This is an English translation of the Chinese 《瓶瓶隐私政策》. If there is any inconsistency between the Chinese and English versions, the Chinese version prevails.
PingPing helps you manage your own skincare products, build morning and evening routines based on ingredients, and keep track of how your skin is doing. Our principle: if it can be done on your phone, it stays on your phone. This policy explains what information stays on your phone, what is sent to our servers, and what it is used for.
1. Information stored only on your phone
- Skin photos: stored only in PingPing's private folder on your phone, with system file encryption turned on. Skin photos are never uploaded to PingPing's servers and are not used for any analysis. They are included in your own iCloud backup (handled by Apple according to your iCloud settings).
- Cabinet, skincare plan, check-in history, skin self-ratings and diary: stored on your phone. Your plan and ingredient-conflict checks are calculated by rules running on your phone.
- Ingredient-list and order screenshots: text is recognized on your phone; the images themselves are not uploaded.
- Photos you take of your products (used as product images in your Cabinet): stored only on your phone.
- 3D face models: when you choose to use "3D face scan" in your skin diary, PingPing uses the iPhone's front TrueDepth camera (Apple ARKit face tracking) to capture a geometric mesh of your face and generates a texture on your phone from the frames captured during the scan. Face data and models are processed and stored only on this phone: they are not uploaded to PingPing's servers, not shared with any third party, and not included in iCloud backups. They are used only so you can rotate and view them yourself and compare before and after — never for skin analysis, identification, advertising or any kind of inference. A model is kept until you delete the related diary entry, delete all 3D models in "Me", clear your data, or delete the app.
- Sleep, workout and menstrual data (from Apple Health): only after you tap "Connect Health" in PingPing (menstrual records require a separate tap on "Read period records") and allow access in the system prompt, PingPing only reads sleep analysis records (how long you slept each night, when you fell asleep and woke up, sleep stages), workout records from the last two weeks (workout type, duration, start time, whether outdoors) and menstrual records from roughly the last six months (which days you had a period). These are used on your phone to find patterns together with your skin diary ratings, to remind you to wash your face and reapply sunscreen after workouts, and to estimate your premenstrual and period days from your records and remind you how to care for your skin on those days. Period estimates are only projections from your records — not a medical judgment, and not for contraception or trying to conceive. This data is not uploaded to PingPing's servers, not sent to PingPing Advisor or any third party, and not used for advertising or marketing, and PingPing never writes any data to Health. You can turn this off at any time in Settings › Health › Data Access & Devices › PingPing.
- Location and weather: only after you choose "Use my approximate location" in "Weather care" and allow it in the system prompt, PingPing reads your phone's approximate location (approximate is the system default), rounds the coordinates to two decimal places (about 1 km), and uses the system's WeatherKit to look up local UV, humidity, temperature and wind from Apple Weather, in order to give sunscreen and moisturizing suggestions and sunscreen reapplication reminders. You can also skip location access and type in a city name instead (the system map service converts the city name into coordinates). Your location is not uploaded to PingPing's servers and not sent to PingPing Advisor; weather results are cached only on your phone. You can turn this off at any time in Me › Privacy & data › Weather, or turn off location access in Settings › Privacy & Security › Location Services › PingPing. Weather data comes from Apple Weather; see the link at the bottom of the weather page in the app for data source information.
2. Information sent to our servers
| Information | When it is sent | Purpose |
|---|---|---|
| A randomly generated device identifier | The first time you use an online feature | To obtain an access token and count each device's daily use of smart features, to prevent abuse. The server stores only a hash of the token. |
| Product photos (products only) | Only when you use "Snap the front, AI identifies it and fills in ingredients" or "Add in bulk by photo", after you agree on first use | To identify which skincare products are in the photo. The photo is used only for this recognition and discarded right after — it is not stored. Please don't capture faces or other people. |
| Product brand and name | After you use "Fill in ingredients online" or photo recognition | We first look up the ingredient list in our product library; if it isn't there, we use a search service to find the ingredient list on public web pages. Product names and ingredients found are added to the public product library and contain no personal information. |
| Recognized ingredient-list / order text | When you use "Snap ingredient list" or "Import from order screenshot" | To work out the product name, category and ingredients. |
| Advisor conversations, plus your product names, skin type, skincare goals and current plan | When you ask PingPing Advisor a question | To generate answers and suggested actions. |
| Your conversations with the Advisor | Only after you turn on "Help improve PingPing Advisor" in Me › Privacy & data (off by default) | Stored on the server for 30 days with the device identifier removed, to improve the quality of the Advisor's answers, then deleted automatically. Only PingPing's administrators can view them; they are not used for advertising and not provided to third parties. Your Cabinet, self-ratings and device information are not stored. You can turn this off at any time, and nothing more is stored once it's off. |
| Your recent skin self-ratings | Only when you turn on "Let PingPing Advisor read my self-ratings" in "Me" | So the Advisor can take your records into account when answering. |
| Product names and ingredients you choose to contribute | When you choose "Contribute to product library" while adding a product | Added to the public product library after review; contains no personal information. |
Product photos, ingredient-list text, order text and Advisor conversations are processed by third-party large language model services, and product brands and names are looked up through a third-party search service — all only to generate results in real time. Apart from the conversations saved after you turn on "Help improve PingPing Advisor" as described in the table above, our servers do not store these photos, text or conversations; logs record only the request path, status and response time.
3. What we don't do
- We don't do AI analysis of your face or skin, and we don't upload skin photos, 3D face models, sleep, workout or menstrual data, or your location. Photo product recognition only recognizes products, not people.
- We don't require you to register an account, and we don't collect your name, phone number or contacts.
- We don't do ad tracking, and we don't share data with third parties for marketing.
4. Your choices
- In "Me", you can at any time turn off "Let PingPing Advisor read my self-ratings", delete photos on this device, delete all 3D face models, or clear all data.
- Deleting the app also deletes all PingPing data on your phone (your iCloud backups are handled according to Apple's rules).
- To delete records on our servers associated with your device identifier, please contact us at the email address below.
5. Minors
PingPing is intended for adults. Users under 14 should use it only with the consent and guidance of a parent or guardian.
6. Health notice
PingPing provides everyday skincare suggestions, not medical diagnosis. If you have pus, widespread redness and swelling, severe pain or similar symptoms, please see a dermatologist at a hospital promptly.
7. Contact us
Email: notice@keorigin.com. If this policy is updated, we will publish the changes on this page and update the effective date.