Privacy

DiemSkin is operated by Diem Labs Inc., 4580 Eastgate Pkwy Unit 3, Mississauga, ON L4W 4K4, Canada. When you scan on a business's own scan page, that business decides how your information is used and Diem Labs Inc. handles it on the business's behalf. When you use diemskin.com itself (for example the demo scan, or a business account), Diem Labs Inc. is responsible.

Our privacy officer can be reached at hello@diemskin.com, or by mail at Diem Labs Inc., Attn: Privacy Officer, 4580 Eastgate Pkwy Unit 3, Mississauga, ON L4W 4K4, Canada.

• Your photo, taken or uploaded by you for the scan.
• Your skin results: cosmetic scores, an estimated skin age, findings about your skin's appearance and the recommendations created from them.
• Your name and email, when you enter them to see and receive your report, and your phone number if you choose to give it.
• What you click on your report (for example "Book now" or "Add to cart") and basic visit details: which link brought you here, the type of device and browser, and your approximate country.

We collect this directly from you. We do not buy information about you from anyone else.

To help you frame the photo and to place markers on your report, your browser finds the position of your face on your own device. These measurements never leave your device and are not stored.

Your photo is analyzed by AI only to describe the appearance of your skin, such as lines, redness, pores or dark spots.

If a law treats information from your photo as biometric information, this notice is our policy for it: it is used only to create your report, it is never sold, leased, traded or used for advertising, and your photo is permanently deleted within 90 days of your scan, or sooner if you ask.

Some businesses offer a brow preview instead of a skin scan: it shows how permanent makeup brows could look on you. Your photo and your answers (for example the look and colour you picked) are sent to an AI image service, which draws your photo with new brows. Your browser then keeps only the brow area of that picture on your own photo. We store your photo, the preview picture and your answers to show you your preview, email it to you and share it with the business. Both pictures are deleted within 90 days, or sooner if you ask. The preview is an illustration, not a guaranteed result.

Your skin results are a cosmetic assessment of how your skin looks, not a medical diagnosis. If you have a skin condition, please see a doctor or dermatologist. Some laws, such as Washington's My Health My Data Act and Nevada's similar law, may treat skin results as consumer health data. We treat them with the same care everywhere:

• we collect them only after you agree, by ticking the box before your scan;
• we use them only to create your report and show treatments or products that match it;
• we share them only with the business whose scanner you used and the service providers listed below;
• we never sell them or use them for advertising;
• you can withdraw your consent and delete them at any time.

• To analyze your photo and create your skin report.
• To email you your report, with a link only you receive where you can view it again.
• To recommend treatments or products that match your results.
• So the business can follow up with you about your results.
• To keep the service working, secure and free of abuse, and to count visits and scans.

Your report and its recommendations are produced automatically by AI. No decision with legal or similarly significant effects is made about you. You can ask us which information was used and how the report was produced, and ask a person to look at it.

When you scan on a business's page, that business sees your name, email, results and clicks so it can follow up with you. The scan is run by us, with the help of service providers for cloud hosting and storage, AI image and text analysis, email delivery and website analytics. They may use your information only to provide these services to us. We do not use your photo to train AI models.

We never sell or rent your information, and we do not share it for targeted or cross-context advertising. We may disclose information if the law requires it, to protect people's safety or our legal rights, or to a company that takes over the service, which must then follow this notice.

Your information is stored and processed on servers in the United States, so it leaves your province or country. While it is there, it is protected by the safeguards in this notice, but it may be accessible to courts and authorities in the United States under the laws there.

• Analytics: our pages use Google Analytics and Vercel Analytics to count visits and see which pages are used. They do not receive your photo, skin results, name or email.
• Visit counter: scan pages keep a random ID in your browser to count unique visitors for each link. It is not linked to your name.
• Sign-in: business accounts use a cookie to keep you signed in.
• Personal invite links: if you open a link we sent to your business (diemskin.com/p/...), a cookie remembers that link for 90 days and we record which pages of diemskin.com you view, whether you try the demo and whether you sign up, so we can follow up with you. This never happens on a business's scan page.

You can clear or block these in your browser settings, and opt out of Google Analytics with Google's browser add-on. Because we do not sell or share information for advertising, there is nothing further to opt out of, and we treat Global Privacy Control signals as such a request.

• Photo: deleted automatically 90 days after your scan.
• Results, name and email: kept while the business uses the scanner, until you ask us to delete them, or until the business closes its account, whichever comes first.
• Face position measurements: never stored.

We use encrypted connections, access controls, and access limited to people who need it to run the service. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will tell you and the authorities as the law requires.

Depending on where you live, you can:

• Delete your photo and results: delete my photo and results. It takes a minute and is permanent.
• See the information we hold about you, correct it, or get a copy of it: email hello@diemskin.com.
• Withdraw your consent at any time. This stops future use; for the scan it means deleting your data.

We reply within 30 days and may ask you to confirm your identity first. You can ask someone to make a request for you if they show us your written permission. We will never treat you differently for using these rights.

Canada: if you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to your provincial commissioner, such as the Commission d'accès à l'information in Quebec, or the Information and Privacy Commissioner in Alberta or British Columbia.

United States: if we decline your request, you can appeal by replying to our answer and we will respond within the time your state's law allows. If you disagree with the outcome, you can contact your state's Attorney General.

The skin scan is for people aged 16 and older. We do not knowingly collect information from anyone younger. If we learn that we have, we delete it.

For salons, clinics and brands that sign up, we keep account details (name, business name, email, website, phone, logo, products or services) to run the service, and billing details through our payment provider. When a business asks us to close its account, we delete its account data and its customers' scan data, except what we must keep for tax and accounting.

If we change this notice, we update the date at the top, and tell you in advance by email if a change affects how we use information you already gave us. Questions or requests: hello@diemskin.com.