Privacy Policy

This Privacy Policy applies to the Yarvena mobile app and related support services. In this policy, “Yarvena,” “we,” “us,” and “our” refer to the controller responsible for the app: MALIK SAEED ALKHALDI, an individual based in Saudi Arabia.

Depending on the features you use, Yarvena collects or processes:

• Account information: identifiers and details provided through Apple or Google sign-in, such as your name, email address, provider account identifier, and profile image, depending on what you choose to share; and password sign-in credentials where that option is enabled, with passwords stored in hashed form.
• Profile information: your username, display name, profile photo, bio, and optional fields you add such as date of birth, gender, city, interests, skin goals, and beauty preferences. Not all fields are required. If you use business features, we process the business-verification information you provide.
• Photos, videos, and related content: media you upload for your profile, social posts, messages, makeup features, or cosmetic skin analysis, together with captions or other details you provide.
• Skin-analysis information: facial or skin photos submitted for analysis and cosmetic observations or results generated from them.
• Social activity: posts, comments, likes, saves, follows, tags, mentions, reports, and other interactions.
• Messages and support: direct messages, attachments, and information you send when contacting support.
• App, device, and activity information: account-linked app, session, screen, feature, error, and performance events; random session and installation identifiers; app version, operating system, platform, device model, locale, timezone, push token, and interaction signals such as viewing duration.
• Location-related information: profile city, country, and timezone; and, when you choose the post-location feature and grant permission, foreground device coordinates used to create a place label. Yarvena does not use continuous or background location tracking.

Yarvena may use information to:

• create and maintain your account and profile;
• provide photo, video, social, messaging, and support features;
• perform cosmetic skin analysis and present beauty-related results;
• show the content and interactions you choose to share;
• personalize and rank app experiences using profile, skin, activity, routine, matching, viewing, and interaction information;
• provide AI chat. The chat service sends your current message, prior conversation, profile information, skin-analysis context, and relevant saved personal facts or routines to OpenRouter. The assistant may save facts extracted from what you share in its memory, including sensitive information you mention; this data is not anonymous. Product-related chat may also send a search query or query words to Open Beauty Facts;
• protect users, investigate reports, prevent misuse, and maintain the app; and
• comply with applicable legal obligations.

Our commitments: Yarvena does not sell users’ personal information, does not use it for advertising tracking, and does not use users’ photos to train its own models. These commitments describe Yarvena’s own processing; the practices of the service providers we use are governed by their own terms, which we do not control. This is not a statement that Yarvena collects no data.

Yarvena processes submitted skin-analysis images on its servers. The image is stored and its bytes are sent to a configured external inference service. Analysis records can include issue labels and severity, skin tone and type, scores, risk or trend information, recommendations, and a skin-feature vector. Makeup features can send face and reference images to a configured external graphics service and store original and generated results. These features are cosmetic and informational, not medical diagnosis or medical advice.

Performing an analysis is separate from sharing one. If you explicitly create an AI-scan post, the composer defaults the scan photo to blurred and the score to shared, while tone, type, and concerns default to not shared. Skin matching is optional: it is off by default, requires your consent, and you can turn it off at any time. When you enable it, a skin-feature vector is stored with matching flags, and eligible public-profile viewers may receive derived skin details.

New posts default to a public audience, with comments and sharing allowed. Basic public-profile details can remain visible, and eligible viewers can receive derived beauty fields according to account and beauty-visibility checks. Public information can be copied, reshared, or captured by others.

Yarvena stores direct messages and attachments in a server-readable form. Conversation membership checks protect message access, but message attachments are served through URLs that are not restricted to conversation members. Message push notifications can include the sender name and the first 160 characters of a text message. Messages and attachments are not end-to-end encrypted, and recipients may save or share what you send.

Reports: When you submit a report, including a copyright report, we collect the reporting account’s identifier, identifiers for the reported account and content, the report reason, details you provide, submission time and review status. We use this information to receive and review reports and address abuse and violations. Submitting a report does not automatically remove the content. You can view your reports through the available reporting flow in the app. Content and copyright rules are separate from this policy.

Yarvena relies on service providers that include: Railway for the Yarvena API; Supabase for database and object storage; Apple and Google for sign-in; OpenRouter for AI chat and memory extraction; configured external services for skin inference and makeup processing; Expo Push Service and downstream Apple APNs or Google FCM for notifications; Open-Meteo for city-based weather context; Open Beauty Facts for product searches; a configured Redis service for caches and queued jobs; and device map or geocoding services. User-selected sharing and URL-backed media can involve additional destinations.

Each provider processes data under its own terms and settings, including its own retention, model-training, and human-review practices, which Yarvena does not control and does not guarantee. Data may be processed in countries other than your own. Yarvena may also disclose information where required by law or to protect the safety of users and the service.

Product-analytics events are cleaned up on a best-effort basis after 180 days. Stories have a 24-hour availability period, and some temporary processing sources, queue jobs, signed links, and device caches have narrower technical lifetimes. These periods are not a general retention or guaranteed-erasure schedule for accounts, media, messages, AI data, logs, or backups; retention for those categories can vary with operational, legal, and backup requirements.

Yarvena uses authentication, authorization, and permission controls; account passwords are stored on the server as bcrypt hashes, and session tokens are kept in the device’s secure storage. The app also uses input and upload validation, rate limiting, and filtering of some data from logs. These measures do not guarantee that every storage location, transmission, cache, or provider applies a particular encryption or security control, and no method of transmission or storage is completely secure.

You can request account deletion within the app. After you confirm the request and verify your identity where required, your account is deactivated and you are shown the 30-day recovery period and the scheduled final deletion date. The applicable Apple or Google sign-in authorization is revoked. After the recovery period ends, our deletion system automatically processes the request to remove the account and the covered data from our operational systems, including the profile, content you own, analysis data, assistant memory and associated files whose ownership has been verified. During final deletion, messages you sent are deleted from our operational database. Other participants’ own messages are preserved, and the deleted account is replaced in the conversation records with a placeholder that cannot sign in. Associated attachment files whose ownership has been verified are processed through our file-deletion workflow. This does not erase copies saved independently by recipients. Submitting a request or receiving a provider revocation email does not mean that all data has already been erased.

The deletion flow has been tested end to end: a test account’s final deletion completed without error, the account no longer exists, and no files remained in the deletion queue. This does not cover copies held by service providers or in backups, whose erasure timing we do not guarantee.

You may also contact us about an account or privacy request at sa1fa@live.com. Separately deleting analysis history, clearing a conversation, or deleting a post, Story, or makeup result does not necessarily remove every related copy.

Server-enforced controls exist for private-account and public-beauty access, hiding the skin timeline, discoverability in user search, direct-message permission, and comments. You can also control camera, photo-library, microphone, location, and notification permissions through your device.

Some in-app preference switches — including “Save analysis history,” “AI personalization,” “Hide Before / After photos,” and “Allow tags & mentions” — are not yet enforced end to end in every flow. Until they are, they should not be relied on as effective opt-outs.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or an appeal, and to complain to a privacy authority. Contact us to make a request.

The minimum age for creating a Yarvena account is 13 years, and this restriction is enforced at signup in the current production app. Yarvena is not directed at children under 13, and we do not knowingly collect their data.

Material policy changes are communicated through an appropriate notice before they take effect where required.

Yarvena is operated by MALIK SAEED ALKHALDI, an individual based in Saudi Arabia. Questions, privacy requests, and deletion requests can be sent to: