Privacy policy

Your data stays yours.

Last updated 25 October 2026

Who we are

This policy covers the apps made by Sorrelpine Ltd ("we", "us"), a company registered in England and Wales (company number 17327962), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Right now that means Sheerwing, our skin progress tracker (the "app").

For the small amount of personal data described below, Sorrelpine Ltd is the data controller under UK data protection law. We run no servers that hold your data. You can reach us at hello@sorrelpine.com.

What stays on your phone

Everything you put into the app is stored only on your device, inside the app's private storage:

• your daily photos
• skin check-ins, life-factor tags and notes
• your product shelf and routine
• your settings and reminders

This data never reaches us, so we can't see it, use it or hand it to anyone. It is protected by your phone's own passcode and encryption, and you can add a Face ID lock inside the app.

Your photos

The app asks for camera permission to take your daily photo. Photos are saved inside the app and are never sent to us. A photo only leaves the app if you choose to share it, export it, save it to your camera roll, or include it in your own cloud backup.

Cloud backup (optional, off by default)

You can back up your journal and photos to your own cloud: iCloud on iPhone, or Google Drive on Android. The backup is saved in a private app folder in your Apple or Google account and goes directly from your phone to it. On Android, Google's own sign-in asks which account to use; the app only gets access to its own private folder, not the rest of your Drive. It never passes through us, and we can't see or open it. Apple and Google store it under their own privacy policies. You can turn it off or delete the backup in the app at any time.

Your phone's own iCloud or Google device backup may also include the app's data, depending on your phone settings.

Reminders and phone lock

Reminders are scheduled on your phone, not sent from a server. Face ID, Touch ID and fingerprint unlock are handled by your phone's operating system. The app only learns whether unlocking succeeded, and never receives your face or fingerprint data.

What we receive, and why

If you buy a subscription

Payments are handled by Apple or Google. We never see your card or bank details. To check whether your subscription is active, the app uses RevenueCat, which receives an anonymous app user ID and your purchase history (which plan, and when it started and renews). It does not receive your name or email.

Legal basis: providing the subscription you paid for (contract).

If you email us

We use your email and message only to reply to you. We delete support emails once the conversation is finished, and in any case within 12 months.

What we don't do

• No analytics, advertising or tracking tools, and no advertising identifiers.
• No selling or sharing of personal data.
• No AI analysis of your photos or skin.
• No profiling or automated decisions about you. The app's verdicts are calculated on your phone, for you only.

Who processes data for us

We use very few service providers, each under a contract that only lets them process data on our instructions:

• RevenueCat: subscription status.
• Apple and Google: app distribution and payments, under their own privacy policies.

RevenueCat may process purchase data outside the UK. Where it does, we rely on safeguards recognised under UK law, such as the UK International Data Transfer Agreement or Addendum.

How long we keep it

• Data on your phone: until you delete it. Settings, then Delete everything removes it immediately.
• Cloud backup: in your own iCloud or Google Drive until you delete it, in the app or in your iCloud or Google Drive storage settings. We never hold a copy.
• Purchase records: as long as needed to provide your subscription and meet legal and tax obligations.

Your rights

Under UK data protection law you have the right to access the personal data we hold about you, have it corrected or deleted, restrict or object to how we use it, and receive a copy in a portable format. Email hello@sorrelpine.com and we will reply within one month.

Most of this you can do yourself without asking. The app lets you export your data and photos at any time for free, and delete everything with one button.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.

Children

Our apps are not directed at children under 13, and we don't knowingly collect personal data from them.

Not medical advice

The app shows patterns in what you log. It does not diagnose, treat or prevent any condition.

Changes to this policy

If we change how we handle data, we'll update this page and the date at the top. If the change is significant, we'll tell you in the app before it takes effect.