Privacy Policy

Last updated: July 11, 2026

This Privacy Policy describes how Dermly ("we", "us", or "the Company") collects, uses, and shares your information when you use the Dermly mobile application (the "App" or "Service"). By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. Dermly is operated from Turkey.

1. Information We Collect

Account information

When you sign in with Google or Apple, we receive your email address, and (where available) your display name and profile photo. We use this to create and secure your account.

Skin profile and inputs you provide

During onboarding and use, you provide information such as gender, age range, skin type, skin concerns, goals, allergies, and current products. You may also send text messages to our in-app AI assistant.

Photos

To perform an analysis, you capture photos with your device camera or select them from your library: photos of your face (for skin analysis) and photos of product labels (for ingredient analysis). These photos are used to generate your results.

Results and activity

We store the outputs generated for you — skin analyses, ingredient scans, AI chat history, daily logs, progress photos, streaks, points, and achievements — so the App can show your history and progress.

Approximate location

If you grant location permission, we use your approximate location (coordinates) solely to provide weather-relevant skincare reminders. You can decline or revoke this permission at any time in your device settings; the App remains usable without it.

Device and usage data

We collect device and diagnostic data such as device type, operating system, app version, language/locale, time zone, a push-notification token, and usage events. This helps us operate, secure, and improve the Service.

2. How We Use Your Information

3. Third-Party AI Processing (Google Gemini)

To provide skin analysis, product/ingredient analysis, and in-app AI chat, Dermly sends certain data to Google's Gemini AI (provided by Google LLC), our third-party AI provider. The data sent is limited to what is needed to generate your results:

This data is transmitted securely through our backend (Firebase Cloud Functions) and is processed by Google solely to return your results, in accordance with the Google Gemini API terms. Google does not use data submitted through its API to train its models, and provides data protection equivalent to that described in this Privacy Policy. We do not sell your personal data. You are asked to consent to this processing before you first use the AI features. For more information, see Google's Privacy Policy at https://policies.google.com/privacy.

4. Other Service Providers We Share Data With

We share data with the following providers strictly to operate the Service. Each processes data only as needed to provide their function and offers protections equivalent to those described here.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete your associated data (account, skin profile, results, chat history, and photos), except where we must retain limited information to comply with legal obligations.

6. Security

We use commercially reasonable technical and organizational measures to protect your data, including encrypted transmission and access-controlled storage. No method of transmission or storage is 100% secure, but we work to protect your information.

7. Your Rights and Choices

To exercise any of these rights, contact us at the address below.

8. Children's Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect data from them. If you believe a child has provided us data, please contact us and we will delete it.

9. International Users

Your information may be processed in countries other than your own, including where our service providers operate. We take steps to ensure your data receives an adequate level of protection wherever it is processed.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, where appropriate, notify you in the App. Continued use of the Service after changes means you accept the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:
support@dermlyai.com