Learn About Your
Skin's Appearance

Privacy Policy

Last updated: April 22, 2026

DermaRash ("we", "our", or "us"), operated by Evren Haznedaroglu, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the DermaRash mobile application.

1. Information We Collect

1.1 Information You Provide

• Skin photos: Images you capture or upload for analysis.
• Symptom data: Body location, duration, symptoms, medications, and other health context you enter in the form.
• Account information: Your Sign in with Apple identifier and any name or email Apple shares with your permission.
• Chat messages: Text you send in the AI chat feature.

1.2 Automatically Collected Information

• Device type and operating system version (for compatibility purposes).
• App usage data (e.g., feature interactions) collected anonymously.
• Subscription and purchase history managed by Apple/RevenueCat.

2. How We Use Your Information

• To provide AI-powered educational scan summaries, reference reports, and in-app educational responses.
• To power the AI chat feature with educational skin appearance responses.
• To maintain your scan history if you choose to save it.
• To process and manage in-app subscriptions.
• To respond to support requests.

We do NOT use your photos, symptom data, or chat messages to train or fine-tune AI models. The AI models (LLaVA and Llama 3.1) are open-source models that we run locally on our own servers; your data is used one time to produce your report and is not added to any training dataset.

3. Data Storage & Security

Skin photos, symptom form details, and chat messages are processed on our secure server at derma.idakim.net. Scan photos are stored in scan history only if you explicitly choose Save to History before analysis. Unsaved scans are processed only to deliver the current report and are not retained as part of your history. All data transmissions between the app and our servers use HTTPS encryption. We implement industry-standard security measures including access controls and encrypted storage.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with:

• Apple Inc. — For in-app purchase and subscription management.
• RevenueCat — For subscription analytics (anonymised).
• Law enforcement — If required by law or legal process.

We do not share your health images, symptom form data, or chat content with any outside AI service. See Section 5 for full details on what is sent to our own AI server.

5. Data Sent to Our AI Service

When you tap Analyze, the DermaRash app transmits the following information directly to our own AI server (operated by the DermaRash team at derma.idakim.net) over an encrypted HTTPS connection:

• The skin photo you captured or selected.
• The body location you chose.
• The duration of the condition you entered.
• The symptoms and current medications you selected.
• Any free-text notes you added (first appearance, triggers, recent changes).
• Your selected app language (to localise the report).

Who receives this data. Only our own self-hosted DermaRash AI server receives this data. The server is operated by the DermaRash team and runs on infrastructure we control.

Third-party AI services: none. DermaRash does NOT use any hosted third-party AI service. The underlying models — LLaVA (vision) and Llama 3.1 (text) — are open-source models running locally on our own servers. Your photos and symptom data are never transmitted to any outside AI service.

How the data is used. The photo and form fields are processed one time to generate your informational educational report with source citations. The data is not used to train AI models, not used for advertising, not sold, and not combined with any advertising or marketing profile.

Retention. If you save the scan to your history (Premium), the photo and report are retained only for as long as you keep them. You can delete any individual scan, clear your full scan history, or delete your entire account and all associated data at any time from Settings → Privacy & Data. If you do not save the scan, the photo is removed from our server after analysis.

Your control. You must explicitly grant data processing consent in the app before any scan can be submitted. You can revoke that consent at any time from Settings → Privacy Controls → Revoke Consent, which stops any further submissions.

6. Your Rights

• Access: You may request a copy of your stored data by contacting us.
• Deletion: You may delete your scan history at any time from Settings → Delete History. To delete your account and all associated data, use Settings → Delete Account.
• Consent Withdrawal: You may revoke your consent to data processing at any time from Settings → Privacy Controls.
• Portability: Contact us to request your data in a portable format.

If you are in the European Economic Area (EEA), you have rights under the GDPR. If you are in California, you have rights under the CCPA. Contact us at info@idakimi.com to exercise any of these rights.

7. Children's Privacy

DermaRash is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

8. Health Data

DermaRash may process photos and text that contain sensitive health-related information. This data is used solely to provide AI-generated educational observations, visual reference notes, public reading links, and educational chat responses inside the app. We are not a covered entity under HIPAA, and DermaRash is not a medical device under FDA, EU MDR, or UK MHRA rules. Results are informational only and are not diagnoses, prescriptions, or treatment instructions.

9. Retention

Scans that you explicitly save to history remain available until you delete them. Unsaved scans are processed only to deliver the current report and are not kept as part of your scan history. You may delete any individual scan, clear your full history, or delete your account and associated saved personal data at any time from the app.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via in-app notification. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests:
Evren Haznedaroglu
Email: info@idakimi.com
Phone: +44 744 192 2077

---

End User License Agreement (EULA)

also referred to as "Terms of Use"

Last updated: April 21, 2026

This End User License Agreement ("EULA" or "Terms") is a binding legal agreement between you and Evren Haznedaroglu ("we", "us", or "our") governing your use of the DermaRash mobile application ("App"). By downloading, installing, or using the App, you agree to be bound by this EULA and Apple's Standard EULA referenced above. If you do not agree, do not use the App.

1. Acceptance of Terms

By accessing or using DermaRash, you confirm that you are at least 13 years of age (or 16 in the EEA), and that you agree to these Terms and our Privacy Policy.

2. App Notice — PLEASE READ CAREFULLY

• DermaRash does not replace professional medical services.
• The AI models may produce inaccurate, incomplete, or misleading results.
• Do not use the app as an emergency, treatment, or decision-making tool.
• We are not responsible for any harm resulting from reliance on app-generated content.

3. License

We grant you a limited, non-exclusive, non-transferable, revocable license to use the App for your personal, non-commercial purposes. You may not:

• Copy, modify, distribute, sell, or lease any part of our App.
• Reverse-engineer or attempt to extract the source code of the App.
• Use the App to build a competing product or service.
• Submit false, misleading, or fraudulent information.

4. Subscriptions & Payments

• DermaRash offers optional Premium subscriptions (Weekly, Monthly, Yearly) that unlock additional features.
• Subscriptions are processed through Apple's in-app purchase system and governed by Apple's Terms of Service.
• Subscriptions auto-renew unless cancelled at least 24 hours before the end of the current period.
• You can manage and cancel subscriptions through your Apple ID account settings.
• No refunds are provided for partial subscription periods, except as required by applicable law.
• Prices are subject to change. You will be notified in advance of any price changes.

5. User Responsibilities

• You are responsible for all activity that occurs under your account.
• You must not use the App for any illegal or unauthorized purpose.
• You must not submit images of other persons without their explicit consent.
• You agree not to submit offensive, illegal, or inappropriate content.

6. Intellectual Property

All content, features, and functionality of DermaRash — including but not limited to text, graphics, logos, and software — are owned by Evren Haznedaroglu and are protected by intellectual property laws. AI-generated reports are provided for your personal use only.

7. Disclaimer of Warranties

The App is provided "as is" and "as available" without warranties of any kind. We do not warrant that the App will be uninterrupted, error-free, or free of viruses. We do not warrant the accuracy, completeness, or usefulness of any AI-generated content.

8. Limitation of Liability

To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of, or inability to use, the App or any content generated by it. This includes any health decisions made based on AI-generated analysis.

9. Governing Law

These Terms shall be governed by and construed in accordance with the laws of England and Wales, without regard to its conflict of law provisions.

10. Changes to Terms

We reserve the right to modify these Terms at any time. We will notify you of material changes via in-app notification. Your continued use after the effective date constitutes acceptance.

11. Contact

For questions about these Terms:
Evren Haznedaroglu
Email: info@idakimi.com
Phone: +44 744 192 2077