Privacy Policy for AcneAI

Last Updated: August 10, 2025

AcneAI (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains in detail what data we collect, how we use it, how long we store it, the reasons for storing it, who we share it with, and your rights as a user.

This policy applies to all use of the AcneAI mobile application and related services.

1. Information We Collect

We collect the following categories of information when you use AcneAI:

A. Account & Profile Information

• Required: Email address, password (hashed), name, and age.
• Optional: Skin type, skin sensitivity, skincare goals, and lifestyle preferences.
• Purpose: Create and manage your account, personalize recommendations, and sync your data across devices.

B. Face & Image Data

We understand that facial images and related analysis data are highly sensitive, and we treat them with the highest level of security and transparency.

• Skin Photos (Face Data): Selfies you capture for AI skin analysis.
• Purpose: We store your photos and associated AI analysis to allow you to track skincare progress over time, view historical comparisons, and receive personalized skincare recommendations. This enables long-term progress tracking that would not be possible without storing past images.
• Processing: All face images are resized and compressed on your device before upload. They are securely stored in your user account in our database and processed only by our AI service to generate analysis results.
• Retention: Face photos and related analysis data are stored for 12 months from the date of upload. This duration is chosen to provide meaningful, seasonal, and year-over-year skin progress comparisons while avoiding unnecessary long-term storage. You may manually delete any photo at any time, request deletion of all photos, or extend storage if desired. All face data is deleted automatically after 12 months unless you extend it.
• Deletion: All face data is permanently deleted from our servers within 30 days of account deletion or upon your request.