Privacy & Data Protection

• We only process the photo you choose to analyse — nothing else.
• Your photo is sent securely to the Autoderm analysis engine and is not stored by DermaLens after your result is shown.
• No accounts, no advertising, no tracking cookies.
• Your photo is never used to improve the AI unless you explicitly opt in.

DermaLens operates the website and the submission flow. The image analysis is performed by Autoderm, manufactured by iDoc24 AB, Berzeliigatan 25, 412 53 Gothenburg, Sweden, which acts as the data controller for the analysis processing under GDPR.

DermaLens is operated by JBOX AS (Org nr: 937051301, Bryggegata 24, Mandal, Norway), built in collaboration with Autoderm.ai.

Your photo.The photo you submit is transmitted over an encrypted connection to the Autoderm engine solely to produce your assessment. Legal basis: performance of the service you requested (GDPR Art. 6(1)(b)).

Autoderm is designed for non-identifiable images: an anonymity filter is applied, EXIF metadata (such as location and device data) is stripped on ingestion, and no identifier is stored alongside the image. Even so, full GDPR protections are applied to all images as a precaution.

Your consent choice. DermaLens remembers on your own device whether you have accepted the terms and whether you opted in to AI improvement. This preference never leaves your device.

No tracking. DermaLens uses no analytics, advertising, or social-media trackers and sets no non-essential cookies.

Autoderm retains images for AI training only where you have explicitly opted in through the checkbox shown before you submit a photo. If you do not opt in, your photo is not retained for training.

You can withdraw this consent at any time, free of charge, by emailing support@autoderm.ai. Because images are stored without identifiers, deletion is carried out to the extent technically feasible.

Autoderm processes images within the EU/EEA using Google Cloud (EU regions) and Hetzner Online GmbH (Germany), under data-processing agreements. No image data is transferred outside the EEA. Aggregated, non-identifiable usage statistics may be kept for the medical device's post-market surveillance obligations (GDPR Art. 6(1)(c)).

Under GDPR you have the right of access, rectification, erasure, restriction, portability, and objection (Arts. 15–21). To exercise any of these in relation to the analysis processing, email support@autoderm.ai — you will receive a response within one month.

You also have the right to complain to a supervisory authority, for example the Swedish Authority for Privacy Protection (IMY), www.imy.se.

The AI assessment is clinical decision support intended to inform — never replace — professional judgement. It does not make decisions with legal or similarly significant effect about you, and does not constitute automated decision-making under GDPR Art. 22.

We may update this notice from time to time; the "last updated" date above shows the current version. For full detail on how the analysis engine handles data, see the Autoderm Privacy Policy, and our Terms & Conditions.