Yola Skin Privacy Policy

What the Yola Skin app collects, why, who handles it, and what you can do about it.

Effective October 19, 2026

Who we are

Yola Skin is an iPhone app made by Daymoro Studio LLC ("we", "us"), a US company. It gives cosmetic skincare guidance. It does not diagnose or treat anything and it is not medical advice. You can reach us at hello@daymorostudio.com. This policy covers the app. Our website has a separate privacy notice.

What we collect

Account details. You must sign in with Apple or Google before the app takes any photo. We receive an account ID and your email address (with Apple, this can be a private relay address). If you sign in with Google, Google also shares your name and a link to your profile picture, which are stored with your sign-in record.
Your first name. Only your first name, if you choose to give it. It is optional and is used to address you in the app.
Questionnaire answers. Your age range, skin type, sensitivity, concerns, the products you use now, known reactions (free text you write), breakout details (where, what they look like, how long you've had them), how often you wear sunscreen, budget, preferences such as finish and brands, and the product market you shop in.
Face photos. Three photos: front, left and right. See "Face photos and analysis" below.
Analysis results. Scores, written findings, and approximate face-area coordinates that show where a finding is.
Product contributions. Only if you choose "Add product" for a product that is not in Yola yet. See "Product contributions" below.
Routine and shelf. Your routine, check-ins, the products on your shelf, label drafts, and dates.
Product ratings. Only if you mark a product as one you use or have tried, or give it stars (1 to 5). See "Product ratings" below. There are no written reviews.
Subscription. Your subscription status and App Store purchase history, tied to your account ID. We never see your card details.
Usage analytics. Event records about how you use the app. See "Product analytics" below.
Record of your agreement. When you tap "Agree and analyze" (or "Agree and build my plan") in the app, our server saves which version of the wording you agreed to, the date and time, your app version and your device language, tied to your account ID. We keep it so we can show that you agreed.
Technical identifiers. A random install identifier, your account ID, and a count of how many analyses you have run, used to limit how often requests can be made and to apply plan limits. Our server also logs technical details such as request status and timing.
Product searches. When you search for a product or scan a barcode, the app looks it up in our catalog using the barcode or search word. These lookups do not include your account ID.

How we use it

We use your information to run the app: to analyze your photos, draft and update your routine, check whether products fit your skin, keep your account, check your subscription, prevent abuse, and fix problems. We also measure how the app is used, as described under "Product analytics". We do not use your information for advertising, we do not track you across other apps or websites, and we do not sell your data.

Face photos and analysis

The app takes three photos. Checks for framing and lighting run on your phone using Apple Vision.
Before your first analysis, the photo review screen shows this text above the button: "We use third-party AI services to analyze your photos, skin answers and results. Processing happens in the US, and we don’t store your photos on our servers." Under it is a link, "How we handle your data", that opens this policy. The button reads "Agree and analyze", and tapping it is your agreement. Your photos, answers and results leave the phone only after you tap it. Once you have agreed, the review screen shows the normal button. This policy fills in the details: our server forwards your three photos to Anthropic, a third-party company, whose AI model analyzes them in the United States to describe how your skin looks. To build your routine, we also send Anthropic your skin answers and results, without your name or email, and they are saved to your account so you can come back to them. We don't store the photos on our servers, Anthropic may keep them for a limited time to run the service, and our agreement doesn't allow it to train its AI models on them. A smaller copy of your front photo stays on your phone so you can compare later, as long as "Keep my front photo on this phone to compare later" is on in Profile. Our server checks for the record of your agreement before it sends anything to Anthropic. The agreement is asked again if the wording changes.
The app sends the photos over HTTPS to our server, which runs on Cloudflare Workers. Photo metadata such as location is removed first. Along with the photos, the app sends the concerns you selected and the app's language, so the analysis can say whether each concern is visible.
Our server forwards the photos to Anthropic's API, which produces cosmetic observations and scores on our behalf. Our server does not store the photos. It logs only technical details: status, timing and token counts.
Under Anthropic's policy, API inputs and outputs are deleted within 30 days. If Anthropic's safety systems flag a request as a possible usage-policy violation, Anthropic may keep it longer under its own policy.
The app deletes its temporary photo files from your phone after analysis.
"Keep my photos on this phone to compare later" is on by default, and you can switch it off in Profile. While it is on, the app keeps smaller copies of your three photos (front, left and right) on your phone only, so it can show where a finding is, including from the side, and compare analyses over time. These copies are never uploaded to our database and are excluded from iCloud backups. Switching the setting off deletes the copies already on the phone.
We do not create face recognition templates and we do not identify people. Photos are used only to describe the visible condition of your skin.

Your routine

To draft and update your routine, our server sends Anthropic your profile answers (not your name or email), your analysis findings and our product catalog. Anthropic processes them in the United States on our behalf under the same terms as the photos. You agree to this with the same text and button, on the photo review screen or, if there is no record of your agreement on this phone (for example after a reinstall), on the plan screen, where the button reads "Agree and build my plan". Our server will not build a routine without the record of that agreement.

Product analytics

We use PostHog to see how the app is used, so we can fix what confuses people and improve what works. The app sends short event records: app opened, onboarding step reached, sign-in completed (Apple or Google), analysis started, finished or failed (with a general reason such as "network"), paywall opened or closed, plan bought or restored, routine saved (with the number of steps), routine step checked (morning or evening), reminder permission, new analysis started, product camera opened (with how long the camera took to start), product checked (barcode or name search, whether it was found, the number of matches, and the barcode when one was scanned), product rated (the stars and the type of product, not the product itself), shelf status changed (using or tried), product contribution sent, and account deleted. Each event carries your app version, iOS version, device language and region, and market.

