Last updated: September 30, 2026
This Privacy Policy explains what SKINFIELD LLC ("Skinfield", "we", "us" or "our") collects when you use the Skinfield website, mobile app, membership service, and physical skin-analysis kits, why we collect it, who we share it with, and the choices and rights you have. Each kit contains two adhesive skin-analysis patches. Each patch is referred to from this point forward as an "Analyzer." This Policy applies to consumers in the United States.
You are handing us photographs of your face and details about your skin, and some of what you tell us is more sensitive than the rest, such as a treatment you are on, or a pregnancy. We have tried to write this so you can actually tell what happens to it.
We collect what we need to analyze your skin, build your routine, provide historical comparisons, ship your Analyzer kits, and bill you, and not more.
Your face photographs are used to produce your own analysis. They are never used to train AI models, ours or anyone else's.
We do not identify you by your face. We do not create or store a faceprint, and we run no facial recognition.
We do not sell your personal information, we do not share it for cross-context behavioral advertising, and there are no advertising trackers on our site or in our app.
We never receive your full card number. Our payment processor handles that.
You can ask us to show you, correct or delete everything we hold about you, by emailing care@skinfield.com.
SKINFIELD LLC, 8 The Green, Suite B, Dover, DE 19901, United States. We are the controller of the personal information described here. For any privacy question or request, email care@skinfield.com.
This table summarizes the personal information we collect, where it comes from, why we use it, and the categories of service providers that receive it. The sections that follow provide additional detail.
| Category and examples | Source | Purpose | Disclosed to |
|---|---|---|---|
| Account and contact informationName, email, phone, date of birth and account identifier | You and our authentication provider | Create and authenticate your account, confirm eligibility, communicate with you and provide support | Authentication, hosting and infrastructure providers |
| Payment, order and shipping informationBilling status, address, purchases and shipment records | You, Stripe and fulfilment providers | Process payments and subscriptions, ship Analyzer kits, provide tracking, receipts and refunds, and meet tax and accounting obligations | Stripe, eHub, USPS and fulfilment partners |
| Skin profile and health-related informationSensitivities, treatments, pregnancy or breastfeeding and selected concerns | You | Operate safety checks and personalize your analysis, routine, product verdicts and Specialist responses | Hosting, database, AI and image-analysis providers listed in Section 6 |
| PhotographsThree face photographs with the T-Zone Analyzer in place, one photograph showing both Analyzers after removal, product photographs and Specialist attachments | You and your device camera when you choose to use it | Calibrate and analyze face photographs, analyze used Analyzer surfaces, derive cosmetic skin readings, read product labels, answer questions and compare current skin condition with earlier analyses | Amazon Web Services, Modal, Google Gemini and OpenAI, as applicable |
| Derived resultsSkin readings, scores, trends, notes, routines and product verdicts | Generated from information and photographs you provide | Provide results, recommendations, historical comparisons and the Specialist service | Hosting, database and AI providers listed in Section 6 |
| Approximate location and environmental informationZIP-derived city-scale location and available current and forecast weather, UV and air quality | The ZIP code associated with your account and Open-Meteo | Adapt analysis and routine information to available current and forecast environmental conditions for your approximate location | Open-Meteo and providers processing the analysis |
| Creator program applicationsName, email, phone, social media links, answers about your content, your typed signature, and whether you agreed to receive text messages | You, when you apply to the Skinfield Creator Program | Review your application, communicate with you about it and about the program, including by text message if you agreed, and pay creators we accept | Hosting and infrastructure providers, and Twilio for text messages |
| Technical data and communicationsIP address, device and app version, logs, push token, support and feature requests | Your browser or device and your communications with us | Security, authentication, rate limiting, debugging, notifications, support and service improvement | Hosting, infrastructure and notification providers listed in Section 6 |
Account and contact information
Name, email, phone, date of birth and account identifier
Payment, order and shipping information
Billing status, address, purchases and shipment records
Skin profile and health-related information
Sensitivities, treatments, pregnancy or breastfeeding and selected concerns
Photographs
Three face photographs with the T-Zone Analyzer in place, one photograph showing both Analyzers after removal, product photographs and Specialist attachments
Derived results
Skin readings, scores, trends, notes, routines and product verdicts
Approximate location and environmental information
ZIP-derived city-scale location and available current and forecast weather, UV and air quality
Creator program applications
Name, email, phone, social media links, answers about your content, your typed signature, and whether you agreed to receive text messages
Technical data and communications
IP address, device and app version, logs, push token, support and feature requests
Your first and last name, email address, phone number, date of birth, and how you heard about us. We ask for your date of birth for two reasons: our membership is 18+, and skin changes with age, so it is an input to your analysis.
