EpiScan Privacy Policy Effective Date: September 4, 2026
This Privacy Policy explains how EpiScan ("EpiScan," "we," "us," "our") collects, uses, and safeguards your information when you use our mobile application available on the Apple App Store (the "Service"). By using the Service, you agree to the practices described in this policy.
1.2. Face and Image Data. EpiScan lets you take (or upload from your photo library) a photo of your face for cosmetic skin analysis, and photos of skincare product labels for fit checks. These photos are processed as described in Section 3. We do not use facial images for identification, authentication, or facial recognition of any kind — only to assess the visible, cosmetic condition of your skin. We do not collect face geometry, faceprints, biometric templates, or any other biometric identifiers.
1.2a. Assistant Messages. When you chat with the in-app assistant ("Epi"), we process the text of your messages together with a summary of your skin profile (scores, focus areas, quiz answers) in order to generate replies. Your face photos, name, and email are never included in this data.
1.3. Skin Quiz Answers. During onboarding you answer questions about your skin type, goals, habits, sensitivities, and preferences. We store these answers to personalize your plan and product recommendations.
1.4. Scan Results. We store the results of your skin analyses — numeric scores (for example hydration, texture, clarity), short written summaries, and your personalized routine — so you can track progress over time. Stored results do not include your face photos.
1.5. Usage and Device Data. We generate a random identifier for your app installation so your scan history can be linked to your device and account. We may also process basic technical information (such as device type and app version) needed to operate the Service.
1.6. Purchase Information. Subscriptions are processed by Apple through the App Store. We never receive or store your payment card details. We may receive confirmation of your subscription status from Apple in order to unlock premium features.
Provide the Service — analyze the cosmetic condition of your skin, generate your skin score and personalized skincare routine, recommend products suited to your skin, and track your progress across weekly scans. Maintain your account — keep you signed in and sync your scan history to your account. Improve the Service — understand how the app is used so we can fix problems and improve features. Face data is never used for this purpose. Communicate with you — respond to support requests and send important service notices. EpiScan provides cosmetic guidance only. It is not a medical device and does not diagnose, treat, or prevent any medical condition.
3.1. What we collect. The only face data EpiScan collects is the photograph of your face that you choose to take with the camera or select from your photo library for a skin scan. We do not collect or generate face geometry, facial landmarks, faceprints, biometric templates, or any data that could be used to identify you by your face.
3.2. Consent. Face photos are captured only when you choose to take a scan. Before the camera opens for the first time, the app shows a consent screen that explains exactly what happens to your photo and who receives it; the scan cannot start until you tap "I Agree". The camera is never accessed without your action, and you can use parts of the app without taking a face photo.
3.3. Use. Your face photo is used for one purpose only: producing a cosmetic assessment of the visible condition of your skin (for example hydration, texture, clarity, redness) and the personalized routine built from it. It is never used for identification, authentication, facial recognition, advertising, profiling, or to train AI models.
3.4. Sharing with a third-party AI service (Google Gemini). To produce your analysis, your face photo and your skin-quiz answers are transmitted, encrypted in transit (TLS), to Google's Gemini AI service, accessed through a secure proxy operated by our infrastructure provider, Rork. Google processes the image transiently to generate the analysis. Under Google's API terms for this service, Google does not use your photo to train its models and does not retain it beyond what is needed to return the result. Your name, email address, and account identifiers are never sent with your photo. Google and Rork are contractually required to protect your data to a standard that is the same as or equal to the protections described in this policy. Face data is not shared with any other third party.
3.5. Storage. We do not store your face photos on our servers or in our database. Your photo passes through the proxy only for the moments required to produce your analysis and is not written to storage there. The copy of your photo shown inside the app (for example, on your results screen and progress timeline) is stored only on your device, in the app's private storage.
3.6. Retention. Because face photos are never stored on our servers, we retain no face data after your analysis completes (typically a few seconds). Photos held on your device remain until you delete the associated scan, delete your account in the app, or delete the app. Derived, non-identifying results (numeric scores and text summaries, which do not include your photo) are retained as described in Section 7.
3.7. Deletion. You can delete all face photos held on your device at any time by deleting your account in the app (Profile → Delete Account), which removes all local scan photos and all server-side account data, or by deleting the app. Because no face photos exist on our servers, there is nothing further to delete.
3.8. No Sale or Marketing Use. We never sell, license, or share your face data with third parties for marketing, advertising, or any purpose other than providing your analysis as described above.