Last updated: 2026-08-27Effective date: 2026-08-20
Spotty provides cosmetic and informational skin insights only. It is NOT a medical device and does not provide medical advice, diagnosis, or treatment. Skin scores, trends, and product suggestions are general guidance and may be inaccurate. Always consult a qualified dermatologist or physician about any medical concern, and never disregard professional medical advice because of something you saw in this app. If you think you may have a medical emergency, contact your doctor or emergency services immediately.
Welcome to Spotty Labs ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.
Please read this policy carefully. If you disagree with its terms, please discontinue use of our application.
The controller of your personal data is MB "Spottylabs" (company code 307613642), Pušų g. 30, Kriemalos k., Batniavos sen., Kauno r. sav., LT-54181, Lithuania. You can reach us at privacy@spottylabs.com.
We may collect the following categories of personal information:
We use the information we collect to:
For users in the European Economic Area (EEA), we process your personal data under the following legal bases:
We use the following third-party services that may receive your data:
Each third party processes your data in accordance with their own privacy policies.
To improve skincare products and research, we may share INSIGHTS derived from usage — but only in an anonymised and aggregated form that cannot identify you (for example, "salicylic-acid products are trending among users in humid climates"). We never sell or share your identity, your face photos, your individual skin metrics, or any health information.
This trend-sharing happens only if you opt in under "Anonymised trend sharing" (Account → Privacy). We also process anonymous product/usage analytics to improve the app. Both are off until you choose to enable them, and you can withdraw at any time — withdrawing is as easy as opting in.
We retain your personal data for as long as your account is active or as needed to provide you with our services. You may request deletion of your account and associated data at any time — either in-app (Account → Privacy → Delete my account, which immediately and permanently deletes your account and associated data) or by contacting us at privacy@spottylabs.com. Images uploaded for skin analysis are deleted from our servers after processing unless you explicitly choose to save them.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@spottylabs.com.
Our web application uses browser storage (localStorage / IndexedDB) to keep you signed in and to cache app data for offline use. We do not use third-party advertising cookies. Across our web and mobile apps, Firebase Analytics collects anonymised usage statistics, and Firebase Crashlytics collects crash and diagnostic reports to help us improve the application. On mobile we also use Singular, an attribution provider, to measure which ad or link brought you to Spotty and how the app is used afterwards. This uses a device advertising identifier (Android Advertising ID / iOS IDFA) together with install and in-app events such as sign-up and subscription purchases.
On iOS this only happens if you allow it: we ask for your permission through Apple's App Tracking Transparency prompt, and if you decline, no advertising identifier is collected and nothing is sent for attribution. You can change your answer at any time in iOS Settings → Privacy & Security → Tracking. On Android you can reset or limit the advertising identifier in your device settings. In the app, Account → Privacy lets you withdraw analytics consent entirely, which stops this collection on both platforms. We do not display ads in Spotty, and we do not sell your personal data.
Our service is not directed to children under the age of 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us at privacy@spottylabs.com so we can delete it.
Your information may be transferred to and processed in countries outside the European Economic Area, including the United States, where some of our service providers operate. Where we do so, we rely on a European Commission adequacy decision or on Standard Contractual Clauses approved by the European Commission. You can request a copy of the safeguards we use by contacting privacy@spottylabs.com.
We implement industry-standard security measures to protect your personal information, including encryption in transit (HTTPS/TLS), encryption at rest, and role-based access controls. However, no method of transmission over the Internet is 100% secure.
We may update this Privacy Policy from time to time. If we make a significant change, we will update the "Last updated" date and notify you in the application or by email before the change takes effect.
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Spotty Labs