Until your payment succeeds, none of this reaches our database. While you are moving through the signup questions, your answers are held in your own browser (in session storage, which is cleared when you close the tab) and passed to our payment processor to attach to the purchase. If you abandon signup, we have no record of you.
Your card is entered on our payment processor's own hosted page and is processed by them. We never receive or store your full card number, expiry or security code. From them we receive confirmation that a payment succeeded or failed, the amount, and identifiers we use to match the payment to your account.
Your shipping address is collected at checkout and stored by us, both as your current address and as a fixed record of where each paid kit was actually sent.
Your sign-in credentials are held by our authentication provider, not by us. We store an identifier that links your account to theirs, plus your email. In your profile you can also record your name, gender, date of birth, language, and a ZIP code.
Your shipping address and ZIP code tell us where to deliver your kits. For environmental context, we use the ZIP code associated with your account to derive an approximate point at city scale, rather than your doorstep, and use that point to obtain available current and forecast temperature, humidity, UV and air-quality information when an analysis runs. Your device's precise location is never collected: the app does not ask for location permission, and it does not have it.
Ingredients or substances you are sensitive to, how sensitive your skin is, and treatments you are on, recorded by their US trade names, and including whether you are pregnant or breastfeeding.
We treat this as sensitive information. We ask for it for one reason: it is the safety gate that stops your routine, your product verdicts and the Specialist from putting an ingredient in front of you that is wrong for you. It is used to give you the Service and for nothing else.
Three photographs of your face from right, front and left views, taken while the T-Zone Analyzer remains attached to your forehead; one photograph showing both Analyzers together after removal, with the surfaces that contacted your skin facing upward; photographs of skincare products you add to your shelf; and any photograph you choose to attach to a Specialist message. The camera is used only when you open a capture or attach a photograph. The app never captures in the background.
Your skin readings and the written note beside each one, including readings relating to surface oiliness and the appearance and apparent size of pores; your overall skin score and trend over time; your skin tone reading; marked-up versions of your face and Analyzer photographs; your selected concerns; your routine and its calendar; and the verdict for each product on your shelf.
When you use the site or the app we automatically receive your IP address, device and app version, and standard server log entries with timestamps and the pages or endpoints requested. We keep short-lived counters keyed to your account to enforce rate limits. If you turn on notifications, we store the push token your device issues.
If you send us a feature request through the app, we store that conversation so we can act on it.
This is the part most people want to be specific about, so here it is in full.
Where they go. Your device uploads the requested face and Analyzer photographs directly to our private cloud storage using a one-time link that expires in fifteen minutes. The storage is not public: every read is authorized per request and expires. The photographs are stored in the United States.
What happens to them. The photographs are sent to our image-analysis service and AI model providers to produce your cosmetic skin analysis. The three face photographs show right, front and left views while the T-Zone Analyzer remains on your forehead. The color-reference palette on the outward-facing side of that Analyzer is used to calibrate the images for visual analysis. After skin contact, you remove both Analyzers and photograph them together with the surfaces that contacted your skin facing upward. That image is analyzed to derive readings such as surface oiliness and the appearance and apparent size of pores. We combine these results with information in your profile, prior analyses, and available current and forecast weather, UV and air-quality information for your approximate location to produce your analysis and recommendations. Once your analysis is built, the photographs stay attached to it so you can look back at it and so the next analysis can compare against it.
