SKNscan AI

Privacy policy

Last updated 27 October 2026

SKNscan AI (“we”) provides aesthetics clinics with a skin scan their patients run on their own phone. This policy explains what we collect, why, and the choices people have. It covers two groups: clinics that hold an account, and people who take a scan through a clinic's link.

If you take a scan

The clinic whose name is on the scan is the controller of your information; SKNscan AI processes it on the clinic's behalf. Before the camera opens you see each purpose as a switch, and you can turn any of them off.

  • Your answers to six questions (experience, age, pregnancy or breastfeeding, concerns, skin type, the outcome you want). Used to tailor your report and to apply the clinic's rules, for example never naming a treatment during pregnancy.
  • Your photograph. Processed on our own servers to read the visible appearance of your skin. We do not send it to a third-party skin-analysis service.
  • An illustrative before-and-after image, if that switch is on. To make it, your front photo is sent to an image-generation provider that may process it in the United States, and is deleted from the provider after generation as far as their terms allow. It is an illustration, not a prediction or a promise.
  • Your name, email and mobile number, so the clinic can send you the report link and follow up about the treatments you asked about. The marketing switch controls whether the clinic may send you anything beyond that; it is on by default and you can turn it off before the scan or unsubscribe from any email.
  • Plain-English wording for your report is drafted by an AI language model from the measurements only. The model never sees your photograph, and it cannot add a number, a score or a treatment.

Your report is a cosmetic appearance snapshot, not a medical assessment or a diagnosis. Report links expire after 30 days. You can ask the clinic to delete everything we hold about you from the privacy link on your report or by contacting the clinic; deletion removes your photographs, answers and contact details, and keeps only a non-identifying record that a deletion happened.

If you hold a clinic account

  • Account details: your name, work email, mobile number, clinic name, password (stored hashed) and brand settings.
  • Billing: handled by Revolut. We store your Revolut customer and subscription references, your plan, your scan usage and the VAT invoices we issue; we never see or store card numbers.
  • Usage: scans, their status and an audit trail of actions in your dashboard, so you can show what happened and when.
  • Service email (welcome, password reset, report delivery) is sent through Resend.

Where and how long

Scan photographs and reports are stored on our servers in the UK and are not shared with other clinics. Transient images used during processing are removed automatically; expired scan sessions and unused upload slots are swept on a schedule. Clinic data is kept while the account is open and deleted on request after it closes.

Your rights

Under UK GDPR you can ask for a copy of your information, have it corrected or deleted, and object to or restrict its use. People who took a scan should ask the clinic first, since the clinic is the controller; we support every request the clinic receives. You can also contact us at hello@sknscanai.com, and you have the right to complain to the Information Commissioner's Office.

Cookies

The scan and the dashboard use strictly necessary cookies to keep you signed in or to tie a scan to the phone it was started on. The marketing pages at sknscanai.com set no cookies and run no analytics.

Changes

We will update this page when anything here changes and show the date above. Material changes to how scan data is used are only applied to new scans, after fresh consent.