What we hold, and what we don't.
Skin Memory is a personal record of your skincare. That means we hold information about your skin, and we take that seriously. This page explains what we collect, why, how long we keep it, and how to get it back or get rid of it. We've written it to be read, if anything here is unclear, ask us at contact@myskinmemory.app and we'll fix the wording.
- You can use the app without an account. Without one, your record stays on your device. With one, we hold your account details and the parts of your record described below.
- If you joined the waitlist earlier, we hold your email address, the date you consented, and the version of this policy you agreed to.
- We don't sell your data. We don't use it for advertising. We don't train AI models on it.
- You can export everything, and you can delete everything. Both are free.
- We only ask for information a feature actually uses.
Who we are
Skin Memory is an independent project operated by its founder, Amna Akhtar. We are not yet incorporated as a company; when we are, this page will name it and give its registered address.
For any privacy question, contact contact@myskinmemory.app. We answer every one.
We are the data controller for the information described here. Where we use other companies to provide the service, they act as processors on our instructions, they're listed in section 7.
What's live today
The app is available for Android, downloaded as an APK from this website. You can use it without an account.
The waitlist is closed. If you joined it earlier, we hold your email address, the date and time you gave consent, the version of this policy you agreed to, and how you arrived at the page.
We use it for one thing: emailing you about the launch. Not newsletters, not offers from anyone else, nothing you didn't ask for.
You can leave at any time by clicking unsubscribe in any email or writing to contact@myskinmemory.app. When you leave, we delete your address.
Everything from section 3 onward describes the app and takes effect when you create an account.
What we collect when you use the app
Your account. An email address (or phone number, if you use that instead) and a password, or your Google or Apple account if you sign in that way. Used only to create your account and sign you back in. We ask you to confirm you're 16 or older when you create an account, and we don't ask for your date of birth.
Your profile. Skin type, sensitivity, concerns and known sensitivities, all optional, all skippable, each shown with the reason we ask.
Your record. The products you add, the changes you make, dates, goals, notes about how your skin felt, and any external factors you choose to record. This is the product. Without an account it stays on your device. With an account, your products and changes are also saved to it, so they can follow you to a new phone. Skin reactions you log stay on your device.
Photos. Optional. You can photograph a product, its front and its ingredient list, and choose a profile picture. The app reads the text in those two photos on your phone to suggest a name and ingredients, which you check and edit; nothing is uploaded for that. The app says on screen that photos stay on this device. There is no skin-photo timeline.
Consent records. Which permissions you gave, when, which version of this policy applied, and when you withdrew any of them.
Technical information. Sign-in times, device and session records, and error reports. These carry identifiers and status codes, never your products, notes, symptoms, or anything about your skin.
What we don't collect
Your full date of birth. Your precise location. Your contacts. Your browsing outside our site. Any information about you from third parties. Whether you're pregnant or nursing, or using a prescription treatment: the app doesn't ask, and has no feature that would use it.
Why we're allowed to hold it
Depending on where you live, different laws describe this differently. In plain terms:
| What | Why we can hold it |
|---|---|
| Account details | To provide the service you asked for |
| Your record | To provide the service you asked for |
| Analytics | Your consent, which you can withdraw |
| Security and audit logs | Our legitimate interest in keeping the service safe, and legal obligations |
Information about your skin may count as health-related data under the law where you live. Where it does, we rely on your explicit consent, and you can withdraw it. Withdrawing it means we can no longer provide that part of the service.
Your permissions
Three separate switches. Each works on its own, and each can be turned off without closing your account:
Core service. Required. Storing your record so the app functions.
Analytics. Anonymous counts of how features are used. Turning it off changes nothing about the app.
Research. Not currently used. It's listed so it can never be switched on quietly. If we ever want to use it, we'll explain exactly what for and ask again.
Who else touches your data
We use these companies to run the service. They process data on our instructions.
- Supabase — database, authentication, file storage, and the serverless functions that run the app's backend.
- Vercel — hosting for this website.
- Google Analytics — website usage analytics, only if you consent. It sets cookies in your browser and sends data such as pages viewed, device and browser details, and approximate location to Google. We never send anything about your skin.
- Google Fonts — loads this website's typefaces from Google's servers, so Google receives your IP address and browser details each time a page loads. This happens whether or not you accept analytics.
