Culprit is built and operated by Hadger studio. This policy describes how Culprit handles your data. The short version: Culprit collects nothing.
The products you add to your shelf, your AM/PM routine, your daily skin-reaction notes (clear, a little reactive, or a breakout, with an optional area), and the optional reaction photo are all stored locally on your device via Apple's SwiftData framework, protected by full-device encryption. The optional reaction photo is a memory aid stored only on your device — it is never uploaded and never run through any cloud or on-device vision classifier. Nothing you log is sent to any server.
The product-and-reaction read Culprit shows you is computed by a rule-based engine that runs entirely on your iPhone. It compares the products you logged against the days your skin reacted — for example, which product appeared most often on your most reactive days. It is not a cloud model and not a guess. Culprit is a cosmetic product-reaction tracker, not a diagnosis: it names a product to suspect and never claims to diagnose, treat, or name any skin condition. For anything about your skin, talk to a dermatologist.
Culprit uses Apple's StoreKit framework for subscription and purchase verification. When you start a free trial, subscribe, buy the lifetime unlock, or restore purchases, the StoreKit framework contacts Apple's App Store endpoints. This is Apple-controlled and unavoidable for any paid app on the App Store. Culprit itself initiates no other outbound network call. You can verify this with any network proxy (such as Charles or Proxyman) over a full session.
Culprit is rated 4+ and contains no objectionable content, but it is a skincare diary intended for general audiences, not a children's app. Culprit does not knowingly collect data from any user, including children. (It collects no data from anyone.)
Material changes will be reflected in this page's "Last updated" date. If a change affects what Culprit collects, the change will be announced in-app before it takes effect.
Questions or concerns: hadger.support@gmail.com.