Privacy policy
Effective November 12, 2026
Grow Labs LLC (“we”, “us”) provides How’s My Skin and this website. This policy explains the information used by the current app and website, why it is used, and your choices. For privacy questions or requests, email hello@usergenerated.app.
Information you provide
The app saves your onboarding answers, skin goals, birthday or age information you enter, routines, product details and notes, checkoffs, hydration logs, check-ins, conversations, and selected photos on your device. These can include sensitive information about your skin and wellbeing. The current app does not require a user account or provide its own cloud backup of this saved information.
Photos and product lookup
Camera and photo-library access are optional and used when you choose to take or select a photo. Journal and starting face photos are stored on your device in the current version. When you request product identification, search, or ingredient details, the selected product name, type, label photo, or product source information is sent to our lookup service, hosted on Cloudflare, and processed through OpenRouter and its model providers. Product lookup does not send your profile or face-journal photos. Avoid including unrelated personal information in product photos.
We configure model requests to use providers that support zero data retention and disallow data collection. This is a processing configuration, not a claim that all network or security metadata is absent. Personalized AI face analysis and remote coaching are currently disabled. If enabled in a future release, the app will explain the information to be shared and request the required permission before sending it.
Location and reminders
If you grant location access, the app uses a one-time foreground location reading and saves a rounded area and locality, not a street address. When UV forecasts are available, rounded coordinates are sent to the weather service, Open-Meteo, directly or through our service. We do not track your location in the background. Notifications are optional reminders scheduled on your device. You can change camera, photo, location, and notification permissions in your device settings.
Diagnostics, analytics, and website requests
A bounded activity log stays on your device to help troubleshoot navigation and request failures. It excludes photos, names, profile answers, typed text, and raw error messages. It retains at most 500 events, 200,000 serialized characters, or seven days of history, whichever limit is reached first. You may explicitly export it to share with support or clear it in Settings → Activity log.
Remote app analytics is off unless you opt in and the app has its dedicated analytics service configured. When enabled, PostHog receives allowlisted app and screen events and a random installation identifier; your photos, product notes, conversations, and profile answers are not included in those events. You can withdraw this choice in Settings.
This website uses no advertising trackers or analytics scripts. Hosting and service providers process technical request information, such as IP addresses, browser details, timestamps, and request status, to deliver and protect the service. If you email us, we receive your address, message, and attachments.
Why we use information and who receives it
We use information to provide the features you request, answer support requests, maintain reliability and security, and meet legal obligations. Where applicable, we rely on providing the requested service, your consent for optional processing, legitimate interests in security and support, or legal obligations. You can withdraw consent without affecting processing that already occurred.
Service providers include Cloudflare for app infrastructure; OpenAI Sites and its hosting infrastructure for this website; OpenRouter and model providers for requested product lookups; Open-Meteo for available weather forecasts; PostHog for optional analytics; and our email service for correspondence. Providers may process information in countries other than your own. Applicable contractual and legal safeguards govern these transfers. We may also disclose information when legally required or necessary to protect rights and safety. We do not sell personal information or share it for cross-context behavioral advertising.
Retention and deletion
Saved app information stays on your device until you remove it or use Settings → Reset app. Product lookup caches expire by category: searches after 24 hours, product details after seven days, negative results after 15 minutes, and label-photo reads after 30 days. Confirmed products remain on your shelf until removed. Server-side ingredient results may be cached for 24 hours. Reset app clears the saved app state, local product cache, analytics identifier, and activity history. Copies you exported or saved in your own photo library or device backups must be managed separately.
Support correspondence and operational records are kept only as needed to answer requests, maintain security, resolve disputes, or meet applicable obligations. To request access, correction, or deletion of information we hold, contact us. We may need to verify your identity. We cannot remotely retrieve or erase information stored only on your device. Resetting the app does not cancel an Apple subscription.
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; restrict or object to processing; withdraw consent; or complain to your local data protection authority. Contact hello@usergenerated.app to exercise these rights. We will handle requests under applicable law and will not discriminate against you for making one.
Children and security
The service is not directed to children under 13. If you believe a child has provided us with personal information, contact us so we can address it. We use reasonable safeguards, including encrypted network connections, but no storage or transmission method can be guaranteed completely secure.
Changes and contact
We will update the effective date when this policy changes and provide additional notice or obtain consent where required for material changes. Privacy contact: Grow Labs LLC, hello@usergenerated.app.