Privacy

Your record in the app

The SteadySkin app stores its health record in app-private storage on your iPhone. You do not need a SteadySkin account. Depending on what you choose to record, the app may hold treatment and product names, instructions, schedules, completed or skipped entries, concerns, notes, body-area labels, photos, comparisons, device details, reminders, preferences, and archive information.

Camera, photo-library, notification, and biometric permissions are requested when a related feature needs them. You can decline or revoke a permission in iOS Settings. Face ID, Touch ID, and passcode checks are handled by iOS; SteadySkin does not receive or store your biometric template.

When information leaves your device

Health records and photos can leave the app when you deliberately:

• export or share a report, CSV file, archive, screenshot, or other file;
• attach feedback, a screenshot, a photo, or previewed diagnostics to support; or
• send information to a destination you choose in the iOS share sheet.

The person, provider, email service, cloud drive, or other destination you choose has its own privacy practices. Deleting the app's copy does not delete a copy you already sent elsewhere.

Apple processes App Store purchases and entitlement information so the app can show or restore SteadySkin Plus. SteadySkin does not receive your complete payment-card number, and treatment records and photos are not included in an App Store purchase.

Backup and recovery

iCloud does not back up the app's database, photos, thumbnails, attachments, comparisons, or diagnostics. SteadySkin does not operate an account, CloudKit database, or cross-device health-record sync service. A complete, user-created encrypted SteadySkin archive is the app-controlled portable backup and recovery path. Keep its password safe; SteadySkin cannot reset or recover it.

Technical diagnostics

The current app does not send a custom remote crash, reliability, product-analytics, session-replay, advertising-attribution, or usage stream. It keeps a bounded on-device log of closed technical codes for troubleshooting. That log excludes treatment and reaction values, treatment dates, body-area content, user labels, notes, photos and photo metadata, file paths, purchase receipts and transaction identifiers, email addresses, advertising identifiers, stable device or install identifiers, and biometric data.

A privacy-filtered diagnostic file leaves the device only when you preview it, choose to include it in a support message, review the system email draft, and send that draft. Apple may separately provide aggregate diagnostics under your Apple diagnostics settings and Apple's policies.

The website

SteadySkin sets one preference cookie when you choose vitiligo, psoriasis, eczema, or “not sure yet.” It helps shared guides remember what to emphasize. It does not contain tool answers, saved questions, an advertising id, or an analytics id. SteadySkin does not set advertising cookies.

Choices, saved questions, checklist ticks, and entries in website tools are stored in your browser, not in a SteadySkin account. Clearing site data in your browser removes those local website records and the condition-preference cookie from that browser.

The website features available today can store these records in your browser:

• ss.condition: Which condition you told us you are here about
• ss.stage: Roughly where you are in the journey
• ss.modalities: Which treatment types you wanted to see first
• ss.basket: Questions you saved for your next conversation
• ss.questionLists: Names of the question lists you created
• ss.checklists: Which checklist items you ticked
• ss.calc: Numbers you typed into the cost and time calculator
• ss.wizard: Device-form answers kept until you close the tab

If JavaScript is unavailable, you can remove the same records by clearing site data for SteadySkin in your browser settings.

Vercel hosts the website and may process ordinary network, server, and security data to deliver and protect it. Web Analytics and Speed Insights are off in the current production build. If either is enabled later, this notice will be updated before collection begins. Vercel publishes a Web Analytics privacy notice and a Speed Insights privacy notice.

If an app-waitlist or new-guide-alert form is displayed and you submit it, the email provider named beside that form receives your email address and any non-personal control needed to process the form. These are separate choices with separate promises. A submission does not include your condition, the page you read, saved questions, or tool answers.

How information is used

Information is used to perform features you request, maintain and protect the service, determine or restore an eligible subscription, respond to support, investigate security concerns, and understand aggregate website use when analytics is enabled.

SteadySkin does not sell health records or photos. Treatment information, photos, and treatment behavior are not used for advertising, cross-app tracking, data-broker sale, insurance eligibility, credit decisions, employment decisions, or behavior-based upgrade targeting.

Export, deletion, and your choices

Local records remain until you delete them in the app, remove the app, erase the device, or replace them through an archive import. Removing the app may permanently remove records that you did not successfully export. Ending SteadySkin Plus does not delete the local record or prevent you from exporting it.

Depending on where you live and which law applies, you may have rights concerning information held off device. Because the main health record is local, many access, correction, export, and deletion actions happen directly in the app. Contact support for a request involving support information or other information associated with you outside the app.

Security and limits

SteadySkin uses app-private storage, iOS data-protection controls, an optional privacy lock, encrypted portable archives, and integrity checks. No safeguard removes every risk, especially on a shared, compromised, or unlocked device or after you export information.

If SteadySkin confirms a breach involving information for which the law requires notice, we will notify affected people and regulators in the manner and time the applicable law requires. The notice will describe what happened, what information was involved, steps we have taken, and practical steps affected people can consider, when that information is known and legally required.

Contact

Email support@SteadySkin.app or visit the support page for privacy questions or requests. Please do not include treatment details, health records, or photos in an initial email.