They are not used to train AI. Not by us, and not by our model providers. We use them under terms that prohibit training on the content we send. Your face and Analyzer photographs improve your own analysis and nothing else.
We do not identify you by your face. We do not create, store or compare a faceprint, face template or other biometric identifier, we run no facial recognition, and we do not use your photographs to identify you or anyone else. If we ever intend to change that, we will tell you first and ask for your consent before doing it, as state biometric privacy laws require.
Face detection while you take them. While you take the photographs, the app detects the position and angle of your face to guide you into frame. This runs only on your device, is used in the moment and is not stored or sent to us or anyone else.
Who can see them. Access to face and Analyzer photographs is limited to the small number of Skinfield personnel who need it to operate or debug the Service, under confidentiality obligations, and to the service providers named below acting on our instructions. We do not publish the photographs, and we do not show them to other members.
Deleting them. Delete your account in the app, under Profile, and your face and Analyzer photographs are deleted right away. You can also ask us at care@skinfield.com to delete them, along with the rest of your data, as described under "How Long We Keep It" and "Your Rights".
We use your information to:
run your skin analysis by processing the requested face and Analyzer photographs and produce your results, notes, trend and visualizations;
select your concerns and design and update your routine, taking your sensitivities, treatments and life stage into account;
judge products on your shelf, and answer a "Check Before You Buy" question;
answer you in the AI Skin Specialist chat, with your own readings and profile as context;
obtain available current and forecast local weather, UV and air-quality information so that your analysis and routine reflect the environmental conditions your skin is in;
take payment, manage your membership, and send receipts;
print a label, ship your kit, and let you track it;
send you service messages: receipts, renewal and shipping notices, and, if you have turned them on, push notifications;
answer your support messages;
keep the Service secure and working: authentication, rate limiting, debugging, fraud prevention;
understand in aggregate how the Service is used, so we can improve it; and
meet our legal and accounting obligations.
We do not use your information for advertising, we do not profile you for marketing, and we make no decision about you that produces a legal or similarly significant effect.
Producing your analysis, routine and Specialist answers means sending some of your information to AI providers acting as our processors.
For an analysis: your three face photographs with the T-Zone Analyzer in place and the photograph showing both Analyzers after removal, and, so the readings can be interpreted properly, your age, sensitivities and treatments, available environmental conditions for your approximate location, and your previous analysis as a reference.
For the Specialist: your first name, age, sensitivities, treatments and life stage, your latest readings and their notes, your routine, and the products on your shelf, together with the messages in that conversation.
For a product you add: the photograph of it, so its label can be read and matched to our catalog.
Specialist conversations are not stored in our database. The messages live on your device and are sent with each turn so that the answer has the thread as context; any photograph you attach is stored in your account's area of our storage. Our AI providers process what we send in order to return an answer to us, are contractually barred from training on it, and retain it only briefly for abuse monitoring under their own terms.
Our product catalog is enriched using a web search service. That service receives product names and brands, never anything about you.
We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share it only with service providers who process it on our instructions and are contractually bound to protect it, and in the limited legal situations at the end of this section.
Payments. Stripe handles checkout, card processing, subscriptions, invoices, receipts, refunds, and the billing portal where you update your card. They receive your name, email, phone, billing and shipping address and payment details, and act as an independent controller for their own fraud-prevention and legal purposes.
Accounts and sign-in. Clerk creates and authenticates your account. Receives your name and email.
Hosting and infrastructure. Vercel (application hosting), Neon (database), Amazon Web Services (photograph storage and delivery), Upstash (rate limiting), Inngest (background processing of your analysis).
AI and image analysis. Modal (the computer-vision service that measures your photographs), Google (Gemini, for scores, notes and product imagery), OpenAI (the Specialist, and reading a product label), Perplexity (product catalog research, using product data only, nothing about you).
Weather. Open-Meteo receives an approximate coordinate for your area to return forecast, UV and air-quality data. It receives no identifying information about you.
