Privacy Policy
Last updated: 6 August 2026
At a glance
- Your face photos are analysed on your iPhone and are never sent to us.
- Your conversations with the coach are not stored, by us or by anyone else.
- We do not hold your name, email address or phone number, because Skiv does not ask for them.
- The app and this website contain no analytics, no advertising and no tracking technology.
- We do not sell your data, and it is not used to train AI models.
The sections below set out the detail.
1. Who is responsible
Skiv is operated by Aleksandar Dzavric, a French micro-entreprise registered under SIRET 94471075500017, with its registered address at 47 rue Vivienne, 75002 Paris, France.
Aleksandar Dzavric is the data controller for the processing described in this policy.
Contact for privacy matters: support@skiv.app
2. Data we collect
We collect the following categories of data, and no others.
- Skin and hair profile — six fields. Skin type, skin concerns, hair type, hair concerns, sensitivities, and your goals. This is the information the coach uses to give advice specific to you.
- Daily message count. The number of coach messages you have sent on the current day, used to limit use of the service.
- Anonymous account identifier. A randomly generated identifier. It is not linked to a name, an email address or a phone number. See section 8.
- Messages to the coach. Your messages are transmitted to the AI model that answers them. They are not written to storage at any point, by us or by the model provider.
- Dictated audio, if you use dictation. If you dictate rather than type, iOS transmits the audio to Apple's speech recognition service, which returns text. That processing is carried out by Apple under Apple's privacy policy. We receive only the resulting text.
3. Your scan photos
When you scan, the camera feed is analysed on your device by Apple's Vision framework. The photos taken during a scan are stored inside the app, on your phone. They are not transmitted to us, and the app contains no functionality that uploads them.
Your scan scores and history are likewise stored on your phone and not on our servers.
The folder in which the photos are stored is included in your iPhone's iCloud backup if you have iCloud Backup enabled. That copy is held in your own Apple account, encrypted, under Apple's terms. We have no access to it. You can prevent it by disabling iCloud Backup in iOS Settings.
4. Why we process your data
Your skin concerns and sensitivities are data concerning health within the meaning of Article 9 GDPR, which carries the strictest protection in European law. We process them on the basis of your explicit consent, which is requested separately during onboarding and is not bundled with acceptance of the Terms of Use. You may withdraw it at any time by deleting your profile. Withdrawal does not affect processing carried out before it.
| Purpose | Legal basis |
|---|---|
| Providing coaching based on your skin and hair profile | Explicit consent — Art. 9(2)(a) GDPR |
| Operating the app and the features you ask for | Performance of a contract — Art. 6(1)(b) |
| Limiting daily messages to prevent abuse of the service | Legitimate interests — Art. 6(1)(f) |
| Keeping billing records, once paid plans launch | Legal obligation — Art. 6(1)(c) |
5. Who we share data with
We use the processors listed below. Each acts on our instructions, under a data processing agreement.
| Recipient | Purpose | Location |
|---|---|---|
| Supabase | Your profile row, your anonymous account, the message count | European Union — Paris |
| Anthropic | Generates the coach's replies. Receives your profile and your recent messages, in transit. Does not use them for model training. | United States — see section 6 |
| Apple | App Store distribution, speech recognition if you use dictation, and payment processing once paid plans launch | Apple infrastructure |
We do not use analytics providers, advertising networks, attribution SDKs or crash-reporting services. None are present in the app.
We do not sell your data, and we do not share it for advertising purposes.
6. Transfers outside the European Union
Your profile and your account are stored in the European Union, in Paris.
One transfer takes place outside the European Union. To generate the coach's reply, your profile and your recent messages are sent to Anthropic in the United States. The transfer is governed by the European Commission's Standard Contractual Clauses. TO CONFIRM Anthropic retains API traffic for a limited period for abuse monitoring — approximately 30 days. We retain none of it at any point.
7. How long we keep your data
| Data | Retention |
|---|---|
| Your profile | Until you delete it. Deletion in the app is immediate. |
| Coach conversations | Not stored. |
| Message count | Rolling daily count, kept briefly for abuse prevention. |
| Photos and scan history | On your phone, for as long as you keep them. |
| Billing records, once paid plans launch | 10 years — French accounting law. |
8. Anonymous accounts
Skiv creates an anonymous account. There is no email address, no password and no name. No record in our database identifies a person.
This has one consequence you should be aware of: the only means of access to your profile is the key stored on your phone. It survives deleting and reinstalling the app. It does not survive the loss of the phone, and we cannot restore it, as we hold nothing against which to identify you.
9. Your rights
Under the GDPR you have the right of access, rectification, erasure, data portability, restriction of processing and objection, and the right to withdraw your consent at any time.
Two of these are available directly in the app, without contacting us: Settings → Account & data → Export my data, and Delete my profile.
For any other request, write to support@skiv.app. We respond within one month.
Because we hold no data identifying you, we may be unable to locate your data from an email address alone (Article 11 GDPR). Please include the Account ID shown in Settings → Account & data.
You also have the right to lodge a complaint with the CNIL (cnil.fr), the French supervisory authority.
10. Security
Data in transit is encrypted using TLS. Your profile row is protected by row-level security and is accessible only with your own credential. The key identifying your device is stored in the iPhone Keychain. Photos are not transmitted off your device.
If a personal data breach affects you, we notify you and the CNIL within 72 hours, as required by the GDPR.
11. Age
Skiv is intended for people aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe that a person under 16 has created an account, write to support@skiv.app and we will delete it.
12. Changes to this policy
If we make a material change to this policy, we will inform you in the app before it takes effect. The "Last updated" date at the top of this page always reflects the current version.
13. Contact
Aleksandar Dzavric · 47 rue Vivienne, 75002 Paris, France · support@skiv.app