Privacy Policy
Acnera Effective Date: November 6, 2026 Last Updated: November 6, 2026
The short version
- What we collect: your scans and results, the products you scan, your account details, what you post in the Community, and what you send to support.
- What stays on your phone: your water, sleep, stress, energy, cycle and journal logs, your Ask Tofu chat history, and your voice notes.
- Who else sees your data: if you tap Allow, Google and OpenAI process your photos, messages and logs to power our AI features. Other companies help us run the app. They are all listed in Section 6.
- What we never do: we don't sell your data, we don't show ads, and we don't track you across other companies' apps or websites.
- What you control: you can turn AI processing off in Settings at any time, and you can delete your account in the app.
1. Who we are
Acnera is operated by Acnera ("we," "us"). This policy explains what data the Acnera app collects, how we use it, who receives it, and the choices you have.
For privacy questions, email support@acnera.app.
2. What we collect
2.1 Stored on our servers
| Data | Details | Why |
|---|---|---|
| Account details | A user ID that is linked to your data, and your name and email if you sign in with Apple or Google and share them | Running your account |
| Face photos | Photos you take or choose for a face scan | Skin analysis and tracking your progress |
| Scan results | Skin score, acne type, spot counts, redness, pore and skin assessments | Showing your results and progress over time |
| Skin profile | Your display name and skin type | Personalizing the app |
| Scanned products | Product photos, names, brands, categories and ingredient analysis | Checking products against your skin and routine |
| Community content | Your posts, replies, likes, poll votes, reports, blocks and display name | Running the Community and keeping it safe |
| Support messages | What you send us, any attachments, and your email if you give it to us | Answering you |
| Device token | A push notification token | Telling you when support replies |
2.2 Stored only on your device
These stay on your phone in the app's storage. They do not go to our database:
- Water, sleep, stress, energy and cycle logs, day flags and moods
- Journal entries and voice notes
- Your routine, streaks, stickers and quests
- Your Ask Tofu chat history
- Widget and Live Activity data
Some of this information does leave your device when you use Ask Tofu (see Section 3.2).
2.3 Collected automatically
| Data | Details | Why |
|---|---|---|
| Usage analytics | Your user ID, device and app details, IP address, and the features you use (see Section 3.3) | Understanding how the app is used and improving it |
| Crash and performance data | Crash reports, app logs, device details, IP address and user ID | Finding and fixing problems |
| Subscription status | Whether your subscription is active, and your purchase history | Giving you access to Acnera Pro |
| Age range | On supported iOS versions, the age range Apple shares when you agree to the community rules. You choose whether to share it, and we don't store it | Keeping the Community to ages 13 and over |
2.4 From other companies
- Apple: your Apple sign-in details if you use Sign in with Apple, and your purchases.
- Google: your Google sign-in details if you use Google Sign-In.
- RevenueCat: your subscription status.
3. Sensitive data
3.1 Face photos
Your face photos are stored in private cloud storage. When you run a face scan, the photo is sent to Google (Gemini), or to OpenAI if Gemini is unavailable, to produce your result. This only happens after you tap Allow in the app. These photos are not anonymous. We don't use them for facial recognition, identity verification or advertising.
3.2 Health and wellness data, and Ask Tofu
If you tap Allow, then when you ask Tofu a question we send your message and recent conversation to Google (Gemini), or to OpenAI if Gemini is unavailable. To give you a useful answer, we also send a summary of your data, which can include your skin type, scan scores, products, routine, water, sleep, stress, energy, moods, symptoms, short excerpts of your journal entries, and menstrual cycle information. Your conversation is not stored on our servers. Your history stays on your device.
3.3 Health-related information in analytics
Our usage analytics are linked to your user ID. They record which features you use, for example that you logged water or sleep. They don't include the values you enter, such as your stress level, the amount of water, or cycle details. We don't use analytics for advertising, and we don't share them with insurers or employers.
3.4 HIPAA
Acnera is not a covered entity under HIPAA in the United States, so HIPAA does not apply to your data.
4. How we use your data
- To provide the app: run scans, show results and progress, check products, answer Ask Tofu questions, and run the Community and support chat.
- To manage your subscription and purchases.
- To understand how the app is used, fix problems and improve it.
- To keep the Community safe, including filtering language and handling reports.
- To send notifications you've allowed, such as routine reminders and support replies.
- To meet legal obligations and to prevent fraud and abuse.
We do not use your photos, messages or health data to train AI models.
5. Legal bases (EEA, UK and Switzerland)
| Activity | Legal basis |
|---|---|
| Account, subscription, app features and support | Performance of a contract |
| Face photos, health data and AI processing | Explicit consent |
| Community posts you choose to publish | Performance of a contract |
| Usage analytics and crash reporting | Legitimate interests |
| Legal compliance | Legal obligation |
You can withdraw your consent to AI processing at any time in Settings (see Section 8). This does not affect processing that already happened.
