Privacy Policy

This policy applies to Dermiva, the AI skincare app and related website. The app named in the App Store and Google Play listing is Dermiva. For privacy questions or requests, contact us at amorriscodes@icloud.com.

• Dermiva opens the camera only when you start a scan or choose a photo.
• A face scan is analyzed only after you give consent in the app.
• Dermiva uses face images to estimate visible skin signals for skincare guidance, not to identify you or verify your identity.
• Routine reminders and scan reminder timing are scheduled on your device.
• Dermiva does not sell personal data and does not use scan images for third-party advertising.
• You can withdraw biometric or face-analysis consent and delete account data from Settings.

Account and sign-in information. We collect the email address, display name, account identifier, authentication provider information, and related account data needed to create, secure, and maintain your Dermiva account. If you sign in with Apple or Google, the sign-in provider may send us basic profile information according to the choices you make with that provider.

Skin profile and routine context. We collect the skincare goals, skin context, sensitivities, product preferences, routine timing, lifestyle context, and other onboarding answers that you choose to provide. This may include sensitive skin-related information where applicable law treats it as sensitive.

Face photos, scan data, and derived results. When you start a scan or choose a selfie from your photo library, Dermiva processes the image to estimate visible skin signals such as oiliness, pores, redness, texture, acne, dark spots, eye-area appearance, and fine lines. We may also process image quality signals, image dimensions, face-region coordinates, scan timestamps, skin scores, generated reports, and progress history.

Routine, product, and chat activity. We collect data needed to run app features, including routine steps, routine completions, product selections, product search activity, chat messages you send to the skin assistant, assistant responses, and support requests.

Subscription and purchase status. If you subscribe, we receive purchase entitlement information, product identifiers, subscription status, renewal status, and store account signals from Apple, Google, and our purchase infrastructure. We do not receive your full payment card number.

Device, usage, diagnostics, and website analytics. We may collect device type, operating system, app version, language, approximate region from network information, IP address, API request logs, crash or error data, performance data, and website analytics such as page views and referrers. We use this data to operate, protect, and improve Dermiva.

• Directly from you when you create an account, complete onboarding, scan your face, choose products, use chat, or contact support.
• From your device when you grant permissions such as camera, photo library, or notifications.
• Automatically through app and website logs, diagnostics, and analytics.
• From service providers such as authentication, app-store billing, cloud hosting, analytics, and AI processing providers.

• Authenticate users and keep accounts secure.
• Analyze user-initiated face scans and generate skin reports.
• Create and adjust AM/PM skincare routines, product suggestions, and progress tracking.
• Provide the in-app AI skin assistant and preserve chat context where needed.
• Schedule local reminders and route users back to relevant app screens.
• Process subscriptions, verify entitlements, restore purchases, and prevent billing abuse.
• Debug errors, monitor performance, prevent fraud or misuse, and secure the service.
• Respond to support, deletion, access, correction, or privacy requests.
• Comply with legal obligations and enforce our Terms of Service.

Dermiva asks for consent before analyzing face photos. You can withdraw consent in Settings. If consent is withdrawn, scans are blocked until consent is granted again, but previously generated data remains in your account until you delete it or request deletion.

Dermiva does not use face scans for facial recognition, identity verification, surveillance, or advertising. We do not intentionally create a faceprint for identifying a person. Scan images are used to provide skincare analysis, reports, routines, progress tracking, quality checks, security, and service improvement consistent with this policy.

Camera. Used only when you choose to take a guided face scan.

Photo library. Used only when you choose a selfie from your library for analysis.

Notifications. Used for local routine and scan reminders if you enable them. Reminder scheduling is handled on your device.

Dermiva does not request background camera access, contacts, precise location, or microphone access for skincare analysis.

We share information only as needed to provide, secure, support, and improve Dermiva, or when required by law. Service providers are expected to protect information at least as described in this policy and to process it only for the services they provide to Dermiva.

• Cloud hosting, database, backend, storage, and authentication providers that run the app.
• AI and image-analysis providers that process scan images, skin context, and prompts needed to generate reports, routines, or assistant responses.
• Apple App Store, Google Play, and purchase infrastructure providers that process payments, subscriptions, entitlements, refunds, and restore requests.
• Apple and Google sign-in providers when you choose those sign-in methods.
• Analytics, diagnostics, and security providers that help us understand website usage, app reliability, abuse, and performance.
• Legal, compliance, and safety parties if disclosure is necessary to comply with law, enforce terms, protect users, or respond to valid legal requests.

We do not sell personal data. We do not share scan images with third-party advertisers.

Our website (dermiva.xyz) uses Google Analytics 4, a service provided by Google, to understand how visitors use the site so we can improve it. This website analytics is separate from the in-app face scans described above.

Google Analytics uses cookies and similar identifiers and may collect information such as your approximate location (derived from your IP address), device and browser type, referring pages, and the pages you view. Google processes this information on our behalf; see Google’s privacy policy for how Google handles it.

You can manage or block cookies through your browser settings, and you can opt out of Google Analytics across all websites using Google’s opt-out browser add-on.

We keep account data, scan results, routines, product selections, and related history while your account is active so Dermiva can show progress over time and personalize recommendations. We keep logs, security records, and support records only as long as reasonably needed for operations, security, fraud prevention, dispute handling, legal compliance, and backup integrity.

You can delete account data in the app from Profile, Settings, Privacy and account, Delete account data. Account deletion removes your backend profile, scan records, generated skin reports, routines, routine history, and consent records associated with your Dermiva account. Some records may remain temporarily in backups or logs before routine deletion, and we may retain limited records where required for legal, security, fraud-prevention, or billing reasons.

If you cannot access the app, use our account and data deletion page to request deletion help. Deleting your Dermiva account does not automatically cancel a subscription managed by Apple or Google; you must cancel subscriptions in the App Store or Google Play.

We use administrative, technical, and organizational safeguards designed to protect personal data, including authenticated API access, secure transport, access controls, and provider security controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Dermiva and its service providers may process information in countries other than where you live. Where required, we rely on appropriate legal mechanisms for cross-border processing and take steps designed to protect information consistent with this policy.

• You can grant or deny camera, photo, and notification permissions in your device settings.
• You can withdraw face-analysis consent in Dermiva Settings.
• You can update display name and routine reminder settings in Dermiva Settings.
• You can request access, correction, deletion, or a copy of personal data by contacting us.
• Depending on where you live, you may also have rights to object, restrict processing, appeal a privacy decision, or lodge a complaint with a regulator.

Dermiva is not directed to children under 13, and it is intended only for users who meet the minimum age required in their region. We do not knowingly collect personal data from children where parental consent is required. If you believe a child provided data to Dermiva, contact us so we can review and delete it where appropriate.

We may update this policy as Dermiva evolves. If we make material changes, we will update the last updated date and, where required, provide additional notice or request consent.

Questions, privacy requests, or deletion requests can be sent to amorriscodes@icloud.com.