Privacy Policy
DermaSnap (the “app”) is a free, ad-free educational tool that uses machine learning to highlight visual patterns in skin photographs. This policy explains what information the app handles, where it goes, and your rights.
DermaSnap is not a medical device, not a diagnostic tool, and not a substitute for a licensed dermatologist.
Who runs DermaSnap
DermaSnap is operated by an independent individual developer, not a company. Contact: contact@dermasnap.app.
What we collect — and what we don’t
Information you actively provide
| Data | Why it’s used | Where it goes |
|---|---|---|
| Skin photos captured with the camera or chosen from your photo library | Run the inference model and show you a result | Sent over HTTPS to our inference server at ai.dermasnap.app for the duration of a single prediction request. Not retained on the server after the response is returned. |
Information collected automatically
| Data | Why it’s used | Where it goes |
|---|---|---|
Pseudonymous installation identifier (client_id, a random UUID generated on first launch) |
Distinguish unique installs from repeat installs in aggregate usage statistics | Stored on your device. Sent to Google Analytics 4 with each analytics event. Not linked to any account, name, or email. |
| Screen-view events (which screen you opened, e.g. home, camera, analysis) | Aggregate usage statistics — how many people use the app and which screens are popular | Google Analytics 4. |
Platform and app version (e.g. ios / android / web, 1.0.0) |
Help us prioritize platforms and detect version-specific issues | Google Analytics 4. |
What we do not collect
- Your name, email, phone number, address, or any account credentials. DermaSnap has no login.
- Your precise location.
- Your contacts, calendar, or microphone audio.
- Biometric identifiers.
- Health records, medical history, or any data outside the photo itself.
- Any information about other people in your photos.
Local data on your device
The app stores the following on your device only (never sent off-device):
- A scan history of the most recent 10 scans (the cropped photo + the model’s prediction). Visible in the History tab. You can delete individual scans or clear all from that tab. Uninstalling the app removes them.
- The pseudonymous
client_iddescribed above (so the same install isn’t counted as a new user every launch). - App preferences (e.g. whether you’ve dismissed the photo-tips popup).
Permissions we request
| Permission | When it’s used | If you refuse |
|---|---|---|
| Camera | Only when you tap Take a Photo | You can still upload from the photo library |
| Photo library | Only when you tap Upload from Gallery | You can still take a new photo with the camera |
The app does not request location, microphone, contacts, or background-execution permissions.
Third-party services
- Google Analytics 4 — receives the screen-view events and pseudonymous
client_iddescribed above. See Google’s privacy policy at policies.google.com/privacy. Standard GA4 retention applies (typically up to 14 months for event data). - Inference server (
ai.dermasnap.app) — operated by the same developer as the app. Receives a single skin photo per analysis, returns the model’s prediction, and does not retain the photo after the response.
The app does not load advertisements, third-party trackers, social SDKs, or analytics services other than the one listed above.
Children
DermaSnap is not directed to children under 13 and we do not knowingly collect data from them. If you are a parent or guardian and believe a child has used the app, please contact us at the address above.
Your rights
Depending on where you live, you may have rights under laws such as the EU GDPR, the Brazilian LGPD, the UK GDPR, or the California CCPA, including the right to:
- Access the data we hold about you (in practice: only the pseudonymous
client_idplus aggregate event counts in GA4). - Request deletion of your data. To delete the on-device history, use History → Clear all. To request deletion of analytics data tied to your
client_id, contact us; you can also reset yourclient_idby reinstalling the app. - Opt out of analytics by uninstalling the app.
- Lodge a complaint with your local data-protection authority (e.g. ANPD in Brazil, your national DPA in the EU).
We do not sell or share personal data for cross-context behavioral advertising.
Data security
Photos are transmitted over HTTPS (TLS) to the inference server. Local data on your device is protected by the operating system’s app-sandbox model. We do not store photos on a long-term server-side database.
International transfers
The inference server and Google Analytics may process data outside your country of residence (including in the United States and the European Union). By using the app, you consent to such transfers. Where required by law, transfers rely on standard contractual clauses or equivalent safeguards.
Changes to this policy
If this policy changes, we will update the Effective date above and post the new version at the same URL. Continued use of the app after a change indicates acceptance.
Contact
Questions or requests about this policy or your data: contact@dermasnap.app.