Who is responsible
Skintrail is operated by Cosmic Sandwich, LLC. This policy covers the Skintrail iPhone app and this website. Privacy questions and requests can be sent to support@skintrail.app.
Your photos and journal
Skintrail stores your photos, capture dates, notes, routines and routine history in the app. Where private iCloud sync is configured and available, journal records can also synchronize through your private Apple iCloud database. Local storage and device backups are separate from synchronization; your Apple settings can affect backups.
Skintrail does not operate a public photo feed or a developer-hosted photo-upload service. Photos and journal notes are not sent to our analytics or subscription providers. Exporting or sharing files is an action you choose; the destination you select then handles those files under its own rules.
Face guidance and personal details
Camera guidance detects face landmarks on your iPhone. Eye-position coordinates are retained with photo records for alignment, including in those records’ configured storage. They are not used to establish your identity or sent to analytics.
Onboarding stores the choices you enter, including age, sex, skin type and selected skin, hair or health concerns, on your device. Those answers are not sent to PostHog or RevenueCat. You can edit them in My Preferences. The app is intended for adults aged 18 and over.
Products and external requests
Search uses a bundled product catalog. Product images and link imports can make requests to the source websites. Those websites receive information needed for a network request, including your IP address, even though the app does not send browser cookies with these requests. Imported product metadata and artwork are stored in the local product library. Product references attached to journal routines follow the journal’s storage settings.
Usage analytics
The current app uses PostHog to understand app use. Collection starts automatically in production builds. It includes actions such as opening the app, saving a photo, completing an onboarding step, managing routines and interacting with a paywall. It can also include counts of journal entries, capture angles, streak milestones, routine categories, app and OS versions, and purchase outcomes.
When a bundled catalog product is tagged in a routine, the event can include its catalog ID, name, brand, kind and skin or hair category. A treatment or medication tag can reveal health-related interests or usage. Editable notes, personal questionnaire answers, local product details and photo files are excluded.
Events use a persistent random installation ID. This is a pseudonymous identifier, not a guarantee of anonymity. The same ID is used for RevenueCat subscription activity and can connect those records through the configured integration. PostHog is configured with a US ingestion endpoint, without session recording, advertising identifiers, person profiles or location enrichment. Network providers still process connection information to deliver requests.
The current build does not provide an in-app analytics opt-out. Contact us about your privacy rights or to request deletion of eligible records. PostHog’s privacy information explains its own practices.
Purchases and subscriptions
Apple processes App Store payments. RevenueCat processes the installation identifier, transaction and entitlement information needed to provide, restore and manage paid access. RevenueCat does not receive your selfies, questionnaire answers or journal notes. Purchase events may also be used for app analytics. RevenueCat’s privacy information provides further details.
This website
This website does not include advertising pixels, analytics scripts, tracking cookies or an account system. Your hosting provider processes requests needed to serve the website and may keep technical access or security logs under its configured retention settings. Contact links open your email app; sending a message gives us the address and content you choose to include.
Retention, deletion and exports
Your journal remains stored until you delete it or remove its local storage. Settings provides journal export and deletion. Deleting journal data also clears onboarding answers through that action; edits remain available in My Preferences. Deletion may take time to propagate through configured iCloud sync. Copies you have exported, shared or backed up are separate.
Journal deletion does not itself erase historical analytics or transaction records, or cancel an App Store subscription. Eligible service records can be addressed through a privacy request. Records needed for purchases, fraud prevention, legal obligations or resolving a dispute may need to be retained.
Analytics, support-mail and hosting-log retention periods must be finalized with the operator’s production settings before this policy is published. We will describe those periods or retention criteria in the published policy.
Your rights and requests
Depending on where you live, you may have rights to access, correct or delete personal data, receive a copy, restrict or object to certain processing, withdraw consent where processing relies on consent, or complain to a data-protection authority. Email support@skintrail.app with your request. We may need information that lets us locate and verify the relevant records; please do not send face photos or medical details in your initial message.
Regional lawful bases, any required health-data consent, international-transfer safeguards, processor terms and local representative details must be settled for the release territories. This preview does not claim that the app’s current collection is compliant in every country.
Updates
We will update this page when the app’s data practices change and revise the date above. Material changes will be communicated as required. The in-app policy should always describe the version you are using.