Privacy
Policy
Skinzy works on photographs of your face, so how we handle them is the part of this policy that actually matters. The short version: your photo is analysed and discarded, not stored.
Last updated: 15 October 2026
1. What happens to your photo
The answer we would want to read ourselves.
When you submit a scan, your photograph is held in the server's memory only for as long as the analysis takes — a few seconds — and is then discarded when the request ends.
Your photograph is not written to disk, not saved in any database, and not shared with any third party. We keep no copy of it. Once you have your result, the image is gone from our side; if you want to keep it, save it on your own device.
2. Your camera stays on your device
If you scan using your camera rather than uploading a file, your browser asks your permission first, and you can decline or revoke it at any time in your browser settings.
While the camera preview is running, Skinzy checks framing, lighting, and focus entirely inside your browser, on your own device. Those live camera frames are never uploaded. Only the single still image captured at the moment of the scan is sent to our server for analysis.
3. What we collect
Your scan image — as described above, processed in memory and discarded. This has not changed: creating an account did not change how your photo itself is handled.
Your account information — Skinzy lets you try a scan without an account, and requires a sign-in to save one. We use Google as the sign-in provider, and receive your email address, display name, and profile photo URL from Google when you first sign in. We store these against your account. If you scan without signing in, we never receive any of this.
The results derived from your scan — zone scores, confidence, your flagged concerns, and the recommended routine are returned to your browser and also saved against your account, so you can see your scan history and track progress over time. Your subscription tier (free or paid) is stored the same way. If you scan without signing in, the same results are recorded without your account details or anything else that identifies you or your device, and are deleted once they are older than 180 days.
Your purchase details — if you buy Skinzy Plus, we keep the payment reference, amount, and date, so we can sort things out quickly and reach out to you if a payment fails or your access doesn't activate. Your card, UPI, and bank details never reach us.
Your routine tracking — which steps of your recommended routine you've marked complete, and on which days, so your streak and progress sync across your devices.
Your referrals, if you use them — every account has a referral link. If you sign up through someone's link, we record that your account came from theirs, and whether the referral has counted yet. If you share your link, we record the same for each person who signs up with it. If you follow someone's link but the referral can't count — for example because you already had an account — we keep a record of that attempt too, with the reason it didn't count, so we can answer questions about referrals that didn't go through. This is what lets us count referrals and grant the free weeks; we never show your friends' names, email addresses, or scan results to you, or yours to them — only how many have signed up and how many have scanned.
Standard technical request data — our hosting providers keep ordinary server logs that can include your IP address, browser type, and the time of the request. These are used to keep the service running and to diagnose errors, not to build a profile of you.
Anything you send us by email — if you contact us, we keep that correspondence so we can help you.
4. What we do not do
Skinzy sets no cookies of its own and runs no analytics, no advertising pixels, and no third-party trackers — with or without an account. Signing in does not change that. It stores an authentication session in your browser or app so you stay signed in, and that session is what lets the service work: it is never used to follow you across other sites, to profile you, or to build an audience for anyone to advertise to.
If you arrive on a referral link, your browser also holds the referral code from that link until you sign in, so we know who to credit. It is stored the same way and for the same kind of reason as the sign-in session: it is a short code you asked for by following the link, it is sent nowhere except to us when you sign in, it is deleted as soon as it is used, and it expires by itself after 30 days. It identifies the person who invited you — never you, and never anything you do on other sites. If you dismiss the referral card on our home page, your browser remembers that too, so it stops reappearing.
We do not sell, rent, or trade your personal data. We do not use your photograph to train our models. We never store your selfie itself, with or without an account — see section 1.
We use Cloudflare as our DNS and CDN provider. Because all traffic to this site passes through it, Cloudflare's server-side logs let us tell real visitors from bots without placing any script, pixel, or cookie on this site — see how Cloudflare collects this at the edge.
5. Who processes data on our behalf
A cloud hosting provider runs the analysis backend, and Vercel hosts this website. Both handle the request traffic described in section 3.
Cloudflare sits in front of both as our DNS and CDN provider, proxying and TLS-terminating requests before they reach either — see section 4 for what its logs are, and are not, used for.
Supabase provides our authentication and database — it is where your account, scan results, and routine tracking described in section 3 are actually stored, under row-level security that restricts each account to its own data.
Google is our sign-in provider. When you sign in, Google authenticates you and shares the account details in section 3 with us; Google's own privacy policy governs what Google itself does with your Google account.
Razorpay processes payments for Skinzy Plus. Razorpay collects and handles your payment details directly under its own privacy policy — we never see or store your card, UPI, or bank details.
6. Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask us what personal data we hold about you, ask us to correct it, ask us to erase it, and raise a grievance about how we have handled it.
In practice, what we hold about you is your account information, your scan results and routine tracking, and any email you have sent us — all described in section 3. Your scan photos themselves are never among it, because we never store them. You can delete your account and everything tied to it at any time from your profile settings; doing so permanently removes your account information, scan history, and routine tracking from our database.
To make a request, or to raise a grievance with the person responsible for data protection at Skinzy, email [email protected]. We aim to respond within 2–3 business days. Skinzy is operated by Yash Ghansham Thakare, an individual based in India.
7. Children
Skinzy is not intended for children under 18. We do not knowingly process a child's facial image without the consent of a parent or legal guardian. If you believe a child has used Skinzy without that consent, please contact us and we will address it.
8. Changes to this policy
Skinzy is in beta and its architecture is still changing. This revision is exactly the update the previous version of this page promised: Skinzy now has user accounts, stores scan results and routine tracking, and this section describes that honestly. Your scan photo itself is the one thing that has never changed — see section 1. If we introduce anything further that changes what we retain, we will update this policy before that feature launches and change the "last updated" date at the top of this page.