Privacy Policy

Effective 18 September 2026

Who we are

Skint? is made by Joel White, based in the United Kingdom. For questions, or anything about your data, email customerservice@getskint.uk.

What we collect

• Account. With an email account: your email address and password (the password is only ever stored as a secure hash). With Sign in with Apple: your name if you share it, and the email Apple gives us. With Apple this can be a private relay address if you choose Hide My Email. As a guest: no personal details at all, just a random identifier so your scan allowance works.
• Scan photos. The photo you scan is sent securely to our server so the garment can be identified and priced. It is analysed by OpenAI's vision model, and on detailed scans it may also be sent to eBay's reverse-image search to find matching listings. It is not kept on our servers. The saved copy lives on your device only.
• Where you're based. If you tell us your city, it is stored on your device only. Each scan sends a broad price band derived from it (such as "London-level prices") so repair estimates match your area. The band is used to price that scan and is not kept on our servers. Setting a city is optional and you can change or clear it in Settings.
• Where you found it. If you tag a find with the shop you found it in, the tag is stored on your device only. If you grant location access, the spot where you scanned is saved into that tag, again on your device only, so the app can fill the shop in for you next time you're stood there. Your location never leaves your phone and we never receive it. Location access is optional, the shop tag works fully without it, and you can turn it off any time in your iPhone's Settings.
• Everything else. Scan results, your sticker book and your settings are stored on your device only, unless you choose to send us accuracy feedback (see below). Our infrastructure keeps short-lived technical logs (IP address, timestamps) to run and secure the service.
• Sharing stickers. If you share a sticker, the image is created on your device and handed straight to the app you choose. We never receive, store or track what you share.
• Accuracy feedback. If you answer the "Was this accurate?" question on a receipt, we store your vote and a short text summary of that scan's result (item name, prices, confidence) so we can find and fix bad scans. Your photos are never included.

What we use it for

Signing you in, pricing your scans, and fixing bad scans when you send accuracy feedback. That's it. No ads, no tracking, no analytics SDKs, and we never sell your data.

Our lawful basis

Under UK GDPR we process your data on two bases. To run the app for you, such as signing you in and pricing a scan, we rely on performance of our contract with you. To keep the service secure and working, such as the short-lived technical logs and the guest scan count described under Retention and deletion, we rely on our legitimate interests. Deleting your account stops us processing it to run the app, with the one narrow exception explained there.

Who processes it

Supabase runs our accounts and backend. OpenAI analyses scan photos. Under its API terms your images aren't used to train models and may be kept up to 30 days for abuse monitoring, then deleted. eBay provides market price comparisons. It receives search terms about the garment, and on detailed scans the garment photo itself for reverse-image matching, but never your account details. When you use Sign in with Apple, Apple confirms your identity to us. We receive only your email and, if you share it, your name. RevenueCat manages Skint? Premium subscriptions on our behalf: it receives your account identifier and the App Store's record of your purchase (which plan, when it started and when it renews), never your card details, which stay with Apple. Resend delivers our sign-in and verification emails, and so receives your email address.

International transfers

Some processing happens outside the UK. When a scan photo is sent to OpenAI or eBay, or a purchase record to RevenueCat, it is processed on servers in the United States. Those transfers are covered by data processing agreements that include the UK and EU Standard Contractual Clauses, so your data keeps a level of protection equivalent to UK law.

Retention and deletion

Account data is kept until you delete your account. In Settings, tap Delete account to remove it immediately and permanently. Data on your device is yours: delete a receipt, or the app, and it's gone.

One small thing outlives a deleted guest account, and only a guest one. Guests get a few free scans a month, and deleting the account would otherwise hand out a fresh batch every time. So when a guest deletes after scanning, we keep the number of scans they had used, and nothing else, against a one-way scrambled form of their network address, until the end of that calendar month. Your address itself is never stored. There is no account, email, photo or scan in it, and it can't be used to identify you or build a profile. Deleting a registered account leaves nothing behind.

Your rights

Under UK GDPR you can ask for a copy of your data, have it corrected or deleted, or have it exported. Email customerservice@getskint.uk. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Children

Skint? is not directed at children under 13 and we don't knowingly collect their data.

Changes

If this policy changes we'll update this page and revise the effective date above.