SkinJourney — Privacy Policy
Version: privacy-v1-early-access Effective: 22 August 2026 Applies to: the SkinJourney mobile application and the SkinJourney practitioner dashboard, during Early Access.
1. Who we are
SkinJourney is operated by Elad Levi, an individual based in Israel, who is the controller of the personal data described in this policy. Contact for anything in this policy, including exercising your rights: privacy@skinjourneys.com.
2. What we collect
You give us:
| Account | Email address and password (handled by our authentication provider — we never see your password) |
| Profile | Name, age, skin type, focus area, preferred capture frequency |
| Photographs | Facial and skin photographs you take in the app, with the angle and the date and time each was taken |
| Routines | Skincare routines and the log of what you completed and when |
| Appointments | Appointments you or your practitioner record |
Created by using the service:
| AI descriptions | Automated text descriptions generated from pairs of your photographs |
| Consent records | Which version of which document you accepted, and when |
| Practitioner connection | Which practitioner you are connected to, the status of that connection, and when it started |
| Clinical notes | Notes your practitioner writes about your visits and treatment. Your practitioner writes these; you do not |
| Usage events | Records of reaching certain points in the app, used to understand how the pilot is being used |
| Error reports | Technical diagnostics when the app crashes or misbehaves |
We do not collect payment information, because Early Access is free and there is no payment path in the product.
3. Where it is stored
Your account data and your photographs are stored with Supabase, in the European Union (Ireland). Photographs are held in a private storage bucket that is not publicly readable.
4. Your photographs leave our systems in one specific case — read this
When an AI description is generated, two of your photographs are transmitted to Anthropic, our AI provider, as image data. Not a summary, not a measurement — the photographs themselves.
This is the most important sentence in this policy, so we are not burying it: your facial photographs are sent to a third party when you use that feature.
What that means in practice:
- Under our current arrangement with Anthropic, submitted information may be retained by Anthropic for up to approximately 30 days.
- During that period, a limited number of authorised Anthropic personnel may be able to access submitted information for safety, security and abuse- prevention purposes.
- We have not configured zero-data-retention with Anthropic. If we do, we will say so here and update this policy.
- Anthropic processing may take place outside the European Union.
It also happens when your practitioner opens your weekly summary — and you are not the one who triggers that. The practitioner dashboard builds a short weekly summary of your record. Producing it sends Anthropic: how many photographs you took that week and on which dates, how long it has been since your last one, whether an appointment is pending or was cancelled, and the text of up to twelve previous automated descriptions. If a new pair of photographs is eligible, that same process can generate a new description — which means two of your photographs can be transmitted because your practitioner opened your record, not because you pressed anything.
If you do not want that, disconnect from your practitioner (§5) or delete your photographs. There is no separate switch for it today, and we would rather say so than imply one exists.
5. Who else can see your information
Your practitioner. If you connect to a practitioner using their invite code, that practitioner can see: your photographs and their history, your profile, your routines and routine logs, your appointments, and the AI descriptions generated for you. They can also write clinical notes about you. You choose whether to connect, and you can disconnect at any time from Settings. Disconnecting removes their access going forward.
Service providers. Supabase (database, storage and authentication, EU), Anthropic (AI descriptions, see §4), Sentry (error diagnostics), and Expo (push notifications). Each processes information only to run the service.
We do not sell your information and we do not use it for advertising.
6. Why we are allowed to process it
Your photographs and the health-related information around them are sensitive. We process them on the basis of your explicit consent, which we ask for separately, before your first photograph, and again whenever the disclosure text materially changes. You can withdraw consent by deleting your account or your photographs.
Account and security data is processed because it is necessary to provide a service you asked for.
7. Deletion — exactly what happens
You can delete your account from Settings. When you do, we delete:
- your profile, your photographs (both the records and the stored image files), your appointments, your practitioner connection, and your consent records;
- your skincare routines and your routine logs;
- your Early Access entitlement and the usage events tied to your account;
- your clinical notes, practitioner digests and AI descriptions, which are removed together with the records they are attached to;
- your login account itself.
Deletion is immediate and cannot be undone. There is no grace period and no recovery window. We cannot restore your photographs or your account afterwards, so please be certain before confirming.
What we cannot delete instantly, and will not pretend we can:
- Photographs already sent to Anthropic remain subject to that provider's retention period (see §4). We cannot reach into their systems and erase them on demand.
- Routine backups may briefly retain deleted content until they age out.
8. How long we keep things
While your account exists, we keep your information so the product works — the whole point is a photographic history over time. When you delete, §7 applies. We do not currently operate an automatic expiry on old photographs.
9. Your rights
You can ask us to give you a copy of your information, correct it, delete it, or restrict what we do with it. Some of this you can do yourself in the app; for anything else, email privacy@skinjourneys.com. We will respond within 30 days.
If you are in the EU or the EEA, you also have the right to complain to your national data protection authority.
10. Age
SkinJourney is for adults, 18 and over. The app asks your age at sign-up and blocks anyone under 18. We do not knowingly collect information — including photographs — from anyone under 18. If we learn that an account belongs to someone under 18, we will delete the account and its data.
11. Security
Access to your photographs is restricted by database access rules, storage is private, and traffic is encrypted in transit. We think that is a reasonable standard for a pilot of this size.
We are not going to tell you your data is "completely secure", because no system is, and a promise we cannot keep is worse than an honest description. We have not completed an independent security audit.
12. International processing
Your data is stored in the EU (Ireland) and administered from Israel. Israel has been recognised by the European Commission as providing an adequate level of data protection. Transmission to Anthropic (§4) may involve processing outside the EU.
13. Changes
If we change this policy materially, we publish a new version with a new version identifier and ask you to accept it again. We record which version you accepted and when.
14. Contact
privacy@skinjourneys.com