SkinLoop

Privacy

These are the commitments SkinLoop makes in its own surfaces. They are listed here in one place so they can be checked against each other.

PhotosPrivate to your SkinLoop account, encrypted in transit and at rest, access-controlled on every read, and stored apart from your logs.
Camera metadataCamera metadata, including GPS and device identifiers, is stripped before the image is stored. Only the date and time are kept, as an ordinary field.
SharingNever shared, never posted. There is no sharing surface.
Model trainingBy default, SkinLoop does not use your photos or logs to train models, and nor do the services it sends them to. Anything you send inside ChatGPT is handled by OpenAI under OpenAI's terms.
What SkinLoop readsSkinLoop does not read your photos. It files and shows them; the looking is yours.
Routine changesSkinLoop never changes your routine without you confirming it.
DeletionDeleting removes your routine, logs, change history and photos from SkinLoop and from its backups within 30 days. It cannot be undone.
PaymentsCard details never touch SkinLoop or ChatGPT. Checkout opens on the payment provider's own page.
Not medicalSkinLoop is a personal record, not a dermatologist and not a medical service. Severe, painful, spreading or persistent symptoms are worth a qualified clinician rather than an app.

Retention: your record is kept while your account exists and for up to 30 days in backups after deletion. Analytics store event names and counts only, never product names, notes, scores or images.