Privacy Policy

Effective 2 August 2026

Who we are

Skint? is made by Joel White, based in the United Kingdom. For questions, or anything about your data, email customerservice@getskint.uk.

What we collect

• Account. With an email account: your email address and password (the password is only ever stored as a secure hash). With Sign in with Apple: your name if you share it, and the email Apple gives us. With Apple this can be a private relay address if you choose Hide My Email. As a guest: no personal details at all, just a random identifier so your scan allowance works.
• Scan photos. The photo you scan is sent securely to our server so the garment can be identified and priced. It is analysed by OpenAI's vision model, and on detailed scans it may also be sent to eBay's reverse-image search to find matching listings. It is not kept on our servers. The saved copy lives on your device only.
• Where you're based. If you tell us your city, it is stored on your device only. Each scan sends a broad price band derived from it (such as "London-level prices") so repair estimates match your area. The band is used to price that scan and is not kept on our servers. Setting a city is optional and you can change or clear it in Settings.
• Where you found it. If you tag a find with the shop you found it in, the tag is stored on your device only. If you grant location access, the spot where you scanned is saved into that tag, again on your device only, so the app can fill the shop in for you next time you're stood there. Your location never leaves your phone and we never receive it. Location access is optional, the shop tag works fully without it, and you can turn it off any time in your iPhone's Settings.
• Everything else. Scan results, your sticker book and your settings are stored on your device only, unless you choose to send us accuracy feedback (see below). Our infrastructure keeps short-lived technical logs (IP address, timestamps) to run and secure the service.
• Sharing stickers. If you share a sticker, the image is created on your device and handed straight to the app you choose. We never receive, store or track what you share.
• Accuracy feedback. If you answer the "Was this accurate?" question on a receipt, we store your vote and a short text summary of that scan's result (item name, prices, confidence) so we can find and fix bad scans. Your photos are never included.

What we use it for

Signing you in, pricing your scans, and fixing bad scans when you send accuracy feedback. That's it. No ads, no tracking, no analytics SDKs, and we never sell your data.

Our lawful basis

Under UK GDPR we process your data on two bases. To run the app for you, such as signing you in and pricing a scan, we rely on performance of our contract with you. To keep the service secure and working, such as the short-lived technical logs, we rely on our legitimate interests. You can stop this at any time by deleting your account.

Who processes it

Supabase runs our accounts and backend. OpenAI analyses scan photos. Under its API terms your images aren't used to train models and may be kept up to 30 days for abuse monitoring, then deleted. eBay provides market price comparisons. It receives search terms about the garment, and on detailed scans the garment photo itself for reverse-image matching, but never your account details. When you use Sign in with Apple, Apple confirms your identity to us. We receive only your email and, if you share it, your name.

International transfers

Some processing happens outside the UK. When a scan photo is sent to OpenAI or eBay it is processed on servers in the United States. Those transfers are covered by data processing agreements that include the UK and EU Standard Contractual Clauses, so your data keeps a level of protection equivalent to UK law.

Retention and deletion

Account data is kept until you delete your account. In Settings, tap Delete account to remove it immediately and permanently. Data on your device is yours: delete a receipt, or the app, and it's gone.

Your rights

Under UK GDPR you can ask for a copy of your data, have it corrected or deleted, or have it exported. Email customerservice@getskint.uk. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Children

Skint? is not directed at children under 13 and we don't knowingly collect their data.

Changes

If this policy changes we'll update this page and revise the effective date above.