Privacy Policy

Your skin data is personal. This policy explains what we collect, how we use it, and the control you have over it.

Last updated: September 8, 2026

1. Who We Are & Scope

Eczema Track ("we", "us") operates from California, United States. This policy covers the Eczema Track application and website, and describes what we collect, how we use it, and the rights you have over it.
We collect, use, and disclose your information only as described here and, where required by law, only with a valid legal basis — including your consent where consent is required.

Account information: your name and email address when you sign in.
Onboarding profile: details you provide during setup (affected areas, suspected triggers, sleep impact, goals, age range, gender).
Health information you log: daily skin scores, flare entries, suspected triggers, products used, meals, notes, skin photos, product scans, and conversations with the in-app AI.
Camera and photo library: with your permission, photos you choose to capture or upload for your journal or product scans. You can disable access anytime in your device settings.
Usage and device data: IP address, device type, operating system, pages visited, and diagnostic data collected automatically to keep the service working and secure.

The skin logs, photos, scans, profile details, and AI conversations you create are consumer health data. We collect them only with your consent, given on the onboarding consent step, and use them for one purpose: powering your own tracking, patterns, and insights.
We never sell your health data. We never share it with third parties for advertising or marketing. It is not used to train AI models.
Service providers that process it on our behalf (secure hosting, and the AI service that answers your questions) act only under our instructions and cannot use it for their own purposes.
You can withdraw consent and erase everything at any time using "Delete my account & data" on the Support page — deletion requests are honored within 45 days, including instructing our processors.

To provide and maintain the service: your logs power your calendar, patterns, and reports.
To personalize your experience — the AI features read your own logged data so answers reflect your triggers and history.
To manage your account and respond to your requests.
To send account-related emails and, only if you opt in, product updates. You can opt out anytime via the unsubscribe link.
To improve the app using aggregated, de-identified usage trends.

Service providers: infrastructure and processing vendors that operate the app on our behalf, bound to these terms.
Legal requirements: we may disclose information if required by law or a valid request from public authorities, to protect the rights, property, or safety of our users or the public, or to protect against legal liability.
Business transfers: if we are involved in a merger, acquisition, or asset sale, your data may be transferred; we will provide notice before your data becomes subject to a different privacy policy. The health-data commitments in Section 3 are not changed by this section — your health data is never sold to advertisers or data brokers.
With your consent: any other disclosure happens only if you explicitly agree.

Account information: kept for the life of your account, plus up to 24 months after closure to resolve disputes and meet legal obligations.
Health data you log: kept while your account is active so your history and patterns work; erased when you delete individual entries or your account.
Support correspondence: up to 24 months from ticket closure.
Usage data and server logs: up to 24 months for security monitoring and troubleshooting.
When retention ends, data is deleted or anonymized. Residual copies may persist briefly in encrypted backups on a fixed deletion schedule, and are not restored except for security, disaster recovery, or legal compliance.

Your information is processed in the United States and wherever our service providers operate. Where required by law, international transfers are protected by appropriate safeguards. We take all steps reasonably necessary to ensure your data is treated securely and in accordance with this policy.

You can view, edit, and delete your journal entries, routine, and reactions at any time inside the app.
You can permanently delete your account and all associated data yourself: Support page → "Delete my account & data". You can also contact us to access, correct, or delete personal data you've provided.
You can export your logged data with the report feature and bring it to your doctor.
Depending on where you live (including California and Washington), you may have additional statutory rights to access, correct, delete, or restrict the processing of your data, and to not be discriminated against for exercising them. Contact us to exercise any right.
We may retain limited information where we have a legal obligation to do so.

Eczema Track is for ages 13 and up. We do not knowingly collect personal information from children under 13, and our onboarding blocks under-13 sign-ups. If you believe a child under 13 has provided us information, contact us and we will delete it promptly.
Where the law of your state or country sets a higher age of consent for processing personal information, we may require a parent or guardian's consent. Parents tracking a child's skin should use their own account as the caregiver.

We use commercially reasonable safeguards to protect your data, and your health data is access-controlled so only your account can read it. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security — but protecting your data is core to how the app is built.

The service may link to sites we don't operate (for example, retailers for products). We have no control over their content or privacy practices — review the privacy policy of every site you visit.

We may update this policy from time to time. We'll post changes on this page, update the "Last updated" date, and for material changes notify you by email or a prominent notice in the app before they take effect.

Eczema Track provides general wellness information and pattern-tracking tools. It is not medical advice and does not diagnose, treat, or cure any condition. Always consult a qualified healthcare professional for diagnosis and treatment.

Questions about this policy or your data: visit https://eczematrack.site/contact, use the Support page in the app, or email figssupply111@gmail.com.