Privacy Policy for Dermy

Last Updated: February 16, 2026

Quick Summary: We do not sell your personal information for money. Most profile and history data is stored locally on your device. Some data may be processed by third-party providers for AI analysis, ads, analytics, authentication, and weather services.

1. Introduction

Dermy ("Dermy," "we," "our," or "us") provides AI-powered skincare insights for informational and wellness purposes only. This Privacy Policy explains what information we collect, how we use it, when we share it, and your rights.

By using Dermy (the "App"), you agree to this Privacy Policy.

2. Scope and Region-Specific Rights

This policy is intended for users worldwide, including users in the United States, United Kingdom, European Economic Area (EEA), and other regions with privacy laws.

Depending on where you live, you may have additional rights under applicable law (for example, CCPA/CPRA in California and GDPR/UK GDPR in the EEA/UK). See the "Your Privacy Rights by Region" section below.

3. Information We Collect

A. Images and Camera Data

B. Local Device Data

C. Account Information

D. Usage, Analytics, and Diagnostics

E. Advertising and Consent Data

F. Location Data

G. Support/Feedback Data

4. How We Use Information

5. Legal Bases for Processing (EEA/UK)

If you are in the EEA or UK, we rely on one or more legal bases to process personal data:

6. How and Why We Share Information

We do not sell personal information for monetary consideration.

We may disclose information with service providers, advertising partners, legal/compliance parties, or business transfer parties as required for app operations and legal obligations.

7. Third-Party Services

Dermy may use services such as Google Firebase, Google Mobile Ads/UMP, Google Generative AI, Open-Meteo, and BigDataCloud. These services have their own privacy policies.

8. International Data Transfers

Because our service providers may operate in multiple countries, personal data may be transferred to and processed outside your country of residence, including countries that may have different data protection standards.

Where required by law, we use appropriate safeguards for international transfers (for example, contractual safeguards or equivalent mechanisms provided by service providers).

9. Data Retention

10. Your Choices and Controls

11. Your Privacy Rights by Region

A. California and Other U.S. State Privacy Rights

If you are a California resident (and, where applicable, a resident of other U.S. states with privacy laws), you may have rights to access, correct, delete, and obtain information about how your personal data is collected, used, and disclosed. You may also have rights to opt out of certain targeted advertising, sharing, or sale definitions under applicable state law, and to non-discrimination for exercising your rights.

B. EEA and UK Rights (GDPR / UK GDPR)

If you are in the EEA or UK, you may have rights to access, rectify, erase, restrict, object to processing, data portability, and withdraw consent where processing is based on consent.

You may also lodge a complaint with your local supervisory authority if you believe your personal data has been processed unlawfully.

C. How to Submit a Privacy Request

We may need to verify your identity before processing requests. Authorized agents may submit requests where legally permitted.

12. Children's Privacy

Dermy is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Where local law sets a higher age threshold for digital consent (for example, certain countries in the EEA/UK), we comply with applicable legal requirements.

13. Security

We use reasonable administrative, technical, and organizational safeguards. No system is completely secure, and absolute security cannot be guaranteed.

14. Changes to This Policy

We may update this Privacy Policy from time to time and revise the "Last Updated" date.

15. Contact Us

If you have privacy questions or requests: