Dermivoro - Skin AI Guide — Privacy Policy

Dermivoro - Skin AI Guide ("Dermivoro") is an educational guide for understanding skin concerns. It does not diagnose, treat or replace a clinician. This policy explains what stays on your device, what is sent when you use an AI feature, and what you can delete. It applies to the Dermivoro apps for iOS and Android and to this website. It is written from what the current app and its backend actually do.

What stays on your device

Your concerns, check-ins, photos, notes, daily diary, shelf products, chat history and reminders are stored on your device, encrypted with a key kept in the platform's secure storage (iOS Keychain or Android Keystore). Dermivoro has no user account and no cloud backup of this data. Photos are not uploaded to a photo library or to any social service. Exports, such as a visit summary PDF, are created on your device and are shared only when you choose a destination.

What is sent when you use an AI feature

AI features run only when you tap them (reading a photo, comparing check-ins, a spot check, reading a label, reviewing a routine, asking a question, transcribing a voice note, diary pattern notes, and a visit summary). Before your first AI request the app asks for your consent, and you can withdraw it at any time in Settings.

For one request the app sends only what that feature needs, over an encrypted connection to our backend at dermivoro.site:

Photo features: up to three photos and the symptom answers or note you entered for that request.
Label and routine features: a label photo or typed ingredient text, and the names of products on your shelf.
Ask: your question, up to the last eight turns of that conversation, and, if you choose, a short summary of a concern.
Voice notes: the audio you record for that note, for transcription.
Diary patterns: derived numbers such as daily ratings, never photos or free text.
Visit summary: the concern fields you choose to include.

Photos, text and the context needed for an AI answer go from your phone through Dermivoro's server to OpenAI, the third-party AI provider that writes the result. Our server transcribes voice recordings with an offline Whisper model; a transcript is sent to OpenAI only when another AI action uses that text. Our backend applies safety checks and returns the result. Dermivoro's backend does not store your photos, notes, transcripts, questions or the AI's answers; it keeps only the technical records listed below. The response is shown on your device and saved there only if you save it.

OpenAI handles content under its privacy policy. Dermivoro's processing gateway records technical timings, failure classes and usage counts, not request content or completed answers. Temporary audio and job files are removed when processing ends.

App start and hosted pages

At app start, Dermivoro checks cellular availability and whether the device can open links using the fb URL scheme. One combined result controls whether to show the first-launch rating invitation. These checks describe device capabilities, not your identity or the reason you installed the app.

The individual readings stay in process memory. When both checks pass, the hosted onboarding and paywall receive one eligibility flag with the app identifier. Hosted pages also receive the technical data needed for an ordinary web request, including a network address. The flag never unlocks paid features.

What our backend does store

A random installation identifier, the platform, and a public signing key created on your device.
An anonymous Firebase identity and App Check attestation used to confirm that requests come from a genuine copy of the app. There is no name, email or phone number.
Usage counters and request timestamps for rate limits and fair-use quotas. Network addresses are used only as hashed keys for short-window abuse limits; request logs carry the operation, a request identifier, timing and outcome, never request content.
The result of verifying your subscription or purchase with Apple or Google, including an encrypted purchase reference.
Content reports you send about an AI answer: the text you type, an excerpt of the answer you report (up to 600 characters, which can describe your skin), the answer's identifier and the reason you choose. Images are never included.
A deletion record, once you delete your data, so that a deleted installation cannot be reused.

Purchases

Subscriptions and purchases are handled by the Apple App Store or Google Play. We never see your payment details. Our backend asks the store whether your purchase is valid so that AI features can be provided. Deleting your Dermivoro data does not cancel a subscription; manage or cancel it in your App Store or Google Play subscription settings.

Analytics and crash reports

Dermivoro uses Firebase Analytics and Firebase Crashlytics to count which features are used and to fix crashes. Events and crash information contain no photos, notes, concern titles, file names or other health content. They can include technical details such as device model, operating system version and app version, and Google Analytics for Firebase derives an approximate location (country or region) from your network address. Dermivoro does not read or use your device's advertising identifier and does not track you across other companies' apps or websites.

Notifications and permissions

Camera to take photos of a skin concern or label you choose to capture.
Photo library: choosing an existing photo uses your device's photo picker, so Dermivoro receives only the photos you pick. Dermivoro does not save photos to your library.
Microphone only when you record a voice note.
Face ID, fingerprint or device passcode for the optional app lock; the result stays on your device.
Notifications for reminders you set. They are scheduled on your device and contain no health details.

You can turn any permission off in your device settings; the related feature stops working.

Sharing

We do not sell your data and we do not use it for advertising. We share information only with providers that operate the service for us: Google Firebase (identity, attestation, analytics and crash reports), OpenAI (the AI provider that receives the content needed to write an answer), our hosting provider, and Apple or Google for purchase verification. We may disclose information if the law requires it.

Retention and deletion

Data on your device stays there until you delete it or remove the app. In Settings you can export your data and delete all of it, and delete your Dermivoro installation record from our backend. You can also request deletion of the backend record from the delete-account page with the deletion code shown in Settings, or by writing to us through the support page. When the deletion completes we delete your installation record and its signing key, your anonymous sign-in account, the request-rate records for that installation, the text and excerpts of any content reports you sent (only anonymous daily counts of reports remain), and your purchase reference when no other installation of yours uses it. Two things remain after deletion: a hashed deletion record, so a deleted installation cannot be reused, and usage allowance counters, which are kept for up to 35 days as salted hashes so that deleting and reinstalling does not reset your allowance. Neither contains anything you wrote.

Until you delete it, an installation record is kept. One purchase can be used on up to three installations; when a fourth is added, an installation not seen for 30 days is detached from that purchase. If all three installations are still in use, Manage AI access in Settings lets you choose and confirm an old installation to replace. The app shows its platform and creation and last-use dates. We verify the purchase with the store before showing choices and again before moving access. The selected old installation loses access to AI features; its local journal and your store purchase are kept.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export personal data, to object to or restrict processing, and to withdraw consent. Most of your data is already under your control on your device. For anything on our backend, write to us through the support page.

Children

Dermivoro is intended for adults. It is not directed to children under 13, and we do not knowingly collect their personal information.

Health information and emergencies

Skin photos and symptom notes are sensitive health-related information. Dermivoro processes them only for the action you ask for. Dermivoro is educational and cannot diagnose a condition. If something is changing quickly, bleeding, painful, spreading with fever, or you are worried, contact a clinician or your local emergency service.

Security and international processing

We use encryption in transit, encrypted local storage, signed requests, device attestation and quotas to protect the service. No method is perfectly secure. Our providers may process data in countries other than yours.

Changes

If this policy changes, the updated version is published on this page and, when the change is material, announced in the app.