Privacy

DerMe is built to keep your skincare to yourself. There are no ads, no analytics and no tracking, and nothing about you is sold.

Last updated 14 November 2026

DerMe is made by The Derme App LLC, a New Jersey company ("we").

What stays on your phone

Your routine, products, schedule, check-ins, diary notes and settings are stored on your phone. Progress photos never leave your phone unless you save a backup file or share a photo yourself. Reminders are scheduled on your phone too.

If you create an account

An account is optional. If you sign in with Apple, Google or an email address, DerMe stores:

• your email address and how you signed in, so you can sign in again;
• a copy of your routine, products, check-ins, diary notes, profile and settings, so they follow you to a new phone. Progress photos are not included.

Only you can read your copy. Deleting your account in the app (Settings → Account → Delete account) deletes your account and that copy from our servers straight away. If you signed in with Apple, it also disconnects DerMe from your Apple ID. Accounts are run on Supabase. Email sign-up passes a Cloudflare Turnstile check that you're a person, and the 6-digit codes are sent through our email provider, which receives your email address only to deliver them.

Finding products

• Searching sends what you type to DerMe's shared product list and to Open Beauty Facts, an open product database. Scanning a barcode sends the barcode number to Open Beauty Facts.
• Reading a label photo or searching the web sends the photo or your search text through DerMe's server to Google's Gemini service to read the product details. DerMe doesn't keep the photo.
• Products you add from a search, scan or photo join the shared product list so the next person finds them faster: the product's name, brand, size, type and ingredients. Nothing about you, your routine or your skin. Each addition is recorded with a scrambled code made from your phone's random install number, so that if someone adds false details on purpose, their additions can be found and removed. The code can't be turned back into the number.
• Some product details come from Open Beauty Facts under the Open Database License.

UV where you are

If you choose to see UV in the Sun screen, DerMe asks for your location, rounds it to about 10 km, and sends that to Open-Meteo to get the UV forecast. The rounded location stays on your phone so it can refresh, and is never sent to DerMe. Tap "Stop using my location" in Sun to forget it.

Keeping the service fair

To stop bots running up costs, the app proves it's a genuine copy of DerMe using Apple's App Attest. DerMe's server counts uses per day against a random number made when you install the app and against your network (IP) address, so one phone or network can't use more than its share. Both are scrambled before they're stored, so the counts can't be turned back into your number or address, and they're deleted after 7 days.

Sharing a routine

When you share your routine, DerMe stores it under a random 8-character code so the link and QR code stay short. It contains product names, types, actives and schedules; prescription items are shared by name only. It doesn't include your name, photos, check-ins or notes. Anyone with the link can open that routine, and nobody can browse shared routines.

DerMe Plus

Subscriptions are handled entirely by Apple. DerMe never sees your payment details. Manage or cancel in your iPhone's Settings → your name → Subscriptions.

Notifications and permissions

DerMe asks before using notifications, the camera, your photo library or your location, and uses them only for reminders, scanning, label photos, progress photos and UV. You can change these at any time in your iPhone's Settings.

How long we keep things

• Your account and its copy of your data: until you delete the account.
• Label photos and web searches: not kept. They're passed to Google's Gemini service to read the details and then discarded by DerMe.
• Daily use counts: 7 days.
• Shared routines: kept so the link keeps working. They contain nothing about you; write to us with the link if you'd like one removed.
• The shared product list: kept, since it's product facts, not personal information.
• Server logs: our hosting providers keep short technical logs (such as the time and network address of a request) for a limited time for security and troubleshooting.

Children

DerMe isn't made for children under 13, and we don't knowingly collect information from them. If you think a child under 13 has created an account, contact us and we'll delete it.

Your choices

• Export everything as a backup file, or delete all your data, in Settings → Your data.
• Delete your account, and its copy of your data, in Settings → Account.
• Ask us for a copy of what's stored about you, or for anything to be corrected or deleted, at the address below.

Changes and contact

If this policy changes, the date above will change with it. Questions about your privacy: derme.support@gmail.com.