bare

Privacy, plainly.

your photo

Your photos are sent to our server, analyzed once, and discarded. We never save your photos.

Our server calculates a fingerprint of the image file and uses it as a cache key, so scanning an identical photo doesn’t cost us a second analysis. The cache holds that fingerprint and the findings for one hour, then deletes both.

Your photos are not automatically saved onto your device when you take them through the app, it simply stays in memory until it’s deleted shortly after.

what we send to the ai provider

bare uses a third-party AI API to read the photo. Two things go to the AI API provider, and they’re sent separately.

  • The photo itself with instructions telling it what to look for.
  • Your findings and routine

Neither request includes your email address, your name, or your account ID. The AI API provider receives the image and the words, with no way from us to tell whose they are.

What the AI API provider does with the data sent to it is governed by their terms, not by us.

what we keep

Your account holds these:

  • your email address and password, held by our authentication provider
  • your profile answers: skin type, sensitivity, pregnancy status, and your goals
  • your preferences: brands, price range, and the fragrance-free filters
  • your shelf: which products, in which slot, how often, and why each one is there
  • your scan findings as text, for example “congestion, moderate, chin”, with the date, which AI provider produced them, and any note about the photo being hard to read
  • a count of how many scans you’ve taken this month, which is how the limit works
  • your subscription status, if you have one

We also store your IP address for one hour when you scan, as the key to a rate limit that stops one person using up the day’s analysis for everyone. It expires on its own.

Your last report, your answers and your theme choice are also kept on your own device so the app works when you reopen it.

why scanning needs an account

Every scan is an API call, therefore scans are limited per account to save resources.

We have to keep track of scans, and we do that with accounts.

deleting your data

Two separate controls, both on your account page.

Erase everything deletes your profile, preferences, shelf and scan history from our database and from this device. Your account stays, so you can keep using it. It deliberately leaves the count of scans you’ve taken this month.

Delete my account deletes the account itself, and the database removes this data at the same time: profile, preferences, shelf, scan findings, scan count and subscription status.

The same request also asks RevenueCat, who handle subscriptions, to delete their customer record for you. If they can’t be reached your account is still deleted, and the app tells you right then that this part didn’t finish, so you can ask us to chase it.

One real limit: our database provider takes routine backups for recovery, and we can’t promise your data is instantly erased from the backups when you click the button. They will age out on the provider’s schedule.

Signing out clears this device.

services we use

These companies handle parts of bare, and each one sees only what it needs.

  • The AI API provider: your photo, and your findings when the summary is written. No account details.
  • Supabase: your email, password and every account row above. Their servers for this project are in the United States.
  • Vercel: hosts the server. Every request passes through it, including the one carrying your photo, and it records standard request logs such as IP address and URL. It doesn’t store the photo.
  • Upstash Redis: the one hour cache and the rate limit. Holds image fingerprints, findings and IP addresses, each with a one hour expiry.
  • RevenueCat and Apple: subscriptions. RevenueCat receives your bare account ID so a purchase can be matched to your account. Payment happens through Apple, and no card details ever reach us.
  • Apple, if you sign in with Apple: Apple tells us the email address on your Apple ID, or a relay address if you chose to hide it. We don’t ask for your name. We keep one token from that sign-in so that deleting your bare account also ends its connection to your Apple ID; that token is never sent anywhere except back to Apple for that purpose.
  • Resend: sends the two emails bare can send you, the one confirming your address and the one for resetting a forgotten password. It receives your email address and nothing else. It never sees your photo, your findings or your routine.
  • Cloudflare: DNS for bare.report, forwards mail sent to our support address.

what bare doesn’t do

bare describes what’s visible in a photo. It does not diagnose skin conditions or diseases, does not use facial recognition, and does not try to work out who you are. It compares your scans to each other and to nobody else’s.

If something on your skin is painful, changing, bleeding, or won’t go away, see a doctor. That’s not something an app should be answering.

contact

Email support@bare.report with any questions about this page, including what we hold about you and requests to remove it. Support covers the rest.