FungalscanGet the app

Privacy policy

Updated November 3, 2026. This policy covers Scan My Skincare (previously Fungal Scan), FungalScan.app and ScanMySkincare.com. Operated by James Hall. Privacy contact: support@fungalscan.app.

In plain language

No name, email or account is required to use the app. Your Shelf, product experiences, use history, notes and preferences are stored on your device for this launch. Label photos and submitted ingredient text use online processing. Purchases and usage analytics use service-generated identifiers; they are not anonymous aggregate data. We do not sell your personal information or use it for cross-app advertising.

Label photos and submitted text

When you scan or import a label photo, the app sends it over HTTPS to api.fungalscan.app, hosted by Vercel. The API sends the image to Anthropic's commercial API to extract ingredient text and product details. Review the extracted text against your package. Pasted or corrected ingredients can also be sent to the API for checking. Do not submit unrelated personal documents, faces or private notes.

Our application does not intentionally store the original image in its own database. This does not mean the image is immediately deleted by every processor. Anthropic's standard API policy provides deletion of inputs and outputs within 30 days, with exceptions such as safety investigations and legal requirements. We have not verified a zero-data-retention agreement for this service. See Anthropic's retention policy. Commercial API content is not used for general model training by default; provider terms and exceptions govern its handling.

Unrecognised ingredient strings may be retained in our Supabase database with occurrence counts and last-seen dates to improve ingredient coverage. This is separate from your private Shelf or diary. A string may contain unexpected text, so we do not guarantee that all submitted content is non-personal. No fixed automatic deletion schedule is currently implemented for this review backlog. Hosting and operational services may also retain request metadata, IP addresses and diagnostic/error records for security, rate limiting and troubleshooting; error records can include limited extraction text. These records are not used for advertising.

Your Shelf, experiences and backups

Your personal product records, use dates, body-area observations, notes, selected checks and label history remain in local app storage. They are not sent to the analytics service as diary contents or automatically published to the catalog. There is no app-account cloud sync for launch. The browser checker is separate from your iPhone Shelf.

Use Settings > Your data to export or import a backup and to delete selected local records. Backups can contain private notes and observations. When you save or share a file through Files, iCloud or another app, that destination handles the copy under its own terms. Deleting local app data does not delete exported copies or device/cloud backups. Removing the app removes its local container, but platform backups and exported files may remain.

Apple purchases and RevenueCat

Apple processes payment, renewal, cancellation and refunds. We do not receive your full payment-card or billing details. RevenueCat receives purchase and entitlement information, product identifiers and an app-generated anonymous user ID to validate access, restore purchases and provide purchase analytics. Existing purchases continue to use the same app and product identities after the rename.

“Anonymous user ID” is RevenueCat's term for a generated identifier, not a promise that records cannot be linked together. The app supplies that same identifier to PostHog so usage and purchase activity can be associated. We do not ask you to connect it to a name or email. See RevenueCat's privacy policy.

App usage analytics

PostHog processes events such as app opens, scan success/failure, saved-product actions, catalog/product views, paywall visits and purchase/restore actions. These may include a catalog product slug, input method, summary result, coverage, product identifier or price. The SDK also collects app/device context and lifecycle information. It may derive approximate location, such as country or region, from the connecting IP address. We do not request GPS location permission.

Analytics are associated with a persistent, service-generated identifier. Private product notes, experience text, label photos and full ingredient lists are not intentionally included in these events. App screen recordings/session replay are not enabled in the current app configuration. We do not use an advertising identifier for cross-app ad tracking or join these events to advertising profiles. Provider security and service metadata may be retained under their policies. See PostHog's privacy policy.

Websites and retailer links

Website hosting uses Cloudflare as each domain is migrated; the existing Vercel deployments may continue serving during the transition. Both providers process network/request information needed to serve pages. The scanning API remains hosted by Vercel. Earlier Vercel-hosted FungalScan pages used Vercel's cookieless Web Analytics for aggregate traffic. The migrated Cloudflare builds do not include that browser analytics script; hosting providers still process operational request information. The new branded site's browser text checker runs locally: it does not upload your pasted label or chosen checks to our API and does not sync them with your phone. We do not use Google Analytics or advertising trackers on these sites.

Existing fungal-site retailer links may be affiliate links, identified where shown. The retailer or affiliate network receives the referral after you click and may use its own cookies. We do not control the retailer's site. New branded-site/app shopping activation remains separate from ingredient checks; a commission does not change ingredient rules. Sources and public reference datasets have their own attribution and reuse terms.

Controls and requests

  • Use local deletion and backup controls in the iPhone app, and delete exported copies separately.
  • Manage camera/photo permissions and Apple subscriptions in iPhone Settings. Deleting data or the app does not cancel a subscription.
  • Contact support for access, correction or deletion questions about service-held records. Include only the information needed to find the relevant record; we may need to verify the request. We cannot always identify records from a name or email because the app does not require them.
  • If you contact support, the message, reply address and any attachments are received by the support email provider and used to handle the request. Do not send private diary content unless necessary.

Retention, international processing and children

Local records remain until you remove them. Exported files remain where you save them. Purchase records follow Apple/RevenueCat retention and legal requirements. Ingredient-review and diagnostic records remain as described above; not all provider records have a verified fixed retention period. Providers may process data outside your country, including in the United States. Contact support with applicable privacy-rights requests; legal rights depend on your location.

The service is not directed to children under 13. If you believe a child has submitted personal information, contact support. We may update this policy as the service changes and will update its date. Material changes will be communicated through the app, website or applicable platform notice.