Privacy Policy

This policy covers Acne Evidence only. Our other products — Ingredients Inspector and Skin Evolution Suite — and the Introverted Esthi website, courses, wholesale, and appointments have their own separate policies.

See also our Terms of Service.

Everyone with an account here is a skincare professional. This policy describes how we handle your information.

You also enter information about the people you treat (see Section 3). Those people are your clients, not ours. We are not their provider, we hold no treatment records for them, and their records remain your responsibility.

We do not sell your information, and we do not share it for anyone else’s marketing purposes. We do not advertise, and we do not use your Looks, your clients’ information, or any photograph you submit to train AI models. The only third parties that process your information are the service providers that run the app on our behalf, listed in Section 5.

Your account. Name, email address, and your password or sign-in method. Handled by Clerk; we never see your password.

Your subscription. Plan, status, and billing history, handled by Stripe. We never see or store your card number. We receive limited billing information such as plan, transaction status, date and amount.

Your Looks. Whatever you type in the client field, the regions and lesion types you mark, when you saved it, and which person on the account created it.

Basic technical information. Standard server and security logs from our hosting provider, such as IP address, browser type, and request times.

To provide the app and save your work; to process subscriptions and payments; to keep the account and seat structure working; to respond to your questions and provide support; to operate, secure, and improve the app; to send transactional messages such as receipts and billing notices; and to comply with legal obligations and enforce our Terms of Service.

We do not use your information to build advertising profiles, and we do not use it for marketing without your consent.

The client field is free text and you choose what goes in it. We recommend initials or your own reference rather than a full name, and the app says so at the point where you type it.

Whatever you put there, along with the marks you make on the face diagram, you are responsible for that data and we handle it on your behalf. We use it only to provide the app to you. We do not analyse it, share it, sell it, or use it for any purpose of our own.

You are responsible for obtaining your client’s consent before entering their information, and for entering only what you need. Do not enter medical records, insurance details, or government identifiers.

If a client has questions about information held about them, they should contact the professional who treated them. We will support you in responding.

Marks on a face diagram describing a person’s skin may be considered consumer health data under Washington’s My Health My Data Act (MHMDA) and similar laws elsewhere. We treat it that way.

We collect it only because you choose to record it while using the app. We use it only to provide the app to you. We do not use it for advertising or profiling, and we do not use it to train AI models.

We do not sell consumer health data, and never will. Under the MHMDA, selling such data requires a signed authorisation; we do not seek one, because we do not sell it.

You may ask us to delete consumer health data, including from our backups, using the details in Section 11. If we refuse a request we will tell you why, and you may appeal by replying to us. The professional who entered a client’s information is responsible for obtaining any consent that client’s situation requires.

This section addresses laws with strict, specific requirements. Have it reviewed by an attorney, who may recommend a dedicated Consumer Health Data Privacy notice and separate consent language.

We share information only as needed to run the app:

Service providers (subprocessors), each acting on our instructions and not for their own purposes:

Clerk — accounts, sign-in, and account structure.
Stripe — subscriptions and payment processing.
Airtable — storage of the knowledge base and your saved Looks.
Netlify — hosting and delivery.
Anthropic — the AI review in 2nd Look. Photographs are sent to be read and are not retained by them for training.
EmailJS — sending billing emails, such as the reminder before a subscription renews. Receives your name and email address and nothing else.

Professional advisors — our accountant or attorney, under a duty of confidentiality.

Legal and safety — when required by law or subpoena, or to protect rights and safety. If we are ever compelled to disclose your data, we will tell you unless legally prevented.

Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

All four providers are based in the United States. We do not sell personal information.

On the 2nd Look plan you may submit client photographs for an independent AI review — one front photograph, and optionally the client’s left and right. This is optional. The rest of Acne Evidence works without ever supplying one.

What happens to a photograph. It is resized in your browser before it leaves your device, sent to our AI provider to be read, and stored with that consultation. It is deleted automatically 30 days after the review, by a job that runs every night. The review’s findings and your decisions about them remain, as part of the consultation record — the photograph does not.

What it is not used for. We do not use client photographs to train AI models, and our AI provider does not train on them either. They are not used for marketing, they are not shared with anyone beyond the providers in Section 5, and they are never sold.

Consent is your responsibility. A photograph of a person’s face is among the most sensitive things this tool handles, and it is consumer health data under the laws described in Section 4. Before you submit one, you must have your client’s permission. We recommend getting that in writing and keeping it with your own records.

You may ask us to delete a photograph before the 30 days are up, using the details in Section 12, and we will remove it.

We use only what is needed to keep you signed in and to process payment. No advertising cookies, no tracking, no third-party analytics. Blocking these cookies will stop sign-in from working.

Saved Looks are kept until you delete your account or ask us to remove them. Archiving a Look hides it from your list but keeps the record.

If you cancel, your Looks remain available to read and print.

If you ask us to delete your account, we remove your Looks and account data within 30 days — except records we must keep for tax and accounting purposes, such as invoices, which are retained as required by law.

Client photographs submitted for a 2nd Look review are deleted 30 days after the review, automatically. See Section 6.

On an account with seats, Looks belong to the account rather than the individual, so removing a seat does not delete their work. The account owner keeps it.

Data is encrypted in transit. Each account’s Looks are scoped to that account and checked on every request — the account owner can see the account’s Looks and a seat sees only their own. Access to production systems is limited to the operator of the service.

We rely on established providers (Clerk, Stripe, Airtable, Netlify) to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your data we will tell you promptly and tell you what happened.

Access, correct, or delete your account information, or ask us for a copy of what we hold. Email us and we will respond within 30 days. We will not charge you or treat you differently for asking.

Depending on where you live you may have additional rights, including to port or restrict certain processing, or to appeal a decision we make about your request.

If you are in Washington, the My Health My Data Act also gives you the right to withdraw consent and to have consumer health data deleted (Section 4).

Clients of an esthetician: information about you was entered by the professional who treated you. Please direct requests to them. We will support them in responding.

Acne Evidence is intended for adult licensed professionals and is not directed to children. We do not knowingly collect personal information from anyone under 18.

Saving Face Skinspa Inc. (dba Introverted Esthi)
Wendy Christman
Email: Wendy@IntrovertedEsthi.com
Mail: PO Box 479, Tenino, WA 98589
Call / Text: 360-943-1700

We may update this Privacy Policy from time to time. If we make material changes we will update the “Last updated” date and provide notice where appropriate. Your continued use after changes take effect constitutes acceptance.