Privacy Policy

Dermly is built around one principle: your face is yours. This policy explains exactly what happens to your photos and data when you use the Dermly iOS app and this website. The short version: we store no photos, we store no results on our servers, we have no accounts, and we sell nothing about you.

Who we are

Dermly is operated by Levin Schwab, Germany (the "operator", "we"). You can reach us anytime at levin.schwab@gmx.de.

What happens to your selfie

When you run a skin scan, the app first asks for your explicit consent. Only after you agree, your selfie is sent over an encrypted connection to our server, which forwards it to Anthropic's Claude API for a one-time AI analysis. The analysis produces cosmetic scores and routine suggestions, which are returned to your device.

• We do not store your photo on our servers. It is processed in memory and discarded.
• We do not store your analysis results on our servers. Results live only on your device.
• We never log image data. Server logs contain only technical metadata such as response status and timing.
• Your photos are not used to train any AI model, by us or by Anthropic under our API agreement.
• We never sell, rent, or share your photos or results with advertisers or data brokers.

No accounts, no email collection

Dermly has no sign-up, no login, and no account system. We do not collect your name, email address, or contact details through the app. If you email us for support, we use your email only to reply to you.

Data stored on your device

Your quiz answers, scan results, routine checklist, and progress history are stored locally on your iPhone. You can delete all of it at any time from the app settings or by deleting the app.

Third parties we rely on

• Anthropic (USA): processes your selfie for the one-time AI analysis described above. Anthropic acts as a processor for this analysis and does not train on this data under our API agreement.
• Apple (USA): handles all App Store downloads and in-app purchases. We never see your payment details.
• Vercel (USA): hosts this website and our analysis server.
• Supabase: hosts the recommendation service described below. Apple also delivers recommendation icons and handles App Store visits.

Recommendations for our other apps

In Settings, Dermly can fetch up to three recommendations for our other apps. The choices depend on the app you are using, App Store availability and iOS compatibility. They do not use your photos, skin analysis, scans, quiz answers or routine. App icons load from Apple’s image servers. Opening a recommendation takes you to the App Store with a campaign label identifying the source app and placement, never a person.

We count qualified views and successful opens in aggregate. Our service stores daily counts with the source app, recommended app, placement, configuration revision and optional presentation variant. It does not store an account, advertising identifier, device identifier, persistent visitor identifier or personal profile. No photos, scans, analysis results or other private content are sent to the recommendation service. These counts cannot tell us who installed an app.

Supabase hosts the recommendation service. Network requests necessarily expose an IP address to the hosting provider for delivery and security; our aggregate counter does not store it. See Supabase’s privacy policy. Apple processes icon requests and App Store visits under Apple’s privacy policy.

Legal basis and your rights (GDPR)

For users in the European Union, the legal basis for processing your selfie is your consent (Art. 6(1)(a) GDPR), given explicitly in the app before any photo leaves your device. Photos and analysis results are not retained on our servers. Recommendation counts contain no persistent user identifier and cannot be linked back to your installation:

• Right to withdraw consent: simply stop using the scan feature. No previously sent photo is retained anywhere.
• Right to erasure: delete the app or use the delete option in settings. Your locally saved scans and results are removed from your device.
• Data minimization: we process the minimum needed for the analysis, once, and keep none of it.
• Right to lodge a complaint: you may contact your local data protection authority at any time.

Children

Dermly is intended for users aged 13 and older. The analysis refuses photos that appear to show young children. If you are under 16 and live in the European Union, please ask a parent or guardian for permission before using the photo analysis.

Changes to this policy

If we change how data is handled, we will update this page and the effective date above before the change takes effect.

Contact

Questions about privacy? Email levin.schwab@gmx.de.