Privacy
Policy
Skinzy works on photographs of your face, so how we handle them is the part of this policy that actually matters. The short version: your photo is analysed and discarded, not stored.
Last updated: 31 August 2026
1. What happens to your photo
The answer we would want to read ourselves.
When you submit a scan, your photograph is held in the server's memory only for as long as the analysis takes — a few seconds — and is then discarded when the request ends.
Your photograph is not written to disk, not saved in any database, and not shared with any third party. We keep no copy of it. Once you have your result, the image is gone from our side; if you want to keep it, save it on your own device.
2. Your camera stays on your device
If you scan using your camera rather than uploading a file, your browser asks your permission first, and you can decline or revoke it at any time in your browser settings.
While the camera preview is running, Skinzy checks framing, lighting, and focus entirely inside your browser, on your own device. Those live camera frames are never uploaded. Only the single still image captured at the moment of the scan is sent to our server for analysis.
3. What we collect
Your scan image — as described above, processed in memory and discarded. This has not changed: creating an account did not change how your photo itself is handled.
Your account information — Skinzy now requires a sign-in to scan. We use Google as the sign-in provider, and receive your email address, display name, and profile photo URL from Google when you first sign in. We store these against your account.
The results derived from your scan — zone scores, confidence, your flagged concerns, and the recommended routine are returned to your browser and also saved against your account, so you can see your scan history and track progress over time. Your subscription tier (free or paid) is stored the same way.
Your routine tracking — which steps of your recommended routine you've marked complete, and on which days, so your streak and progress sync across your devices.
Standard technical request data — our hosting providers keep ordinary server logs that can include your IP address, browser type, and the time of the request. These are used to keep the service running and to diagnose errors, not to build a profile of you.
Anything you send us by email — if you contact us, we keep that correspondence so we can help you.
4. What we do not do
Skinzy sets no cookies of its own and runs no analytics, no advertising pixels, and no third-party trackers. Signing in stores an authentication session in your browser or app so you stay signed in — that session is what lets the service work, not a tracker.
We do not sell, rent, or trade your personal data. We do not use your photograph to train our models. We never store your selfie itself, with or without an account — see section 1.
5. Who processes data on our behalf
A cloud hosting provider runs the analysis backend, and Vercel hosts this website. Both handle the request traffic described in section 3.
Supabase provides our authentication and database — it is where your account, scan results, and routine tracking described in section 3 are actually stored, under row-level security that restricts each account to its own data.
Google is our sign-in provider. When you sign in, Google authenticates you and shares the account details in section 3 with us; Google's own privacy policy governs what Google itself does with your Google account.
Razorpay will process payments once paid plans go live. Razorpay collects and handles your payment details directly under its own privacy policy — we never see or store your card, UPI, or bank details.
6. Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask us what personal data we hold about you, ask us to correct it, ask us to erase it, and raise a grievance about how we have handled it.
In practice, what we hold about you is your account information, your scan results and routine tracking, and any email you have sent us — all described in section 3. Your scan photos themselves are never among it, because we never store them. You can delete your account and everything tied to it at any time from your profile settings; doing so permanently removes your account information, scan history, and routine tracking from our database.
To make a request, or to raise a grievance with the person responsible for data protection at Skinzy, email useskinzy@gmail.com. We aim to respond within 2–3 business days. Skinzy is operated by Yash Ghansham Thakare, an individual based in India.
7. Children
Skinzy is not intended for children under 18. We do not knowingly process a child's facial image without the consent of a parent or legal guardian. If you believe a child has used Skinzy without that consent, please contact us and we will address it.
8. Changes to this policy
Skinzy is in beta and its architecture is still changing. This revision is exactly the update the previous version of this page promised: Skinzy now has user accounts, stores scan results and routine tracking, and this section describes that honestly. Your scan photo itself is the one thing that has never changed — see section 1. If we introduce anything further that changes what we retain, we will update this policy before that feature launches and change the "last updated" date at the top of this page.