Privacy Policy
Last updated: October 2026
In short
The Dermalytics app collects absolutely no data. There are no accounts, no analytics, no advertising, no tracking and no servers. Everything you create in the app stays on your iPhone and belongs to you alone. The developer never receives, sees or stores any of it.
1. Who is responsible
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the developer of Dermalytics. You can reach the developer at Elnathalmed@proton.me or through the contact form.
2. The Dermalytics app
- No data collection. The app does not send any information to the developer or to third parties. It contains no analytics, crash-reporting, advertising or tracking software and makes no network connections of its own.
- Stored only on your device. Patient details, body sites, photos, outlines and measurements are encrypted on your iPhone (AES-GCM). The encryption key is kept in the iPhone Keychain and is protected by Face ID, Touch ID or your passcode.
- Camera and LiDAR. Camera images and depth readings are processed on the device only, to calculate measurements. Raw depth data is discarded straight away.
- Your own iCloud backup (optional). If you keep the in-app backup setting on, your encrypted records are included in your personal iCloud/iPhone backup, which is operated by Apple under your Apple Account. The developer has no access to it. You can switch this off at any time in Settings > Backup.
- Sharing is your decision. PDF reports are created only when you ask for one and are shared only with the people or apps you pick. Temporary report files are deleted afterwards.
- Optional tips. Tips are processed entirely by Apple through the App Store. The developer receives no names, payment details or other personal data.
- Full control. You can delete everything at any time with Settings > Delete all data, or by deleting the app.
Because the developer does not process any personal data from the app, including health data under Article 9 GDPR, no data is shared, sold or transferred outside the EU. If you use the app to document other people, such as patients, you remain responsible for that information under the law that applies to you.
3. This website
- Contact form. When you send a message, your name, email address and message are forwarded by email to the developer so that you can get a reply (Art. 6(1)(b) and (f) GDPR). Messages are not stored in the website database. Emails are deleted once your request is resolved, unless the law requires keeping them longer.
- Spam protection. To prevent abuse, a one-way hash of your IP address is kept for 10 minutes and then deleted automatically (Art. 6(1)(f) GDPR).
- Cookies. This website sets no tracking or advertising cookies and uses no analytics. WordPress sets technical cookies only for logged-in site administrators.
- Hosting. Like any web server, our hosting provider may briefly process technical connection data, such as your IP address, to deliver this site securely (Art. 6(1)(f) GDPR).
4. Your rights under the GDPR
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). To use these rights, please write to Elnathalmed@proton.me. You also have the right to complain to a data protection supervisory authority, especially in the EU country where you live.
5. Children
The app collects no data from anyone, including children. Measurements of children are stored on the user’s device in the same way as all other records.
6. Changes
If this policy changes, the updated version will be published on this page with a new date. A change that would introduce any data collection would be clearly announced in the app first.