Skin scan: optionally sharing your photo

Version: scan-photo-share-v1.0 · Last updated: 7 October 2026

Also share my photo with the Refined clinical team. Keep it for up to 12 months, unless I delete it or withdraw sooner.

This second unticked choice is available only alongside your agreement to share the scan. We store the chosen photo in a private Supabase Storage bucket. Authorised clinical reviewers receive signed links that expire after 60 seconds, following an access check; every authorised photo access is logged. The photo is never public, never sent to Hermes and never used for promotion. Face geometry is not stored: concern markers shown in Studio use broad areas only.

The clinic may shorten the retention period, but this consent never permits more than 12 months. We remove access when you delete the scan or withdraw sharing, and our deletion worker removes the file. Deletion also follows account erasure and automatic expiry. A link already issued may remain valid for up to 60 seconds. An upload cannot become available after you withdraw sharing, delete the scan or its consent expires. Declining this choice still lets you share the written results.

We rely on consent under Article 6(1)(a) and explicit consent under Article 9(2)(a). Our privacy notice explains your rights.