Privacy Policy

Who we are

Dermi is operated by Dermi (“Dermi”, “we”, “us”). This policy covers the Dermi iOS app and getdermi.com. Questions, requests and complaints go to support@getdermi.com, and we answer them.

What we collect

Photos you take for a scan

When you take a scan, the photo is uploaded over an encrypted connection to our processing service, analysed, and then deleted from our storage as soon as the scan finishes. It is not retained for review, it is not shown to any Dermi employee in the ordinary course of the service, and it is not used to train any model.

Two things survive the scan: a small thumbnail (roughly 256 pixels on its longest side) and the numeric results — your overall score, the seven attribute scores, the per-zone scores and the written summary. The thumbnail is what makes your photo diary and your before-and-after comparison work. If you would rather not keep it, deleting your account removes it along with everything else.

Answers you give during onboarding

Your skin type, your goals, your current routine and similar answers. We use them to shape the routine the app builds for you. They are not health records in the clinical sense and we do not treat them as a basis for any medical decision.

Account information

If you sign in with Apple, we receive an identifier and, depending on what you choose to share, an email address — which may be Apple’s private relay address. We use it to identify your account and to contact you about the service.

Technical and usage data

Basic device and app information, crash reports, and which screens are used. This is how we find bugs and decide what to fix. We do not build advertising profiles from it.

Purchases

Subscriptions are sold and billed by Apple through the App Store. Apple tells us whether your subscription is active; Apple does not give us your card number, and we never see it.

What we do not do

• We do not sell your personal information.
• We do not share your photos, thumbnails or scores with advertisers.
• We do not use your photos to train machine-learning models.
• We do not post anything on your behalf. Share images are generated on your device and go only where you send them.

Who processes your data

We use a small number of service providers to run the app: cloud hosting and database services that store your account, scores and thumbnails; an AI vision provider that analyses the scan photo; and Apple, for sign-in, notifications and billing. Each processes data only to provide its part of the service, under contract, and none of them is permitted to use your data for its own purposes. The scan photo is sent to the vision provider solely to produce your scores, and is not retained by us afterwards.

These providers may process data in the United States and other countries. Where the law requires it, transfers rely on standard contractual clauses or an equivalent safeguard.

How long we keep things

• Full-size scan photos: deleted immediately after the scan is scored.
• Thumbnails, scores and summaries: kept for as long as your account exists, because that is what your progress is made of.
• Account and onboarding answers: kept for as long as your account exists.
• Crash and diagnostic logs: kept for a short retention window and then discarded.

When you delete your account, we delete the above. Backups roll off on their own schedule, normally within 30 days.

Deleting your data

Open the app, go to Settings, and tapDelete account and all data. This removes your account, your thumbnails, your scores, your routine and your onboarding answers. There is no separate request to file and no waiting period.

Deleting your account does not cancel your subscription — Apple bills that, so cancel it in your Apple Account settings as well.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. The delete control in the app covers the main one; for anything else, write to support@getdermi.com and we will respond within the period the applicable law allows. You can also complain to your local data protection authority.

Children

Dermi is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has given us data, contact us and we will delete it.

Security

Data is encrypted in transit and at rest, access to production systems is restricted, and scan photos are deleted at the point of scoring precisely so there is less to protect. No system is perfect, and we will tell you promptly if something happens that affects you.

Changes

If we change this policy we will update the date at the top, and we will tell you in the app before any change that materially reduces your protections takes effect.