Clean Skin
EN /
Get the app

Legal

Privacy Policy

Effective date: July 1, 2026. Last updated: July 23, 2026.

Clean Skin is a mobile application that helps you understand the composition of your skincare products by analysing their ingredients. This Privacy Policy describes how we collect, use, store, and share your personal data. By using the app you acknowledge that you have read this Policy and understand the data-processing practices described in it.

The controller of your personal data is the Clean Skin team (the "Service", "we", "us", "our"). For any privacy-related request contact us at sc.assistant.dev@icloud.com.

1. Personal data we collect

We collect only what the Service needs to work.

You provide to us:

Please do not include third parties' personal data, or unnecessary sensitive information about yourself, in search queries or assistant messages.

Health-related data. Your skin profile, skin-analysis results, and the content of your assistant messages may qualify as health-related data. We process such data solely to provide the Service's features and only on the basis of your explicit consent, which you give by filling in your profile, sending a message, or starting an analysis. You may withdraw consent at any time by deleting the relevant data or your account.

Collected automatically by the Service:

Collected automatically by third-party SDKs used by the Service:

We do not use facial images for identity or biometric recognition. A photo is used only for a one-off skin assessment (or ingredient recognition), processed transiently, and not retained by us after the result is produced.

We do not sell your personal data and do not disclose it to third parties in exchange for money or other consideration, or for their own marketing or advertising purposes.

2. Why we process your data

We process your data for the following purposes:

Legal bases are determined under applicable data protection law and, where applicable, Articles 6 and 9(2)(a) of the EU GDPR — for health-related data we rely on your explicit consent.

If a new purpose for processing arises, we will inform you by updating this Policy before we start processing data for that purpose.

3. Who we share data with

We share only what is necessary, and only with the following providers:

We work only with providers that have assured us they apply appropriate technical and organisational data-protection measures. Where a provider acts as an independent controller (for example, Apple and Google for authentication, Apple for billing), its processing is governed by its own privacy policy, and we are not responsible for processing such providers carry out for their own purposes outside our instructions.

If we are involved in a merger, acquisition, or sale of assets, your data may be transferred to the successor; we will notify you of the change of controller and of any choices you may have.

4. International transfers

We provide the Service to users in different countries. Data processed by Google and Apple, and by the Service's infrastructure, may be transferred to and stored on servers outside your country, including the United States and the European Union, where data-protection laws may differ from those of your country. Such transfers rely on legally recognised safeguards, including the policies and contractual commitments of those providers. By using the Service, you consent to such transfers.

5. Retention and deletion

To delete your account use the in-app option or email sc.assistant.dev@icloud.com.

6. Your rights

Subject to applicable law (including, where applicable, the EU GDPR), you have the right to:

To exercise any right, email sc.assistant.dev@icloud.com. For security, we may first ask you to verify your identity (for example, by writing from the email address linked to your account) — this protects against fraudulent requests to disclose someone else's data. We may decline manifestly unfounded or excessively repetitive requests to the extent permitted by law, and will explain why.

We will respond within a reasonable time, typically within 30 days. For complex requests this period may be extended; we will inform you of the extension and its reason. Before lodging a complaint with a supervisory authority, we encourage you to contact us first — most issues can be resolved directly and faster.

7. Security

We take reasonable technical and organisational measures appropriate to the risks involved; however, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. If a breach affects you, we will notify you and, where required, the competent authority within the time frames prescribed by applicable law.

8. Children

Clean Skin is not directed at children under 13 (or the minimum age of digital consent in your country — 16 in most EU jurisdictions). We do not knowingly collect personal data from children. Holders of parental responsibility are responsible for preventing children from providing personal data without the required consent. If you believe a child has provided us with data without such consent, contact us and we will delete it as quickly as possible.

9. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date reflects the latest change. Material changes will be announced inside the app at least 14 days before taking effect. We encourage you to review the current version periodically. Your continued use of the app after changes take effect constitutes acceptance of the updated Policy.

10. Contact

Clean Skin
Email: sc.assistant.dev@icloud.com