Privacy policy

Last updated: 13 July 2026

The short version

• Analysis happens on your device. Your photo is processed in your browser; nothing is transmitted during analysis.
• Nothing is stored unless you save it. Saving an analysis is an explicit action, and including the photo is a separate opt-in checkbox.
• Your photos are never used to train anything — no model training, no analytics on image content, no sharing with third parties.
• You can delete everything, permanently, at any time.

Face photos are biometric data

We treat photos of your face as sensitive biometric information. The analysis pipeline (face detection and lesion analysis) runs entirely in your browser using locally-served models. A photo only leaves your device if you press Save analysis with the photo checkbox ticked.

What we store when you save

• Your account: email, optional name, password hash (bcrypt) or OAuth link.
• Each saved analysis: the structured results, timestamp, and severity.
• If you opted in: the analysed photo and a thumbnail, stored on the server's disk, keyed to your account, and served only through short-lived signed URLs to you.

What we don't do

• No advertising, trackers, or third-party analytics scripts.
• No selling or sharing of data.
• No training of models on your images.
• Usage statistics visible to the operator are aggregate only (counts and distributions) and never include photos or per-user detail.

Your rights & controls

• Export: download everything we hold about you from your account page.
• Delete an analysis: from its page in your history — this removes the database record and the image files.
• Delete your account: from your account page — this permanently removes your account, all analyses, and all stored photos.

Security

Passwords are hashed with bcrypt; sessions are encrypted (Auth.js). Image URLs are signed and expire after 15 minutes; images are never publicly cacheable. Serve the app over HTTPS in production so all data is encrypted in transit.

Not medical advice

ClearSkin is an informational tool, not a medical device. See the terms of use and the medical disclaimer shown throughout the app.