Shipping. eHub and USPS, and our fulfilment partners receive your name, shipping address and phone number so your kit can be labelled, mailed and tracked.
Notifications. Expo, together with Apple and Google, delivers push notifications to your device if you have turned them on.
Text messages. Twilio delivers text messages (SMS) to your phone if you have agreed to receive them. It receives your phone number and the content of the messages we send you.
We may also disclose information if the law requires it, in response to a valid legal process, to protect our rights or someone's safety, or in connection with a merger, acquisition or sale of assets. In that case we will tell you before your information becomes subject to a different privacy policy.
If you agree to receive text messages from Skinfield, for example when you apply to the Skinfield Creator Program, we use your mobile number only to send you the messages you agreed to. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Text message opt-in data and consent will not be shared with any third parties, other than the providers that deliver the messages for us.
Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. You can also reach us at care@skinfield.com.
We use cookies and browser storage only to make the Service work:
a session cookie set by our authentication provider, so you stay signed in;
session storage during signup, holding your answers until you pay, cleared when you close the tab; and
cookies set by our payment processor on its own checkout page, for fraud prevention.
There are no advertising cookies, no analytics or marketing pixels, and no third-party trackers on our site or in our app. Because we do not track you across sites, there is nothing for a Global Privacy Control or "Do Not Track" signal to opt you out of. We still honor an opt-out preference signal if we ever have anything to apply it to.
The mobile app stores your sign-in session securely on your device and does not use advertising identifiers.
While your membership is active. We keep your profile, analyses and their photographs, shelf and routine for as long as your membership is active because historical comparison is a core part of the Service and a trend needs the earlier analyses behind it.
After you cancel. Cancellation stops future charges, but your paid access continues until the end of the membership term already paid for. After that, we keep your profile, analyses and photographs, shelf and routine so that you can return and continue comparing your current skin condition with your history, until you delete your account or ask us to delete it.
Deleting your account. You can delete your account at any time in the app, under Profile. This cancels your membership immediately and deletes your analyses and their face and Analyzer photographs right away. You can also ask us at care@skinfield.com, and we delete your account, photographs, analyses, profile, shelf and routine from our active systems within 30 days of a verified request and instruct the relevant service providers to honor the request where applicable.
Backups. Copies may remain temporarily in encrypted archived or backup systems until they are automatically overwritten under our normal backup cycle, and never longer than applicable law permits. They are not used for ordinary business purposes or restored to active systems except for disaster recovery; if a backup is restored, the deletion request is reapplied.
What survives a deletion. Order and payment records, which we must keep for tax and accounting purposes, typically seven years, and anything we are required to retain by law or need to resolve a dispute. These are kept separately, in the smallest form that satisfies the obligation.
Short-lived data. Server logs and rate-limit counters expire on their own, within days.
Your data is encrypted in transit and at rest. Photographs sit in private storage with no public access. Every read is authorized per request and the link expires. Every endpoint checks who you are before it answers, and answers only about you. Access by our own people is limited to those who need it to run the Service. We never receive your card number.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the authorities as the law requires.
Depending on where you live, state consumer privacy laws may give you some or all of the following rights. We extend the rights listed below to every US customer regardless of state.
Know what we have collected about you, and why.
Get a copy of it, in a portable format.
Correct anything inaccurate.
Delete it.
Limit how we use sensitive information. We already use it only to provide the Service you asked for.
Opt out of the sale or sharing of your personal information, and of profiling. We do none of these, so there is nothing to opt out of.
Withdraw consent, where we asked for it.
Not be discriminated against for exercising any of these rights. Your price and your Service do not change because you asked.
How to exercise them. Email care@skinfield.com from the address on your account, or write to us at the postal address below. We will verify it is you, usually by confirming control of that email, and answer within 45 days, extending once by a further 45 days if we need to and telling you why. Some things you can do yourself in the app: edit your name, gender, date of birth, ZIP, address, sensitivities and treatments in Profile, remove products from your shelf, cancel your membership, and turn notifications off in your device settings.
An authorized agent may make a request for you, with proof that you authorized them.
If we say no, we will tell you why, and you may appeal by replying to that message. We will answer an appeal within 45 days. If we deny it, you may complain to your state Attorney General.
This section is our Consumer Health Data Privacy Notice. It applies to health-related information connected or reasonably capable of being connected to you, including information that may be covered by Washington's My Health My Data Act, Nevada law and similar state laws. It should be read together with the rest of this Privacy Policy.
We collect skin sensitivities, sensitivity level, treatments, pregnancy or breastfeeding status, selected skin concerns, the three face photographs taken with the T-Zone Analyzer in place, the photograph showing both Analyzers after removal, and information derived from those materials, including readings relating to surface oiliness and the appearance and apparent size of pores, skin score, skin tone reading, notes, trends and recommendations. Specialist messages and product information may also be consumer health data when they reveal or are used to infer information about your health or skin condition.
We collect this information directly from you when you answer questions, complete the requested photography steps during an analysis, add products, or communicate with the Specialist. We also derive readings, scores, trends, notes and recommendations from the information and photographs you provide. We do not obtain consumer health data about you from data brokers.
We use consumer health data to provide the Service you request: calibrate and analyze your face photographs, analyze the photographed surfaces of the used Analyzers, combine those results with your profile, history and location-based environmental conditions, compare your current skin condition with earlier analyses, operate safety checks, personalize your routine and product verdicts, and answer Specialist questions. The information is processed through our app and private cloud systems and, where necessary, by the service providers described in Section 6. We do not use it for advertising or unrelated profiling. Retention follows Section 8.
We do not sell consumer health data. We disclose it only as necessary to provide the Service to hosting, database, cloud-storage, AI and image-analysis providers acting on our instructions, as described in Section 6, or when disclosure is required by law. The categories disclosed may include the profile information, photographs and derived results described above. We do not share consumer health data with Skinfield affiliates, and we do not permit third parties to collect it over time across unrelated websites or online services when you use Skinfield.
During onboarding, before collecting health-related information, we present a short in-product explanation, provide a direct link to this Consumer Health Data Privacy Notice, and ask for your affirmative consent. The consent flow identifies the categories collected and the purposes of collection and processing, explains how to withdraw consent, and provides access to the categories of providers involved. Where applicable law requires separate consent for a disclosure that is not necessary to provide the Service you requested, we will request that consent separately before the disclosure.
You may ask whether we collect, use or disclose consumer health data about you; request access to or correction of it; request a list of the third parties or affiliates to which your consumer health data was disclosed; withdraw consent from future collection or disclosure; and request deletion. Email care@skinfield.com from the address associated with your account. We will verify your identity and process the request within the time required by applicable law. Withdrawing consent may prevent us from providing features that require this information.
We will not collect additional categories of consumer health data, use it for a new purpose, or disclose it to a new category of recipient without first providing the notice and obtaining consent required by applicable law. We describe material-change notifications in Section 14. The effective date of this Notice is the Last updated date at the top of this Privacy Policy.
Skinfield is not a healthcare provider and is not covered by HIPAA. Information you record in the Service is not a medical record.
The Service is for adults. You must be 18 or older to buy a membership, and we do not knowingly collect information from anyone under 18. If we learn that we have, we delete it and close the account. If you believe a child has given us information, tell us at care@skinfield.com and we will remove it.
We store your information in the United States. Skinfield's team is based in Israel, and personnel there may access it to operate and support the Service, under the same confidentiality and security obligations. Some of our service providers may process information in other countries. Wherever it is processed, this Policy and appropriate safeguards continue to apply.
We will update this Policy as the Service changes. The date at the top always reflects the current version. If a change is material, such as a new category of information, a new purpose, or a new kind of sharing, we will tell you by email before it takes effect, and where the law requires consent we will ask for it rather than assume it.
Questions, or a privacy request? Email us at care@skinfield.com.
SKINFIELD LLC
Address: 8 The Green, Suite B, Dover, DE 19901, United States
Email: care@skinfield.com