Privacy & Data Protection

Your photo is not kept

A facial photo is sensitive personal data, so SkinScan is built not to keep it:

• Not stored: your photo is never written to disk, a database or cloud storage, and it is not logged.
• In memory only: it is analysed in the server’s memory and released as soon as your result is ready.
• No outside AI services: the analysis (Dr Maher Vision AI v4.0) runs on the clinic’s own server with open-source models. Your photo is not sent to third-party AI services.
• Not seen by staff: clinic staff and doctors cannot view your scan photos, because they are not kept.

1. Who we are

Dr. Maher Mahmoud Clinics (“we”, “the Clinic”) operates SkinScan by Dr Maher. We handle personal data in line with Egypt’s Personal Data Protection Law (Law No. 151 of 2020).

2. What happens during a scan

• In your browser: your photo is resized and re-saved, which removes hidden metadata such as GPS location.
• In transit: it is sent over an encrypted HTTPS connection to SkinScan’s server.
• Analysis: face and skin measurements run in memory; only the result (scores and explanations) is sent back.
• On your device: the photo on the results page and the downloadable report are created in your browser. Closing the page discards them.
• Product check: when you check a skincare product, the barcode is read in your browser and only its number is sent. SkinScan’s server looks that number up in Open Beauty Facts, an open product database; no picture, name or account detail is passed on, and the barcode is not logged.

3. Your clinic account

• SkinScan uses your Dr. Maher Mahmoud Clinics patient account. You sign in on the clinic website (www.drmahermahmoud.com), with email and password or with Google; SkinScan never sees your password.
• To confirm you are signed in, SkinScan checks your session with the clinic website and receives your name and email address. They are used only to show who is signed in.
• Scan results are not saved to your account or anywhere else.

4. Cookies and browser storage

• Sign-in cookie: the patient_session cookie keeps you signed in. It is set by the clinic website and shared with skinscan.drmahermahmoud.com.
• No tracking: SkinScan uses no advertising, analytics or tracking cookies.
• Browser storage: your browser remembers that you have seen the cookie notice. Photos are never saved in your browser’s storage.

5. Your rights

You can ask the Clinic to:

• give you a copy of the personal information in your patient account;
• correct your contact details;
• delete your account (you can also do this from your account on the clinic website).

Because scan photos are not kept, there is no photo to delete.

6. Contact

• Clinic: Dr. Maher Mahmoud Clinics
• Website: www.drmahermahmoud.com
• Branches: New Cairo, Mohandessin and Sheikh Zayed