Privacy, plainly.

your photo

When you scan, your photo is sent once to our server, which passes it to an AI vision service for a single analysis pass. We hold it in memory for that request only. It is never written to disk, logged, or stored on our side. What comes back (and what we keep server-side, briefly, to avoid re-analyzing the identical photo) is the structured list of observations, keyed by a fingerprint of the image, not the image.

This is true whether or not you have an account. There is no setting that starts storing your photos, because there is nowhere for them to go. An account stores the words we wrote about your skin, never the picture.

The AI provider does see your photo. bare runs on Google’s paid Gemini tier, whose terms say Google doesn’t use prompts or responses to improve their products, and keeps them only briefly for safety monitoring and legal reasons. Your photo is not training data and no reviewer reads it to make the model better.

This used to say the opposite, because it used to be true: on Google’s free tier the terms do allow inputs to be used for product improvement, and human reviewers may read them. bare moved to the paid tier, so that clause no longer applies. If you run your own copy of bare with a free key, it applies to you.

without an account

Your answers, routine, and reports live in this browser’s local storage, on your device. No tracking, no analytics, and nothing of yours on our server to delete. Clearing it below, or clearing your browser data, is total deletion.

with an account

An account exists so your things survive a new phone. If you make one, these are stored on our server, in a row that belongs to you:

• your profile answers: skin type, sensitivity, pregnancy status, and your goals
• your product preferences: brands, price range, and the fragrance-free filters
• your shelf: which products, in which slot, how often, and why each one is there
• your scan findings as text, for example “congestion, moderate” — with the date, and which AI provider produced them

That is the whole list. Not your photos, not your email conversations, not your location, not an advertising profile. We don’t sell any of it and there are no third-party trackers in this app.

Your email address and password are held by our authentication provider (Supabase), whose servers are in the United States. We never see your password.

deleting it

Two different things, on your account page:

Erase everything removes your profile, preferences, shelf, and scan history from our server and from this device, and leaves the account itself so you can keep using it.

Delete my account removes the account and every row attached to it. It is a real delete, not a flag that hides you — the rows are removed by the database itself, at the same moment the account goes. We keep no archive and no backup copy of your data to restore from, so there is nothing left for us to hand over or lose later.

Signing out also clears this device, so a shared phone keeps nothing of yours.

what bare is not

bare describes what’s visible in a photo. It does not diagnose skin conditions or diseases, does not use facial recognition, and does not try to identify you. The analysis only describes visible skin characteristics. If something on your skin is painful, changing, bleeding, or persistent, that’s a dermatologist’s job, not an app’s.