The records are linked to your account ID once you sign in, and to a random identifier on your phone before that; when you sign in, we link the two. Your IP address is not stored. There is no session recording and no automatic capture of taps. We do not use this data for advertising and we do not track you across other apps or websites. The app never sends your photos, questionnaire answers, analysis findings, product names, search words, email address, first name or anything you type.

Product contributions

If a product is not in Yola, the app can read its ingredient list on your phone and check it against your profile. That check stays on your phone. Nothing is uploaded unless you choose "Add product".

What is sent. If you choose "Add product", the app sends the cropped label image (cut to the area with the text, resized, with photo metadata such as location removed), the barcode if there is one, the text the app recognized, the brand and product name if you typed them, your market, and your account ID so the app can show you the status. It does not send your skin profile, face photos or any face image.
Where it goes. Our server on Cloudflare stores the image in Cloudflare R2 and the other details in our Supabase database.
How it is used. We read the label, check the ingredient list and may add the product to Yola's catalog for everyone. The ingredient list we publish is a transcription of what is printed on the label. We do not publish your account ID or your photo.
Deletion. If you delete your account, we delete contributions that are still in review or were not added, along with their images. If a product has already been added to the catalog, we remove your account ID from the contribution and keep the catalog entry.

Product ratings

When you rate a product, we store your account ID, the product, your market and the stars in our Supabase database, so your rating stays with your account and counts toward the product's average. Other people never see your rating on its own: the app shows only a product's average and number of ratings, and only once at least three people have rated it. If you delete your account, your ratings are deleted and stop counting toward any average.

Who processes it

These companies handle information for us as our service providers (processors):

Supabase provides sign-in and the database that stores your account data and product contributions.
Cloudflare runs our server, which receives requests from the app and passes them on. It also stores product label images you choose to contribute, the analysis count and the record of your agreement.
Anthropic analyzes your photos. It also receives your profile answers, your analysis findings and our product catalog so it can draft your routine.
RevenueCat manages your subscription status, tied to your account ID.
PostHog receives the product analytics described above.

Apple and Google handle sign-in when you choose their button, and the Apple App Store handles payment. They do this under their own privacy policies.

We may also disclose information when the law requires it.

Product information in the app comes from Open Beauty Facts (database under the ODbL; images under CC BY-SA), from products listed by manufacturers, and from labels people have contributed.

If you turn on reminders, the app schedules them locally on your phone. We do not run a push notification server.

Where it is stored and for how long

We are a US company and our providers process data mainly in the United States. Cloudflare may handle a request in the data center closest to you before passing it on. Your data may be processed outside the country where you live.

Account data (answers, analysis results, routine, check-ins, shelf, product ratings, label drafts, dates) is stored in Supabase, one record per account. We keep it until you delete your account.
Face photos are not stored on our servers. Anthropic deletes them within 30 days, except as described above. The saved photo copies stay on your phone until you switch the setting off, clear the phone or delete your account.
Contributed label images are stored in Cloudflare R2 until we review them, and kept after a product is added, without your account ID.
Server logs are kept for up to 7 days.
Analysis counts: the daily count for paid plans expires after 2 days; the free-analysis count is kept while your account exists. It holds only your account ID and a number.
Record of your agreement is kept while your account exists.
After you delete your account, we keep two small records for 5 years, and nothing else from them. One shows that you agreed: the wording version and the date. The other holds the number of free analyses used. Each is stored under a one-way scrambled code (an HMAC with a secret key that we keep separately) made from your account ID, or from your Apple or Google sign-in identifier, so the records do not contain your account ID, email or name. We keep them to prove consent and to stop free analyses from being reset by deleting an account and making a new one. If you sign up again with the same Apple or Google account, the free-analysis count carries over.
Product analytics are kept in PostHog for up to 1 year.
Subscription status is kept in RevenueCat while your account exists. When you delete your account, we ask RevenueCat to delete your record. Apple keeps its own purchase history under its rules.

We may keep information longer where the law requires it or to resolve a dispute.

Your choices and rights

Delete your account. In the app, choose "Delete account". This permanently deletes your account and your cloud data, replaces your consent record and free-analysis count with the scrambled records described above, deletes your RevenueCat record, handles your contributions as described above, and asks Apple to revoke Sign in with Apple tokens. It does not cancel your App Store subscription. Use "Manage subscription" in the app or your Apple account settings to cancel it.
Clear your phone. "Sign out and clear this phone" removes the data stored locally, including the saved photos. Your account keeps its copy.
Stop saving photos. Switch off "Keep my photos on this phone to compare later" in Profile. This also deletes the copies already saved.
Withdraw consent to analysis. Stop running analyses and delete your account, or email us. Withdrawing does not undo processing that already happened.
Ask us. Email hello@daymorostudio.com to ask for access to, correction of, or deletion of your data, to object to product analytics, or to withdraw consent. We may need to confirm it is you.

Depending on where you live, you may have rights under laws such as the GDPR, the Brazilian LGPD, or US state privacy laws. These can include rights to access, correct, delete and port your data, to object to or restrict how it is used, and to complain to your data protection authority.

Children

Yola Skin is intended for people 13 and older. We do not knowingly collect data from children. If you think a child has given us data, email us and we will delete it.

Changes

If we change this policy, we will update this page and its effective date. If a change affects how we use your photos or other information you agreed to share, we will tell you in the app and ask again.

Contact

Daymoro Studio LLC · hello@daymorostudio.com