Privacy Policy

Effective date: July 11, 2026Last updated: August 16, 2026

Skloot, LLC ("Skloot," "we," "us," or "our") operates the Skloot mobile application (the "App"). This Privacy Policy explains what information the App collects, how we use it, who we share it with, and the choices and rights you have. It applies to the App and to our website at tryskloot.com.

1. The short version

Skloot reads the ingredient list on a skincare product you photograph and gives you a plain-language verdict on whether it suits your stated skin profile. We built the App to keep your information close to you:

• If you use the free version, you do not create an account. Your skin profile, routine, saved items, and scan history stay on your device. We do not receive them.
• Photos you scan are sent to our processing service only to read the text on the label, and are not stored by us afterward.
• If you subscribe, you create an account so your data can sync across your devices. That data is then stored securely in the cloud and can be deleted at any time.
• We never sell your personal information.

The sections below give the full detail.

2. Who we are and how to reach us

Skloot, LLC is the controller of personal information processed through the App. You can contact us about privacy at [email protected].

3. Information we collect

3.1 Information you provide

• Skin profile and preferences. During onboarding you may tell us your skin type, skin concerns, ingredient sensitivities or allergies, pregnancy or breastfeeding status, and language preference. Some of this may be considered health-related or sensitive information — see Section 10.
• Routine and saved items. Products you add to your morning or evening routine, and products you save for later.
• Scan history. A record of products you have scanned and the verdict the App produced.
• Account information (subscribers only). When you subscribe and create an account, we receive an account identifier and, depending on the sign-in method you choose, your email address. With Sign in with Apple you may use Apple's private email relay so we never see your real address.
• Support correspondence. If you email us, we receive your message and contact details.
• Waitlist sign-ups. If you submit your email address on our website at tryskloot.com, we receive that address and use it only to send you updates about Skloot. You can unsubscribe from any of those emails.

3.2 Photographed product labels

To analyze a product, the App captures an image of its label and sends it to our processing service to extract the printed ingredient text (optical character recognition). The image is used for that purpose and is not retained by us after the text is extracted.

3.3 Information collected automatically

• Usage analytics. We collect de-identified events about how the App is used — for example, that a scan was completed or that the subscription screen was viewed — to understand and improve the product. These are configured to exclude personal identifiers.
• Crash and performance data. If the App crashes or errors, we collect diagnostic information such as device model, operating system version, app version, and error details. Personal-data scrubbing is enabled.
• Subscription status. Our subscription provider records whether you have an active subscription. Your payment card details are processed by Apple or Google and are never collected by us.
• Website analytics. When you visit tryskloot.com, we collect aggregate visit statistics such as page views, referring site, and country-level location. This is measured without cookies and does not identify you individually. It is separate from the in-app usage analytics.

4. How we use your information

We use the information described above to:

• Read the ingredients on products you scan and produce a verdict based on your stated skin profile;
• Provide core features — your routine, saved items, and scan history;
• Create and maintain your account and sync your data across your devices (subscribers);
• Process and verify your subscription;
• Diagnose problems, maintain security, and improve the App;
• Respond to your support requests; and
• Comply with legal obligations and enforce our terms.

Our verdicts are informational and are not medical advice. See Section 10.

5. Legal bases for processing (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:

• Performance of a contract — to provide the App's features and your subscription.
• Consent — for any processing of sensitive information you choose to provide (such as allergies or pregnancy status), and where otherwise required. You may withdraw consent at any time.
• Legitimate interests — to secure, maintain, and improve the App, balanced against your rights.
• Legal obligation — where the law requires us to process or retain information.

6. How your information is stored

Free users. Your skin profile, routine, saved items, and scan history are stored locally on your device. We do not receive or store these on our servers. The exceptions are the automatic data in Section 3.3 and the label images sent for text extraction in Section 3.2.

Subscribers. When you create an account, your existing on-device data is migrated to our cloud database and is thereafter stored there so it can sync across your devices. Sync uses a "last write wins" rule based on timestamps. Access is restricted to your authenticated account.

