Children

Dermenda is not intended for users under 13. We do not knowingly collect data from children. If you believe a child has signed up, contact us and we will delete the account.

9. Changes to this policy

We may update this Privacy Policy as features evolve. We will notify you of material changes in the app or by email. Continued use after changes means you accept the updated policy.

10. Contact us

Questions or data requests? Email us at privacy@dermenda.com.