Epidermis

This privacy policy applies to Epidermis: AI Skin Analysis (“Epidermis”), the skin-analysis app published by Mert Topcu under the developer name M!T Studio on Google Play (com.epidermis.app) and on the App Store.

Who we are

Epidermis is developed and operated by Mert Topcu, an independent developer based in Türkiye, who publishes apps under the developer name M!T Studio. M!T Studio is not a separate company: Mert Topcu is the person responsible for your data. Questions about your data go to support@flingua.app.

Face data

“Face data” means the photos of your face and everything measured from them. This section is the whole of what happens to it. We ask for your consent in the app before the camera opens for the first time, and without it no scan can be taken.

What face data we collect

Selfie photos. Up to three photos for each scan, taken by you in the app.
Facial landmark and contour data. While the camera is open, a detector running on your phone (Google ML Kit) calculates the positions of your facial features and your head angle. It is used on your phone to guide the photo. The positions from the moment of the photo are sent with it so our server can locate five areas of your face.
Results measured from the photos. The level of each skin attribute in those five areas, short descriptions of what was visible, and your written report. We also remember whether facial hair covered part of your face, so the next scan looks in the right place.

We do not create a face template or faceprint, we do not recognise or identify anyone, and the app does not use Face ID, ARKit or the TrueDepth camera's depth data.

How we use face data

Only to analyse how your skin looks, show you your results and compare your own photos over time. We do not use face data to identify or authenticate you, for advertising or marketing, to build an advertising or marketing profile of you, to train any AI model, or for any other purpose.

Who receives face data

Anthropic, PBC (AI analysis, United States) receives close-up crops and a small whole-face image cut from each of your photos, without your account details. It also receives your results and the names of products you logged, without any image, to write your report. Under Anthropic's commercial terms it may not use this data to train its models.
Hetzner Online GmbH (hosting, Germany) operates the server where it is stored.

Nobody else receives face data. RevenueCat, PostHog and Sentry do not. It is never sold, and never shared with advertising platforms, analytics providers, data brokers or information resellers. Our service providers may use it only to provide the service described here.

Where face data is stored

On our server in Germany, and in a copy of your photos on your own phone. Anthropic processes what it receives in the United States. It travels over encrypted connections (HTTPS).

How long we keep face data

Your scan photo, and the positions and head angles measured from it: until you delete the photo or your account, or 12 months after your last scan, whichever comes first.
The second and third photos of a scan: deleted as soon as the analysis finishes. Any left by an interrupted analysis, or that never became a scan, are deleted within a day.
The detailed facial contour points: not stored. They are used once to locate the five areas.
Your results and report, which contain no photo: until you delete your account.
Anthropic: keeps what it receives for 30 days for safety and security, then deletes it. Content flagged by its safety review may be kept for up to 2 years.
Backups: our nightly database backups, which contain results and positions but no photos, are deleted after 8 days.

How to delete face data or withdraw consent

In the app, go to Settings to delete one photo, all photos, or your whole account. Deleting a photo also deletes the positions and head angles measured from it. Deleting your account deletes your photos, results and profile. You can also withdraw consent in Settings: no more photos are sent, and your next scan asks again.

What else we collect

Profile answers: birth year, skin type, language.
An anonymous device and user id — we never ask for your name, email, or phone number.
A one-way hash of a device identifier supplied by your phone. We store only the hash, never the identifier itself, and we use it for one thing: stopping the free analysis and the invite reward from being claimed again by reinstalling. It is never used for advertising, never shared, and it is deleted with your account.
Purchase state (subscription/credit status) via RevenueCat.
Usage analytics via PostHog and crash data via Sentry.
If you install from one of our links or ads, the campaign label that link carried (for example, which ad it was) and, on iPhone, Apple's own ad-attribution token, which says which Apple Search Ads campaign led to the install. These describe the ad, not you: they are not used to track you across other apps or websites, and nothing about you is shared to target you.

Why we collect it

To run the app, track your progress over time, handle purchases, and improve the product. Face data is never used to improve the product; it is used only as described above. Campaign labels tell us which of our own ads and links bring people in. Nothing else — we do not sell data, and nothing about you is used to show you ads.

Who processes it

AI analysis: Anthropic, as described under Face data.
RevenueCat (purchases), PostHog (analytics), Sentry (crash reports).
Hosting: our servers run on Hetzner in Germany.

Each of them handles your data only to provide its service to us, under terms that protect it at least as well as this policy does.

How we protect it

Everything travels over encrypted connections (HTTPS). The photo we keep has its location and camera data removed.

How long we keep it

Face data is kept as described under Face data. Everything else is kept until you delete your account. Records of purchases are kept by RevenueCat and the app stores under their own terms, because a purchase has to stay provable.

Your controls

In the app's Settings you can delete any single photo, all photos, or your whole account, anytime. For anything else, email support@flingua.app.

Age

Epidermis is not for people under 17. We block under-17 sign-ups and store nothing for them.

Not medical

Epidermis is a cosmetic wellness tool. It never diagnoses skin conditions. For any skin concern, see a dermatologist.

Questions? support@flingua.app