Privacy Policy

Last updated: September 13, 2026

SkinFolio ("the app") is a personal skin-tracking journal. This page explains what information the app collects, how it's stored, and what control you have over it.

What we collect

When you create an account, we collect:

• Your name and email address
• If you sign in with Google, the name and email address Google provides during that sign-in
• If you use email/password sign-in, your password is handled by our authentication provider, Supabase. SkinFolio does not have access to your password in readable form.

When you use the app, we store what you choose to log:

• Skin condition ratings (breakout severity, redness), affected areas, and routine adherence
• Free-text notes you write (diet, triggers, etc.)
• Sleep quality and, if you enable it, menstrual cycle day tracking
• Photos you choose to attach to an entry
• Skincare products you tell the app you're using

If you turn on daily reminder notifications, we also store a push-notification subscription tied to your browser, plus the reminder hour and time zone you chose — this is what lets us send that one daily reminder, and it's removed if you turn reminders off.

If you turn on Face ID/fingerprint app lock, the device credential this creates is stored only in your device's local browser storage. It is never sent to our servers and isn't part of your account data.

Third-party services we use

• Supabase — our backend provider. It hosts your account (sign-in) and your logged data.
• Google — only if you choose "Continue with Google" to sign in; SkinFolio receives your basic profile info from Google for that purpose.
• Your browser/device's push service — if you enable daily reminders, the reminder is delivered through your browser or operating system's own notification infrastructure, the same way any website's push notifications work.

We don't use any advertising or analytics services.

How it's stored

Your data is stored in a database operated by Supabase, our backend infrastructure provider. Access to your data is restricted at the database level so that only you, authenticated as yourself, can read or write it — not other users, and not us browsing a shared table. Connections between the app, Supabase, and your browser are encrypted (HTTPS).

SkinFolio does not currently apply an automatic deletion or retention schedule. Your logged data remains in your account until you delete individual entries or delete your account.

How it's used

Your data is used for exactly one purpose: showing it back to you inside the app — your dashboard, history, trends, and the clinician-ready report you can generate from the History screen. We do not sell, rent, or share your data with advertisers or data brokers. We do not use your data to train any model.

Your controls

• Export: the app's Export Backup feature downloads all of your data as a plain JSON file, at any time.
• Delete individual entries: any log entry can be edited or deleted from the History screen.
• Delete your account: tap your avatar in the top right of the app → Delete Account. This permanently deletes your account and the SkinFolio data associated with it. This cannot be undone.

Children

SkinFolio is not directed at children under 13, and we don't knowingly collect information from anyone under that age.

Changes to this policy

If this policy changes in a way that affects how your data is handled, we'll update the date at the top of this page.

Contact