SkinPassport Privacy Policy

Last updated 16 August 2026.

SkinPassport reads the ingredient list on a skincare product and tells you what is in it, against the skin profile you set up. This page explains what that involves, what leaves your phone, and what you can delete.

The short version

Most of the app runs on your phone. Ingredient analysis and scoring are local and work with no connection at all. What we hold on a server is there so your profile and history survive a new phone.

We do not sell your data. We do not share it with advertisers. There is no advertising in the app.

Your account

The app creates an account for you the first time you open it. You are not asked to sign up and you are not asked for an email address. The account is anonymous: it is an identifier and nothing else, and it exists so your data can belong to something.

You can later attach an email address or an Apple ID to that same account, if you want your history to follow you to a new phone. That is your choice, and the app works fully without it.

What we store

Your skin profile. Name (if you enter one), skin type, sensitivity, acne level, concerns, goals, ingredients you want to avoid, skin conditions, and allergies you list.

This is the most sensitive thing we hold, and we treat it that way. None of it is a diagnosis and we never ask for medical records, but skin conditions and allergies are health-adjacent information. It is stored so your profile follows you between devices. It is readable only by your own account.

Your scans. The ingredient lists you scanned or typed, the resulting score, the product name where we could identify it, and when it happened.

Your kits. The groupings of products you create, and their names.

A count of label reads. A number, so the free allowance works. It is not a record of what you read.

Photographs

When you photograph an ingredient label, the app tries to read it on your phone first, using the text recognition built into iOS. Nothing leaves your phone on that path.

If the on-device read fails, and only then, the photograph is sent to our server and passed to Anthropic's Claude API, which reads the text and returns it.

The photograph is not stored. It arrives in the request, goes to the reader, and is gone when the response is written. Neither we nor Anthropic keeps it as part of this process, and it is never used to train a model. What is kept is the ingredient list that came back, saved to your scan history.

Photographs are also never sent anywhere when the on-device read succeeds, which is most of the time.

What we never do

We do not record photographs, the contents of your skin profile, or anything you type about your own skin in any analytics or diagnostic system.

If product analytics are enabled in a future version, they will record how the app is used, such as whether a scan succeeded and where people leave the onboarding flow, along with product names typed into the search box when nothing was found, which tells us what to add to the catalog. They will not record your profile, your photographs, or your ingredient lists. This page will be updated before any of that is turned on.

Product data from other sources

Some product and ingredient information comes from Open Beauty Facts, an open database published under the Open Database License. That is data about products, not about you, and nothing about you is ever sent to them.

Deleting everything

There is a "Delete my account" button in the Profile tab. It removes your profile, your scans, your kits and your account itself from our servers, and clears the data held on your phone.

It is immediate and it cannot be undone. There is no recovery step and no grace period, because a delete that keeps a copy is not a delete.

Children

SkinPassport is not intended for children under 13, and we do not knowingly hold data about them.

Where the data lives

Data is stored with Supabase. Label reading is performed by Anthropic. Both are processors acting on our instructions, and neither is permitted to use your data for their own purposes.

Changes

If this page changes in a way that affects what we collect or what we do with it, the app will say so rather than relying on you to re-read this page.

Contact

Questions about your data, or a request to delete it, can go to privacy@skinpassportapp.com.