7. Who we share information with

We do not sell your personal information and do not share it for cross-context behavioral advertising. We share information only with service providers who process it on our behalf for the purposes described below, and where required by law.

• OpenAI, L.L.C. — Optical character recognition (reading text from photos of product labels) and generating the plain-language explanation shown with each result. Information involved: photographed product label images; extracted ingredient text.
• Supabase, Inc. — Cloud database storage for account holders and serverless functions that securely relay scan requests. Information involved: for account holders, profile, routine, saved items, scan history, email/account identifier; for all users, scan images passing through the relay function.
• RevenueCat, Inc. — Managing and verifying subscription status and entitlements. Information involved: anonymous app user identifier; subscription/purchase status. Payment card details are never collected by us.
• Apple Inc. — App distribution, Sign in with Apple, and in-app purchase processing on iOS. Information involved: account identifier and (unless you choose Apple's private relay) email; purchase records handled by Apple.
• Google LLC — App distribution via Google Play, Sign in with Google, and in-app purchase processing on Android. Information involved: account identifier and email; purchase records handled by Google.
• PostHog, Inc. — Product analytics. Information involved: de-identified usage events, configured to exclude personal identifiers.
• Functional Software, Inc. (Sentry) — Crash and error reporting. Information involved: diagnostic data such as device model, operating system, app version, and error details. Personal data scrubbing is enabled.
• Kit (ConvertKit LLC) — Email delivery for the website waitlist. Information involved: the email address you submit on tryskloot.com. Used only for Skloot updates; never for advertising.
• Cloudflare, Inc. — Website hosting and privacy-preserving website analytics for tryskloot.com. Information involved: aggregate visit data such as page views, referring site, and country-level location. No cookies are used and visitors are not identified individually.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).

8. How long we keep your information

• On-device data (free users) remains until you delete it in the App, clear the App's data, or uninstall the App.
• Account data (subscribers) is kept while your account is active and is deleted when you delete your account (see Section 9).
• Label images are processed transiently for text extraction and are not retained by us.
• Analytics and crash data are retained according to our providers' standard retention periods.

9. Your choices and rights

Depending on where you live, you may have some or all of the following rights: to access the personal information we hold about you; to correct it; to delete it; to obtain a copy in a portable format; to object to or restrict certain processing; and to withdraw consent. We will not discriminate against you for exercising these rights.

How to exercise them. You can edit or delete on-device data directly in the App. Subscribers can delete their account and all associated cloud data from the Account screen in the App; deletion removes your records from our database and clears App data on your device. Deleting your account does not cancel a subscription billed through Apple or Google; the App directs you to the store's subscription page to manage or cancel it. You may also contact us at [email protected].

If you are in the EEA or UK, you have the right to lodge a complaint with your local data protection authority.

10. Health-related information and medical disclaimer

Some information you provide — such as skin concerns, ingredient allergies, or pregnancy or breastfeeding status — may be considered health-related or sensitive. We use it only to generate the App's verdicts and to operate features you have asked for. We do not use it for advertising and we do not sell it.

Skloot is not a medical device and does not provide medical advice, diagnosis, or treatment. Its verdicts are informational only. Always consult a qualified healthcare professional, and in particular a physician, about your skin and about product use during pregnancy or breastfeeding.

11. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it; to request access to and deletion of your personal information; to correct inaccurate information; and to limit the use of sensitive personal information. The categories we collect and our purposes are described in Sections 3, 4, and 7.

We do not sell or share personal information as those terms are defined under California law. To the extent skin-related or pregnancy information is treated as "sensitive personal information," we use it only to provide the App's features. You may exercise your rights by contacting us at [email protected]; we will not discriminate against you for doing so.

12. International data transfers

We and our service providers are based in, or process data in, the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers out of the EEA or UK.

13. Children's privacy

The App is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us at [email protected] and we will delete it.

14. Security

We use technical and organizational measures appropriate to the risk, including access controls, encryption in transit, authenticated access to account data, and server-side handling of sensitive credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice in the App. Your continued use of the App after an update means you accept the revised policy.

16. Contact us

Questions about this policy or your information? Email us at [email protected].

Skloot, LLC — Atlanta, Georgia