Privacy and use of information
Your photo. An informed choice.
How information is used in the Epiderm AI facial assessment journey. Updated September 15, 2026.
Before submitting a photo
You can take or choose a photo without sending it. Only continuing after explicit consent and confirmation that you are at least 18 sends it for processing. Use only your own photo. The assessment prepares you for an aesthetic consultation and is not a medical diagnosis.
What is sent, and to whom
The photo is resized and its embedded metadata is removed before it is sent through OpenRouter to the model provider for processing. Google Gemini is the default model for this journey. Submitting a photo involves processing by an external provider under its terms and policies. We do not promise deletion by that provider or that it will not use the information.
What Epiderm AI stores
This journey stores assessment observations, language, creation time, report access status, and a payment reference if applicable. The photo file is not saved in the journey’s report storage; it is held in memory during processing. The on-screen photo is held temporarily in your browser and is not stored for retrieval after a refresh.
Report access and deletion
A session cookie provides access to the assessment for up to 7 days after creation. Access expires after that time. You can delete the assessment earlier using the results screen; this also removes access to an unlocked report. Save a copy if you want to take it to a consultation. Expired records are scheduled for daily cleanup; provider backups and logs may follow different retention periods.
Contact details for consultation requests
When you choose to request a callback, we collect your name, phone number, city or area, and email address. Email verification and consent to use your contact details are required before submission. We also store verification status, the assessment reference, request date, consent and request status. The Epiderm AI team uses this information to manage and respond to your request.
Service providers and separate assessment data
Service providers approved for use by Epiderm AI may process contact data for email verification, internal request management and team notifications. Contact details and the assessment reference are sent to the lead-management sheet and an email notification. Facial images, analysis and assessment reports are not copied into that sheet or those notifications. The report remains in Epiderm AI; the photo is used temporarily within the assessment journey and by the processing provider as described above. The assessment reference does not grant access to the report.
Sharing with a clinic or professional
A callback request goes to the Epiderm AI team and does not automatically send your data to a clinic. Sharing with a clinic or professional requires your choice to proceed with professional consultation or sharing. This version does not automatically transfer data to clinics.
Contact-data retention and deletion
The contact-request record in Epiderm AI has a 30-day expiry, after which it is eligible for removal by the cleanup task. Deleting an assessment does not cancel an already submitted callback request or automatically delete follow-up copies held by service providers or the email-verification record. To cancel a request or request deletion, including copies in the sheet and email, use the Contact page. Provider backups and logs may follow different retention periods.
Payment
A fuller report is offered for a one-time payment of ₪20 when additional information is available. Payment takes place on a Stripe-hosted page. Card details do not pass through a payment form on our site. The payment provider may retain information needed to handle the transaction under its own policy.
Cookies and other services
This journey uses a cookie needed to access your assessment. In addition, only if you accept, we use analytics cookies (an anonymous identifier and Google Analytics measurement) to understand which pages and buttons are used and to improve the website. Without your consent no measurement tool is loaded, and you can change your choice at any time through “Cookie settings” at the bottom of the site. Professional login screens use separate authentication mechanisms. We have not added advertising trackers to the patient journey.
Contact
For questions about information use, deletion requests, or cancellation of a contact request, use the form on the Contact page. You do not need to send us another facial photo.
OpenRouter · Google · Stripe
Back to the homepage