Privacy Policy

1. Who we are and the scope of this policy

This Privacy Policy explains how Blemmy LLC, a Tennessee limited liability company (“Blemmy,” “we,” “us,” or “our”), handles information when you use the Blemmy iPhone app, visit blem.my, or contact us. Blemmy LLC is responsible for the processing described in this policy.

Washington residents should also read our separate Consumer Health Data Privacy Policy.

2. Information processed in the app

The app processes and stores the following information locally on your device:

• photos you capture and information about each capture, such as date and time, camera and device information, crop and orientation, head-pose angles, face-to-camera distance, lighting or exposure measurements, quality warnings, and processing version;
• skincare product information, including product name, brand, category, and notes;
• routine schedules, completion or skip history, and reminder preferences; and
• app settings and onboarding choices.

Blemmy uses this information to provide the features you request, including guided capture, photo alignment and comparison, progress views, routines, and reminders. The processing occurs on your device. We do not operate an account system or server that receives this in-app information.

3. Camera, face tracking, and face data

During guided capture, Blemmy uses Apple’s ARKit and, on supported devices, the TrueDepth camera to detect that a face is present and estimate its position, orientation, movement, and distance from the camera. This lets the app provide framing and pose guidance and capture more consistently aligned photos.

Blemmy retains the photo you choose to capture and the capture measurements listed in Section 2 until you delete them. It does not retain the ARKit face mesh, facial expressions or blend-shape values, raw depth maps, or a biometric template. Blemmy does not use face data to identify or authenticate you, build an advertising profile, or infer your identity. Face tracking and related measurements are processed on your device and are not sent to Blemmy or a third party.

4. Age assurance

Blemmy is intended for people age 16 and older. Where iOS reports that local law requires an age check, Blemmy uses Apple’s Declared Age Range framework to request an age range for the Apple Account. Blemmy receives only the range or a status indicating that no range was shared—not the account holder’s birth date. The result is used on the device only to decide whether the app is available. Blemmy does not transmit or retain the result, and a declined, canceled, uncertain, or failed request can be tried again.

5. Backups, Photos, and exports

Your local Blemmy data may be included in an iCloud or computer backup, depending on your device and backup settings. Apple provides those backup mechanisms, and your settings control whether they are used. If you choose “Save to Photos,” the selected image is copied to your Photos library. If you use an export or the iOS share sheet, a copy is sent to the person, app, or service you choose. Once a copy leaves Blemmy, its handling depends on your settings and the selected recipient or service.

6. Device permissions

Blemmy asks for access only when it is needed for a feature you choose:

• Camera: to provide capture guidance and take photos.
• Photos (add only): to save an individual image when you request it.
• Notifications: to schedule optional capture, routine, and trial reminders locally on your device. Blemmy does not use a remote push-notification service or receive a push token.

You can change permissions in iOS Settings. Blemmy does not request access to your precise location, contacts, microphone, or advertising identifier. Changing a permission does not delete information you previously saved.

7. Purchases and Apple services

Apple processes subscriptions through the App Store. Blemmy uses StoreKit on your device to retrieve product information, determine offer eligibility, and verify an active entitlement. We do not receive your payment-card details. Apple may provide developers with sales and performance reports and, depending on your Apple settings, diagnostic information. Those reports do not include your Blemmy photos, routines, or history. Apple handles its information under its own privacy policy.

8. Communications with us

If you email us, we receive the email address, message, attachments, and ordinary delivery information you provide. Please do not send skin photos or sensitive health information unless it is necessary for your request. We use communications to respond, provide support, protect Blemmy, and comply with law. Our email-routing and mailbox providers process those messages for us. We retain them only as long as reasonably needed for those purposes, including any legal, security, or recordkeeping needs.

9. Website information

This website does not use user accounts, advertising cookies, or analytics. Cloudflare and our website host process limited technical information needed to deliver and secure the site, such as IP address, browser and device information, request date and time, requested page, referring page, and security signals. We use this information only for site delivery, reliability, abuse prevention, and security. Technical logs are kept according to the shortest periods reasonably needed for those purposes and provider settings.

Because the site does not use advertising or cross-site tracking technologies, it does not change its behavior in response to “Do Not Track” or Global Privacy Control signals.

10. How information is disclosed

We do not sell or rent personal information, and we do not share personal information for cross-context behavioral advertising. We disclose information only as follows:

• At your direction: to Apple services and any destination you choose for a backup, saved photo, or export.
• Service providers: to Cloudflare, our website host, and our email providers, limited to the website or communication information they process to provide those services.
• Legal and safety reasons: when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or establish or defend legal claims.
• Business changes: in connection with a merger, financing, reorganization, or sale of assets, subject to applicable law and appropriate notice.

Because Blemmy does not receive your photos, routines, or history, it cannot disclose that in-app information from a Blemmy server.

11. Retention, deletion, and security

In-app information remains on your device until you delete an item, use “Delete All Data,” or delete the app. Deleting local app data does not automatically delete copies already placed in Photos, a backup, an export, or another service. Those copies must be managed through the relevant service or recipient.

Blemmy stores app images using iOS data protection and relies on Apple’s platform security for local storage. We use reasonable administrative and technical measures for the limited website and communication information we receive. No storage or transmission method is guaranteed to be completely secure.

12. Your choices and privacy rights

In Blemmy’s Privacy & Data settings, you can export capture metadata, routines, and history as a readable JSON file. Photos can be saved individually. You can delete individual captures or all photos, products, routines, history, settings, and reminders stored by the app. Because we do not receive or maintain that data, we cannot access, retrieve, or delete it for you.

Depending on where you live, you may have rights concerning personal information we do hold, including rights to request access, correction, deletion, restriction, portability, or an objection to certain processing. You may also have a right to appeal a decision or complain to your local privacy regulator. Send requests to privacy@blem.my. We may need to verify your identity and may retain information where law permits or requires it. We will not discriminate against you for exercising a privacy right.

13. International information

Blemmy is based in the United States. Website and communication providers may process information in the United States and other countries, where privacy laws may differ. Where required, we use legally recognized safeguards for international transfers.

For people in the European Economic Area, United Kingdom, or Switzerland, the legal bases for the limited processing described here depend on the context: providing app features or support you request, our legitimate interests in operating and securing Blemmy and responding to communications, consent where required, and compliance with legal obligations. You may object to processing based on legitimate interests and may withdraw consent at any time where consent applies, without affecting earlier lawful processing. You may complain to the data-protection authority where you live or work.

14. Children’s privacy

Blemmy is intended only for people age 16 and older. We do not knowingly receive personal information from anyone under 16. If you believe a person under 16 has sent personal information to us through email or the website, contact us so we can review and delete it as appropriate. In-app information remains on the user’s device and is not received by Blemmy.

15. Changes to this policy

We may update this policy as Blemmy changes. We will post the revised version here and update the effective date. If a change materially affects how information is handled, we will provide additional notice where appropriate or required by law.

16. Contact

Questions or privacy requests can be sent to:

Blemmy LLC
116 Agnes Road, Suite 200
Knoxville, TN 37919
United States
privacy@blem.my