Privacy contact: support@amanchilabs.com
1. Who we are
DermaPrivate is operated by Amanchi Labs LLC, doing business as Amanchi Labs (“we,” “us,” or “our”).
This policy explains how information is handled when you use the DermaPrivate mobile app or visit our website at www.dermaprivate.app. The app and website have different data practices, described below.
DermaPrivate is a local-first cosmetic skincare routine organization app. Its core routine features do not require a DermaPrivate account or a continuous internet connection. Optional online features communicate with the services described in this policy.
DermaPrivate is not a medical service. It does not diagnose skin conditions, prescribe treatment, or replace instructions from a qualified healthcare professional.
2. Privacy at a glance
Your routines, saved products, profile preferences, and check-ins are stored on your device by default.
We do not provide account-based routine synchronization or operate a cloud backup service for your routines.
Optional product lookup sends a product name or barcode to Open Beauty Facts when a match is not available in the app’s existing catalogs or cache.
Optional AI Assist uses your own Groq API key and sends selected information to Groq after you authorize the request.
Catalog checks, remote images, purchases, and external links involve separate services, as described below.
Our website provides information about the app and does not process purchases.
You can use the app’s settings to manage local data and optional AI features.
3. Information stored in the mobile app
Depending on the features you use, DermaPrivate stores the following information on your device:
- Skincare preferences, such as skin type, sensitivity, goals, ingredient avoidances, and routine preferences.
- Products you add, including product names and available ingredient information.
- Routine steps, morning and evening schedules, and related settings.
- Routine Snapshot answers and starting-point suggestions.
- Check-ins and routine history, including steps you mark complete.
- AI consent choices and a local AI activity history.
- Your Groq API key, if you choose to configure AI Assist.
Routine and profile information is stored locally. The Groq API key is stored using the device’s secure credential storage.
The local AI activity history records request metadata, such as the feature used, provider, request status, data categories, timing, and token counts. It is designed not to store raw AI prompts or responses and is limited to the 100 most recent entries. Suggestions you choose to save may become part of your locally stored routine information.
Device backups
Local information may be included in device backups according to your operating-system and backup settings. Those backups are separate from DermaPrivate; we do not operate a routine backup or synchronization service.
Local-first storage does not mean that every app record is separately encrypted by DermaPrivate. Device security, passcode protection, and backup settings also affect protection of your information.
4. App network requests
Online features may disclose ordinary connection information, including your IP address, request time, and technical request headers, to the receiving service and its infrastructure.
Catalog checks and downloads
The app may contact the DermaPrivate catalog service at api.dermaprivate.app to check for and download catalog updates.
Version-check requests include a rollout-group number between 0 and 99. They are not designed to include your routine, skin profile, or raw installation identifier. Checks may occur periodically when the app starts.
The catalog service and its hosting or delivery providers may process technical request information to deliver, secure, and troubleshoot the service.
Open Beauty Facts product lookup
The app checks its available catalogs and local cache before using Open Beauty Facts as a fallback.
If a match is not found and an online lookup is made:
- A product-name lookup sends the search text to a search endpoint.
- A barcode lookup sends the barcode to a product endpoint.
These requests go directly from your device to Open Beauty Facts. They include an identifying User-Agent containing the DermaPrivate app name, version, and business support email address. They do not include your skin profile or routine.
Amanchi Labs does not receive these searches or barcodes through this lookup process.
Successful lookup results are cached locally for 30 days. Product information you deliberately save to your routine may remain after the lookup cache expires.
Open Beauty Facts processes requests under its own privacy policy.
Remote product images
When the app displays a remotely hosted product image, it requests that image from the host identified by the catalog entry. Hosts may include brands, product-data services, and content-delivery providers.
The image host receives the requested URL and ordinary connection information. The app does not intentionally include your routine or skin profile in image requests. Image hosts may change as the catalog changes.
5. Optional AI Assist and Groq
AI Assist is optional. It is not required for core routine setup, editing, daily check-ins, or on-device compatibility rules.
To use AI Assist, you configure your own Groq API key. Authorized requests are sent directly from your device to Groq, with the key supplied as an authentication credential.
Information sent
Depending on the feature, an AI request may include:
- Product names, types, brands, or regions.
- Routine windows and step labels.
- Confirmed ingredient lists or active ingredient families.
- Ingredient avoidances.
- Skin type, sensitivity, and cosmetic goals.
- Local rule findings.
- Routine Snapshot preferences, results, summaries, or related notes.
- Prior AI suggestions relevant to the requested feature.
The in-app consent flow identifies the information categories used for the request. Review that disclosure before authorizing AI use.
The app does not intentionally include face photographs, email addresses, account identifiers, or free-form journal entries in AI prompts. Product names and other user-entered fields may nevertheless contain information you choose to enter; avoid including unnecessary personal information.
Groq’s data handling
Groq processes requests under its own terms, privacy policy, and account settings.
Groq states that it collects usage metadata and does not retain inference inputs and outputs by default. It may retain inputs and outputs in limited circumstances, including reliability troubleshooting or abuse investigation. Its documentation describes retention of up to 30 days for those logs, unless longer retention is legally required, and offers Zero Data Retention controls for eligible requests.