- Open Beauty Facts — a public product database, used only when you choose "Search by name" in the app.
If you use "Search by name" when adding a product, the text you type is sent to Open Beauty Facts, a public product database, to find a match.
We do not sell your data. We do not share it with advertisers, brands, insurers, employers, or data brokers. Nobody pays us to see it.
We will disclose information if the law requires it. If that happens and we're allowed to tell you, we will.
Where your data is held
The database that stores your account and waitlist information is hosted in Ireland (EU). Some of the other companies listed above (for example, hosting, fonts and analytics) may process data outside the EU.
How long we keep things
| What | How long |
|---|---|
| Waitlist email | Until you unsubscribe, or until we launch and you don't join |
| Account and record | While your account exists |
| Photos | Kept on your device only; we hold no copy. Delete them in the app or by deleting the app. |
| Consent records | While your account exists. They are deleted with it. |
| Backups | Backup copies expire on a schedule after you delete your account. The app shows you the exact date when deletion finishes. |
| Record that a deletion happened | Kept, with no skincare information in it: a request ID, the dates and status, and an internal account ID |
Your rights
Wherever you live, you can:
- See what we hold.
- Export your record, free, from the Profile tab, without asking anyone.
- Correct anything wrong. Your record keeps corrections visible rather than overwriting history, so you can see what changed and when.
- Delete everything. Free, and it means deletion, not a disabled account.
- Withdraw any permission without losing your account.
- Complain to your data protection authority if you think we've got this wrong. We'd rather you told us first at contact@myskinmemory.app so we can fix it.
Depending on where you live you may also have the right to object to certain processing, or to ask us to restrict it. Write to us and we'll explain what applies.
How to delete. In the app, open the Profile tab and choose Delete account. For your security you sign in again first, using your password, Google or Apple, or a code we email you. You can also write to contact@myskinmemory.app.
What happens. Deleting removes your account, your shelf, your change log and your profile from our systems, and clears everything saved on your device, including photos. Your Google or Apple account is separate and stays with them. We keep only a record that a deletion happened, with none of your skincare information in it. You see the progress in the app until it is done.
How long it takes. Deleting from our live systems takes a few minutes at most, and you should keep the app open until it finishes. Backup copies then expire on a schedule, and the app shows the exact date when deletion completes. Exporting from the app is immediate.
Keeping it safe
Product photos stay on your device and are not uploaded. Every user's rows are isolated at the database level, and we test that with real accounts before every release.
If something goes wrong and your data is affected, we'll tell you in plain language and tell the regulator where required.
Support
Our support team can explain how the product works, where a piece of information came from, and how to export or delete. They cannot interpret your symptoms, tell you what caused a reaction, or recommend treatment, that isn't what this product does. We hold no product photos.
Age
You need to be at least 16, or older if that's the minimum where you live. We check before you create an account, so we don't collect anything from someone who turns out to be too young.
If you believe someone underage has an account, tell us at contact@myskinmemory.app and we'll remove it.
Artificial intelligence
Skin Memory does not send your record to an AI service. No model decides anything about your safety, and nothing you type is read for risk. Product details are always yours to confirm, and you can always type products in yourself.
We do not train AI models on your record. We do not let anyone else do so.
Cookies
We use what's necessary to keep you signed in and to keep the service secure. That storage is always on.
Google Fonts. This website loads its typefaces from Google, so your browser makes a request to Google's servers on every page view, and Google receives your IP address. It does not depend on your cookie choice.
Google Analytics. Only if you accept analytics in the banner, Google Analytics sets cookies (named _ga and _ga_ followed by an ID) and sends usage data to Google, such as pages viewed, device and browser details, and approximate location, so we can count visits. No information about your skin is attached. Until you accept, nothing is requested from Google Analytics.
You can change or withdraw your choice at any time with "Analytics choice" in the footer; declining removes the analytics cookies. We do not use advertising cookies.
Changes
If we change this policy in a way that affects you, we'll tell you before it takes effect and, where it matters, ask again rather than assume. Previous versions stay available so you can see what changed.
Contact
If you'd prefer to write to a postal address, ask and we'll provide one.
Skin Memory gives general information based on your own records. It is not medical advice and cannot tell you what caused a skin reaction. If something concerns you, talk to a doctor or pharmacist.