6. Who receives your data
We don't sell your personal data. The companies below process it to run the app.
| Company | What they receive | Why |
|---|---|---|
| Supabase | Everything in Section 2.1 | Database, file storage and sign-in |
| Google (Gemini API) | Face photos, product photos, ingredient lists, and Ask Tofu messages with the summary in Section 3.2 | AI analysis and answers |
| OpenAI | The same data, only when Gemini is unavailable | Backup AI |
| PostHog | User ID, device details, IP address and app events | Usage analytics |
| Sentry | Crash reports, app logs, device details, IP address and user ID | Crash and performance reporting |
| RevenueCat | User ID and purchases | Subscription management |
| Apple | Purchases, sign-in details and push notifications | Payments, sign-in and notifications |
| Google (Sign-In) | Sign-in details | Sign-in |
| Discord | Your support messages and attachments, and the text of Community content that someone reports | How our team reads and answers support chats and reviews reports |
Community: your posts, replies and display name are visible to other Acnera users. Some starter posts and replies were written by the Acnera team to get conversations started. Tapping one of those usernames says it's part of Acnera.
Legal reasons: we may disclose data if the law requires it, or to protect the rights and safety of Acnera, our users or the public.
Business transfers: if Acnera is sold or merged, your data may transfer to the new owner. We'll tell you before it becomes subject to a materially different policy.
7. Storage, security and retention
7.1 Where your data is stored
Data on our servers is stored in the United States (AWS us-east-1) through Supabase. Our other providers may also process data in the United States.
7.2 Security
Data is encrypted in transit and at rest on our servers. Your photos are in private storage and are reached through links that expire after one hour. Database rules restrict each user to their own data. No system is perfectly secure, and we can't guarantee absolute security.
7.3 How long we keep data
| Data | How long |
|---|---|
| Account, scans, photos, products, Community content, support messages on our servers | Until you delete them or your account |
| Guest accounts with no scans or products | Removed automatically after a period of inactivity |
| Backups of our database | Until they expire from our provider's rolling backups |
| Google and OpenAI | Kept for a limited time under their API terms |
| PostHog and Sentry | For the period set in each provider's retention settings |
| Discord support threads | Until we delete them |
7.4 When you delete your account
We delete your account and its data from our database and photo storage right away. If you use Sign in with Apple, we also ask Apple to revoke Acnera's access. If a stored photo can't be removed at that moment, we remove it afterwards. Copies in backups expire on our provider's rolling backup schedule. Our providers delete what they hold on the schedules above.
8. Your choices
- AI processing: you choose Allow or Not now during the first-run tour, and can change it in Settings at any time. While it's off, face scans, product scans and Ask Tofu are paused and nothing is sent to our AI providers. The rest of the app keeps working.
- Delete data: you can delete individual photos, products and logs in the app, and your own Community posts and replies.
- Delete your account: go to Settings → Delete Account and confirm. This can't be undone.
- Your subscription: deleting your account doesn't cancel your subscription. Cancel it in your Apple Account settings.
- Permissions: you can turn off camera, photo, microphone and notification access in iOS Settings.
- Export your data: email support@acnera.app with the subject "Data Export Request." We'll reply within 30 days.
9. Tracking
Acnera has no ads and no advertising SDKs, and it does not track you across other companies' apps or websites. We do use analytics and crash reporting inside the app, as described above. The app does not use web cookies, and it does not respond to Do Not Track signals.
10. International transfers
If you're in the EEA, UK or Switzerland, your data is transferred to the United States. We rely on the EU-US Data Privacy Framework where a provider is certified, and otherwise on Standard Contractual Clauses and the UK Addendum.
11. Your rights in the EEA, UK and Switzerland
You have the right to access, correct, delete, restrict, object to the processing of, and receive a portable copy of your personal data, and to withdraw consent. You can also complain to your local data protection authority.
To use these rights, email support@acnera.app with the subject "Privacy Request." We'll reply within 30 days, or tell you if we need longer for a complex request.
For data protection inquiries, contact support@acnera.app.
12. Your rights in the United States
Depending on where you live, you may have the right to know what we collect, get a copy, correct it, delete it, and opt out of the sale of your data or targeted advertising. We don't sell your data or use it for targeted advertising. You won't be treated differently for using your rights.
To make a request, email support@acnera.app with the subject "Privacy Request."
13. Children and teens
Acnera is for people aged 13 and older. We don't knowingly collect data from children under 13. On supported iOS versions, someone Apple reports as under 13 can't post in the Community. If you believe a child under 13 has used Acnera, email support@acnera.app and we'll delete the account and its data. Users aged 13 to 17 should use the app with a parent's or guardian's awareness where the law requires it.
14. Links to other services
The app can link to other websites and services. This policy doesn't cover them.
15. Changes to this policy
If we make material changes, we'll update the date at the top and tell you in the app before they take effect.
16. Contact
Email: support@acnera.app Website: https://www.acnera.app/privacy-policy