Last updated: June 2026
๐ Your skin data is yours. SkinStory stores your photos and diary entries on your device. We never sell your data, never show you ads, and never share your information with third parties.
SkinStory ("we", "us", "our") is a mobile application that helps you track and understand your skin through daily photos and lifestyle logging. Our contact email is hello@skinstoryapp.com.
SkinStory collects only the information you choose to provide:
By default, all your data is stored locally on your device. Your photos, notes, and diary entries never leave your phone unless you explicitly enable account sync.
If you create a SkinStory account and enable optional cloud backup, your data is synced to Firebase (Google's secure cloud infrastructure) so you can restore your history if you change devices. Firebase data is encrypted in transit and at rest.
You can delete your cloud data at any time from the app's settings screen.
Your data is used only to power SkinStory's features:
We do not use your data for advertising, profiling, or any purpose beyond the features you see in the app.
SkinStory uses the following third-party services, solely to operate the app:
We do not use any advertising SDKs, analytics platforms that track individual users, or social media trackers.
If you are located in the European Economic Area (EEA) or UK, you have the following rights regarding your personal data:
To exercise any of these rights, email us at hello@skinstoryapp.com. We will respond within 30 days.
Local data is retained on your device until you delete it or uninstall the app. If you use cloud sync, your data is retained on Firebase until you delete your account. When you delete your account, all cloud data is permanently erased within 30 days.
SkinStory is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.
We take the security of your personal data seriously. Local data is protected by your device's built-in security features. Cloud-synced data is encrypted in transit (TLS) and at rest (AES-256) on Firebase. We regularly review our security practices.
If we make significant changes to this privacy policy, we will notify you through the app before the changes take effect. The "last updated" date at the top of this page will always reflect when changes were last made.
If you have any questions, concerns, or requests regarding your privacy, please get in touch:
We're a small team and we read every email. You can expect a response within 2โ3 business days.