Last updated: 7 August 2026 · Applies to the iOS app com.vovanphuc.shadeandskin
Shade & Skin is a personal app built and operated by Van Phuc Vo. This page describes exactly what the app does with your data — no more, no less.
| Data | How it is collected | What it is used for | Where it lives |
|---|---|---|---|
| Camera frames during makeup try-on | Front camera, once you grant permission | Drawing the makeup layer live on screen | In temporary memory on your device only. Never uploaded, never saved automatically. There is no server endpoint that accepts imagery from the makeup try-on feature. |
| Facial landmarks during makeup try-on (the geometric points that mark the outline of your lips, eyes, brows and face) | Computed on your device from the live camera frames | Positioning the makeup overlay on your face | In temporary memory on your device only. They are discarded frame by frame, never written to storage and never transmitted. |
| Makeup photos you capture | You tap the shutter | Reviewing, sharing or saving if you choose to | Temporary memory on your device. Written to your photo library only when you actively choose “Save Image”. |
| Self-reported skin details: skin type, concerns, routine pace, experience level, ingredients you are allergic to or want to avoid | You enter them in the skincare section | Building a skincare plan that fits you | On your device, and synced to our server under an anonymous identity. |
| Skin photo (optional) — a single still photo of your face | You take one and tick the consent box at the photo step | Producing observations about how your skin looks and a skincare routine for you | Sent to our server, processed, then deleted as soon as the analysis finishes. Apart from a progress photo you explicitly choose to save, this is the only face image that leaves your device. |
| Progress photo (optional) | Only when you explicitly choose to save a photo to your progress timeline. A progress photo is uploaded only as the direct result of you tapping save — nothing is uploaded in the background. | Letting you compare how your skin looks over time | Encrypted on your device, and stored on our own server so it survives a reinstall. Automatically deleted after 180 days, or immediately when you delete it. |
| Your plan, daily check-ins and analysis history | Created as you use the app | Tracking progress over time | On your device, and synced to our server under an anonymous identity. |
| A random installation identifier and usage events (for example, which screen was opened) | Automatically | Understanding which features are broken or unused | Our server. |
The app does not ask for your name, email address, phone number, date of birth, postal address or payment details. There is no account registration. The app does not read your existing photo library, your contacts or your location.
So that your profile and plan survive reinstalling the app, it generates a random identifier and sends it with each request. That identifier is not tied to your real identity: we do not know who you are, and we have no way to find out.
Your skincare plan and the reading of your skin photo are handled by an AI model we built and operate ourselves, running on our own infrastructure.
Your data is not sent to OpenAI, Google, Anthropic or any other AI provider. It is also never used to train a model.
Before any data leaves your device for the first time, the app shows a screen that explains specifically what will be sent and asks whether you agree. If you decline, your plan is produced by a deterministic rule engine instead, and no face image is transmitted from your device at all. You can change this choice at any time in Settings → AI analysis.
Consent is not just a checkbox in the interface. Every photo upload must carry an explicit AI-consent flag, and the server rejects any upload that does not carry it, before the image is processed.
Face data — camera frames, facial landmarks, the skin photo and progress photos — is used only to render makeup on screen and to produce the skin observations and skincare routine you asked for. We do not use it for:
We do not share face data with any third party for their own purposes, and we never sell it. The skin photo is used only to produce the analysis you asked for; it is not sent to any external AI provider.
Our infrastructure hosting provider may technically process or store data solely on our behalf, as an infrastructure service provider. It is not permitted to use that data for any purpose of its own, and it is bound to protect it to a standard equal to what this page promises. Nobody else can reach your data.
There are no advertising networks, no third-party analytics SDKs and no cross-app tracking.
All network traffic uses HTTPS. Progress photos you choose to save are encrypted on your device with a key held in the device Keychain, and the copy kept on our own server so it survives a reinstall is held under access controls we operate — it is not handed to any external service. The server authenticates the app with Apple App Attest, so only a genuine build of the app can download content.
This app is not directed at children and we do not knowingly collect data from them.
Every observation, score and suggestion in the app is ordinary cosmetic skincare guidance, for reference only. It is not a diagnosis and not medical treatment, and the app is not a regulated medical device. Talk to a doctor or dermatologist before making any decision about your health, and seek care promptly if you notice anything unusual on your skin.
If this policy changes in a way that affects you, we will update this page and change the date at the top. Significant changes will also be announced inside the app.