Your Groq organization’s settings affect its handling of requests. DermaPrivate cannot view or change those settings.
For current information, see:
Your AI controls
You can revoke AI consent, remove your stored API key, and clear local AI activity history in Settings.
These actions do not delete information already processed by Groq. Removing a key from DermaPrivate does not revoke it in your Groq account. To revoke the credential or make a request about information Groq holds, use Groq’s account controls or privacy channels.
6. Purchases and external shopping links
App Store purchases
If you purchase Pro Offline or restore a purchase, Apple processes the payment and provides purchase or entitlement information needed to enable the relevant features.
DermaPrivate does not receive your payment-card number. Apple maintains its transaction records under its own terms and privacy policy.
Clearing routine or profile information does not cancel a purchase or delete Apple’s transaction records. You can use the app’s restore-purchase function with the relevant Apple account.
Brand, retailer, and affiliate links
When you choose to open an external product link, the destination receives the requested URL and ordinary connection information. Its privacy practices apply after you follow the link.
Where a link is an affiliate link, we identify the commercial relationship near the shopping action. Affiliate links may route through an affiliate network and contain publisher, campaign, or product identifiers used to attribute a purchase. We may receive commission or transaction reports associated with qualifying purchases.
The app does not intentionally include your skin profile or routine information in shopping URLs.
A product link is not a guarantee of suitability. Product information, prices, and availability may be incomplete or change.
7. The DermaPrivate website
The website provides information about the mobile app. It does not require an account or offer checkout.
When you request a page or website asset, our hosting, delivery, or security providers may receive technical information such as:
- IP address.
- Browser and device information.
- Requested page or file.
- Referring page, where supplied.
- Request date and time.
This information may be used to deliver the website, maintain security, and diagnose service problems.
Following an external link takes you to a service with its own privacy practices.
8. Support messages
If you email us, we receive your email address, message, and any attachments or other information you provide.
We use this information to respond, provide support, and maintain necessary business records. Our email service providers also process messages under their own terms and privacy practices.
Please do not send API keys, passwords, or unnecessary sensitive information.
9. How we use and disclose information
We use information to:
- Provide the website and app features you request.
- Maintain locally stored routines and preferences.
- Support catalog access and optional product lookup.
- Obtain an AI response when you authorize a request.
- Enable or restore purchases.
- Respond to support and privacy requests.
- Maintain security and troubleshoot services.
Information is disclosed to recipients as described in this policy. We may also disclose information we hold when reasonably necessary to comply with legal obligations, respond to lawful requests, prevent fraud, or protect rights and safety.
The app does not provide an account-based routine server or routine synchronization service. Locally stored routines are not uploaded to us merely because you create or use them.
10. Retention and deletion
Local app information
Routine and profile information remains on your device until you remove it or clear the relevant app data, subject to device and backup behavior.
Settings provides controls to clear local routine/profile information, clear AI activity history, remove your API key, and revoke AI consent. These controls have different scopes; clearing routine information does not necessarily clear credentials, AI activity, or purchase-entitlement information.
Removing the app may not remove information retained in device backups or secure credential storage.
Information held by us
We retain support correspondence and operational records for as long as reasonably necessary for their stated purposes, including responding to requests, security, troubleshooting, and legal obligations.
Technical-log retention depends on the service and its configuration. Contact us with questions about information we control.
Information held by other organizations
Deleting local data does not delete information already processed by Apple, Groq, Open Beauty Facts, image hosts, affiliate networks, or retailers. Their retention practices and applicable privacy rights continue to apply.
Where a provider processes information on our behalf, we will handle applicable requests concerning information under our control.
11. Your choices and privacy requests
You can:
- Use core routine features without enabling AI Assist.
- Decline or revoke AI authorization.
- Remove your Groq API key.
- Clear local AI activity history.
- Delete local routine/profile information.
- Choose whether to open external shopping links.
- Manage device backup settings.
To ask a privacy question or exercise rights concerning information we control, contact support@amanchilabs.com.
Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. We may need to verify a request before acting. We will respond as required by applicable law.
Because DermaPrivate does not provide an account or routine-sync service, we generally cannot retrieve or remotely erase information stored only on your device.
12. Security
We use device storage, secure credential storage, and HTTPS network connections for their intended purposes. No storage or transmission method is completely secure.
Protect your device with a passcode, keep its operating system updated, and review your backup settings. External providers maintain their own security controls.
13. International processing
Information sent to service providers may be processed outside your country, including in the United States. Applicable protections and transfer practices depend on the provider and the laws that apply.
For example, Groq’s documentation states that retained customer data is stored in the United States. Refer to provider privacy notices for current information.
14. Children’s privacy
DermaPrivate is not directed to children under 13. We do not knowingly collect personal information from children under 13 through our website or support channels.
If you believe a child has provided personal information to us, contact support@amanchilabs.com so we can investigate and take appropriate action.
15. Changes to this policy
We may update this policy as our services or practices change. We will publish the current version on the DermaPrivate website and update the dates above.
Where required, we will provide additional notice or obtain consent before introducing materially different processing.
16. Contact
- Amanchi Labs LLC, doing business as Amanchi Labs.
- Privacy and support: support@amanchilabs.com.
- Website: https://www.dermaprivate.app/