Privacy Policy

Last updated: June 21, 2026

Atlas Chicago LLC ("we", "us") operates the SkinAge mobile application. This policy explains what we collect, how we use it, and the choices you have. SkinAge provides an AI-estimated "skin age" and cosmetic scores for entertainment and general information only — it is not a medical service.

1. Information we collect

  • Facial photographs (biometric data). When you run a scan, you take a selfie. We process this image to estimate your skin age and cosmetic scores, and store it in a private, access-controlled bucket linked to your account.
  • Profile inputs you provide: age, gender, main skin concern, skin type, sun exposure, and sleep habits.
  • Scan results: the estimated skin age, the five cosmetic scores, and a short summary generated for each scan.
  • Subscription and device data: purchase/entitlement status and basic technical data needed to run the app. We use anonymous authentication — we do not require your name or email.

2. Biometric data & Illinois BIPA

A photograph of your face is a biometric identifier under BIPA. We only collect and store it after you give explicit consent on the consent screen.

  • Purpose: solely to generate your skin analysis and let you review past scans. We do not sell, lease, trade, or otherwise profit from biometric data.
  • Retention & destruction: we retain facial images while your account is active. They are permanently destroyed when you delete your account, and otherwise no later than three (3) years after your last interaction with the app, consistent with BIPA.
  • You may withdraw consent at any time by deleting your account in Settings, which permanently removes your photos and scans.

3. How we use information

  • To generate your skin analysis and personalized routine.
  • To show your scan history and progress over time.
  • To operate, secure, and improve the app.
  • We do not use your data for third-party advertising, and we do not sell personal information.

4. Service providers

  • Supabase — database, authentication, and the private storage bucket for scan photos.
  • Anthropic (Claude API) — processes your selfie to produce the analysis.
  • RevenueCat & Apple — manage subscriptions and process payments. Card details are handled by Apple, not by us.

5. Your choices and rights

  • Delete account: Settings → Delete account permanently removes your account, all scans, and all stored photos.
  • Depending on where you live (Illinois BIPA, California CCPA, EU/UK GDPR), you may have rights to access, correct, or delete your data.

6. Data security

Scan photos live in a private bucket protected by row-level security, accessible only to your account. Analysis runs server-side; our AI provider key is never exposed in the app.

7. Children

SkinAge is not directed to children under 13, and we do not knowingly collect their data.

8. Changes & contact

We may update this policy; we will revise the "Last updated" date. Questions or requests: atlaschicagollc@gmail.com. Governing law: State of Illinois, USA.