Skinora AI Privacy Policy

App Name

Skinora AI

Architecture

On-Device AI Engine

Contact Email

1Introduction

Welcome to Skinora AI ("we", "our", or "us"). We are committed to protecting your personal privacy and safeguarding your personal, health-related, and biometric data. This Privacy Policy explains how Skinora AI collects, uses, processes, stores, and protects your information when you use our mobile application, services, and related features.

By downloading, accessing, or using Skinora AI, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy and our Terms of Service.

2Important Medical Disclaimer (Non-Diagnostic Notice)

IMPORTANT: Skinora AI is an educational and cosmetic skin analysis tool. It is NOT a medical device, diagnostic tool, or clinical substitute for a licensed dermatologist or medical practitioner.

The AI-generated skin appearance scores, metrics, heatmaps, and coach recommendations are based on visual patterns in photographs.

Skinora AI does NOT diagnose, treat, mitigate, prevent, or cure any skin disease, lesion, melanoma, or infection.

Always consult a board-certified dermatologist for medical skin conditions, changes in moles, or abnormal skin irritations.

3Information We Collect

We collect information to deliver personalized, AI-driven cosmetic skin analyses, routines, and progress tracking:

A. Facial Imagery and Biometric Data

When you take or upload photos using the Skinora Camera / Scanner:

Ø
Facial Images: Photographs captured via your device's camera for scanning.
Ø
Biometric Landmark Coordinates: Geometric facial feature points used strictly to evaluate cosmetic parameters such as apparent hydration, pores, fine lines, redness, and acne zones.
Ø
Processing Architecture: Facial analysis is conducted using on-device machine learning models. Photos are processed locally on your device and are never sold, rented, or monetized to third parties.

B. User-Provided Information

Ø
Account Credentials: Name, email address, and encrypted passwords when you create an account via Amazon Cognito or Google Federated Sign-In.
Ø
Profile & Skin Attributes: Self-reported age, gender preference, primary skin type (e.g., Oily, Dry, Combination, Normal, Sensitive), and skincare goals.
Ø
Support & Feedback Inquiries: Messages, tickets, and email addresses submitted through the Contact Us form.

C. Automatically Collected Device & Technical Information

Ø
Device Identifiers: Device model (e.g., Motorola Edge 30), operating system version, and application performance metrics.
Ø
Routine Logs & Reminders: User-configured morning/evening alarm times, habit completion streaks, and notification preferences.

4How We Use Your Information

We utilize the collected information strictly for legitimate app functionalities:

Cosmetic Skin Analysis

Calculating your AI Skin Appearance Score and identifying surface cosmetic patterns.

Personalized Skincare Plans

Generating customized morning and evening skincare routines matching your skin type.

Progress Visualization

Tracking 30-day appearance score trends, habit streaks, and before-and-after comparisons.

Daily Habit Reminders

Delivering local notifications for morning cleansing, SPF reapplication, and nighttime repair.

Customer Support

Investigating support tickets, bug reports, and addressing user inquiries.

Security & Integrity

Preventing unauthorized account access and maintaining session authenticity.

5Facial Data & Biometric Privacy Safeguards

We enforce strict biometric privacy protections in compliance with global standards:

Ø
No Third-Party Sharing for Advertising: Your facial photographs and biometric landmarks are never shared with advertisers, data brokers, or third-party marketing firms.
Ø
Encrypted Storage: Sensitive tokens, email, and authentication keys are stored in encrypted form using Android's EncryptedSharedPreferences backed by the Android Keystore (AES256-GCM).
Ø
User Control & Deletion: You can delete your scan history, stored photos, and profile data directly in the app at any time.

6Data Storage, Security, and Retention

Ø
Local-First Security: Facial scan history and routine tracking records are primarily maintained in local on-device SQLite databases and encrypted preferences.
Ø
Retention Period: We retain your account profile information only for as long as your account remains active. If you delete your account, your data will be permanently wiped from our systems within 30 days.
Ø
Security Measures: We employ industry-standard transport layer security (TLS/HTTPS 1.3), cryptographic salt hashing, and PKCE-authenticated OAuth 2.0 authorization flows.

7Third-Party Service Providers

We integrate with trusted service providers to operate specific infrastructure:

Ø
Amazon Web Services (AWS Cognito): Secure user authentication, password hashing, and token issuance.
Ø
Google Sign-In (OAuth 2.0): Optional federated single sign-on authentication.
Ø
Android WorkManager & Notification Manager: On-device background scheduling for routine alarms.

All service providers are bound by confidentiality agreements and are prohibited from using your data for any unauthorized purpose.

8Your Rights and Choices (GDPR & CCPA Compliance)

Depending on your jurisdiction (such as the European Economic Area, UK, or California), you hold the following rights:

Ø
Right of Access: You may request a copy of the personal information we hold about you.
Ø
Right to Rectification: You can edit your personal details (name, age, skin type) anytime in the Profile section.
Ø
Right to Erasure ("Right to Be Forgotten"): You can request the complete deletion of your account, scans, and stored information.
Ø
Right to Withdraw Consent: You may revoke camera permissions or notification permissions anytime in your Android System Settings.
Ø
Do Not Sell My Personal Information: Skinora AI does not sell or monetize personal information or biometric data.

To exercise any of these rights, please contact us at contact@knapps.in

9Children's Privacy

Skinora AI is intended for individuals aged 16 and older (or the applicable age of digital consent in your country). We do not knowingly collect personal or biometric information from children under 13. If you believe a child has provided us with personal information, please contact us immediately, and we will promptly delete the data.

10Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements to our AI models, regulatory requirements, or app features. When material modifications occur, we will notify you through an in-app notice or by updating the "Last Updated" date at the top of this document. Continued use of Skinora AI following notice of changes constitutes acceptance of the revised policy.

11Contact Information

If you have any questions, concerns, feedback, or data privacy requests regarding this Privacy Policy or our practices, please contact our Data Protection Team:

Email: contact@knapps.in

Application: Skinora AI