Privacy policy
What How’s My Skin does with your messages and photos, who handles them and for how long.
The short version
- You are texting an AI. It uses what you tell it and the photos you send to score your skin and coach you.
- Selfies are kept only if you are 18 or older and say yes, so you can see your before and after. Under 18, we never keep them.
- Text delete my photos or delete my data at any time. Text STOP and we stop texting you.
- No ads, no ad tracking, no data brokers. We never sell your data.
Who we are
How’s My Skin (the chat and this website) is run by Grow Labs LLC (“we”, “us”), 8 The Green, Suite A, Dover, DE 19901, USA, which is responsible for your data. Questions: support@gotall.app, with “How’s My Skin” in the subject.
What we use and why
Your phone number (or the Apple ID email you text from). To reply to you and keep your chat together. We never ask for your name.
Your messages and answers. Things like what bugs you about your skin, the products you use, your age, skin type, city and when you do your routine, and, only when it matters for a product, allergies, prescriptions or pregnancy. We use them to coach you and remember you, so the chat never asks the same thing twice.
Selfies. AI looks at your selfie to score your skin (breakouts, hydration, texture, tone and redness). Before your first selfie the chat tells you how it works and waits for your OK. If you are 18 or older, it also asks whether to keep your photos for your weekly before and after. If you say yes, we store them until you text delete my photos or delete my data, and delete them at the latest 12 months after your last message. If you say no, or you are under 18, your selfie is analyzed and not kept by us. You can skip selfies and still get a routine.
Product photos. If you send a photo of your products, AI reads it to recognize them. We keep the product names, not the photo.
Your city. To find your time zone and the day’s UV level, we send your city or its coordinates to Open-Meteo, a weather service. Nothing else about you goes with it.
Your results. Your scores, routine, products and check-ins, so we can track your progress. Your private progress page shows them; anyone with its link can open it, so keep the link to yourself.
Product links. Product links open our own page first, which counts the tap, then the store. Amazon links carry our Associates ID so Amazon can credit us for a purchase, and Amazon may set its own cookies. We never give stores your phone number or messages.
Usage events. We record events like starting the chat, a score, a tap on a link or a reply, in our own database, under an internal ID for your chat. Events don’t contain your messages or photos. We use them to see what helps and to keep the service working.
Contact card. We send you our contact card (the name How’s My Skin and our logo) so the chat doesn’t show up as an unknown number.
This website has no cookies and no analytics tools. It tells our server which link you opened (for example /tt1) so we can count visits per link, without any ID for you. Our host keeps standard technical logs.
AI
The replies are written by AI, not a person. Your messages and photos are sent to OpenAI, which runs the AI. Under its API terms OpenAI does not use them to train its models and may keep them for up to 30 days to detect abuse. No person at How’s My Skin looks at your photos, except to delete them or to answer a request you make.
Face data and biometrics
We don’t create or keep face templates, face geometry, faceprints or any other biometric identifier, and we never use your photos to identify you or anyone else. The AI returns only skin scores and short notes. We ask for your OK in the chat before any photo is analyzed. Kept selfies are deleted when you ask, when you delete your data, and at the latest 12 months after your last message. We never sell, lease, trade or otherwise profit from your photos.
Consumer health data
Your skin concerns, selfies, skin scores, and any allergies, prescriptions or pregnancy you mention may count as consumer health data under laws such as Washington’s My Health My Data Act and Nevada’s similar law. We collect it from you, with your consent, only to score your skin and coach you. We share it only with the service providers below, who process it for us. We never sell it and never use it for advertising. You can see or delete it at any time: text delete my data, or email support@gotall.app. You can withdraw consent by not answering, texting delete my data, or texting STOP.
Teens and children
How’s My Skin is for people 13 and older. Teens 13 to 17 should have a parent’s or guardian’s permission. We never keep photos from anyone under 18. We don’t knowingly collect data from children under 13: if the chat learns someone is under 13, it stops and deletes their data. A parent who thinks their child used How’s My Skin can email support@gotall.app and we will delete the chat.
Who handles your data
- Sendblue: delivers the iMessages and texts between you and us.
- OpenAI: the AI that reads your messages and photos and writes the replies.
- Cloudflare: hosts our server, our database, kept photos and this website.
- Open-Meteo: weather and UV for your city.
Apple, your carrier and Sendblue also carry your messages and photos as part of the chat and keep them under their own policies; delete them in your messaging app if you want them gone there. We may disclose information if the law requires it. We do not sell your personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months.
How long we keep it
- Kept selfies (18+, with your yes): until you text delete my photos or delete my data, and at the latest 12 months after your last message.
- Other photos: not kept by us.
- Your profile, messages, scores and routine: until you text delete my data or ask us to delete them.
- Usage events: kept to improve the chat, under an internal ID, without your messages or photos.
- Technical logs: up to 30 days.
Your choices
- Text delete my photos to delete kept photos.
- Text delete my data to delete your photos, profile, messages and results.
- Text STOP to stop all texts.
- Skip selfies, or say no to keeping them.
- Email support@gotall.app to see, correct or delete what we hold about you. Tell us the number you texted from.
Your rights
Depending on where you live (for example California, other US states, the EEA, the UK or Switzerland), you may have the right to access, correct, delete or port your data, to restrict or object to its use, and to withdraw consent. In the EEA, UK and Switzerland you can also complain to your data protection authority. Email us to use your rights; we answer within the time your law requires and never treat you differently for using them. This website has no third-party trackers; we treat a Global Privacy Control signal as an opt-out of any sale or sharing anyway.
Legal bases (EEA, UK and Switzerland)
- Photos and health-related answers: your explicit consent, which you can withdraw at any time.
- Messages, scores and routine: to provide the coaching you ask for under our terms.
- Usage events and logs: our legitimate interest in running, fixing and securing the service. You can object by emailing us.
International transfers and security
Your data is processed in the United States and possibly other countries where our providers operate, under standard contractual clauses or equivalent safeguards. Everything travels over encrypted connections. No system is perfectly secure, but we keep only what is described here.
Changes
If we change this policy, we update the date at the top. If a change matters for how we handle your data, we tell you in the chat.