Yarvena

Privacy & trust

Privacy Policy

This policy explains how Yarvena handles information when you use its mobile app, including social, messaging, beauty, and cosmetic skin-analysis features.

Last updated: October 13, 2026

1. Who this policy covers

This Privacy Policy applies to the Yarvena mobile app and related support services. In this policy, “Yarvena,” “we,” “us,” and “our” refer to the controller responsible for the app: MALIK SAEED ALKHALDI, an individual based in Saudi Arabia.

2. Information we collect

Depending on the features you use, Yarvena collects or processes:

  • Account information: identifiers and details provided through Apple or Google sign-in, such as your name, email address, provider account identifier, and profile image, depending on what you choose to share; and password sign-in credentials where that option is enabled, with passwords stored in hashed form.
  • Profile information: your username, display name, profile photo, bio, and optional fields you add such as date of birth, gender, city, interests, skin goals, and beauty preferences. Not all fields are required. If you use business features, we process the business-verification information you provide.
  • Photos, videos, and related content: media you upload for your profile, social posts, messages, makeup features, or cosmetic skin analysis, together with captions or other details you provide.
  • Skin-analysis information: facial or skin photos submitted for analysis and cosmetic observations or results generated from them.
  • Social activity: posts, comments, likes, saves, follows, tags, mentions, reports, and other interactions.
  • Messages and support: direct messages, attachments, and information you send when contacting support.
  • App, device, and activity information: account-linked app, session, screen, feature, error, and performance events; random session and installation identifiers; app version, operating system, platform, device model, locale, timezone, push token, and interaction signals such as viewing duration.
  • Location-related information: profile city, country, and timezone; and, when you choose the post-location feature and grant permission, foreground device coordinates used to create a place label. Yarvena does not use continuous or background location tracking.

3. How information is used

Yarvena may use information to:

  • create and maintain your account and profile;
  • provide photo, video, social, messaging, and support features;
  • perform cosmetic skin analysis and present beauty-related results;
  • show the content and interactions you choose to share;
  • personalize and rank app experiences using profile, skin, activity, routine, matching, viewing, and interaction information;
  • AI chat sends your current message through OpenRouter to the model route shown in the permission notice. With AI personalization enabled, the request can also include prior conversation, profile information, skin-analysis context and relevant saved facts or routines, including sensitive information you have shared. With personalization off, new analysis and AI-chat requests use the current input without saved personal context. Product-related chat can send a product query to Open Beauty Facts.
  • protect users, investigate reports, prevent misuse, and maintain the app; and
  • comply with applicable legal obligations.

Our commitments: Yarvena does not sell users’ personal information, does not use it for advertising tracking, and does not use users’ photos to train its own models. These commitments describe Yarvena’s own processing; the practices of the service providers we use are governed by their own terms, which we do not control. This is not a statement that Yarvena collects no data.

4. Photos and cosmetic skin analysis

Skin analysis and virtual makeup process selected images on Yarvena servers and the processing service identified before your permission. Analysis sends the selected photo; makeup sends your photo and, when used, the selected reference. A separate permission is required for each AI feature before the first transmission. Declining leaves other app features available. Processing recipients and model routes are included in the version of your permission, and changes require permission again. These are cosmetic tools, not medical diagnosis or treatment; results can be inaccurate.

Performing an analysis is separate from sharing one. If you explicitly create an AI-scan post, the composer defaults the scan photo to blurred and the score to shared, while tone, type, and concerns default to not shared. Skin matching is optional: it is off by default, requires your consent, and you can turn it off at any time. When you enable it, a skin-feature vector is stored with matching flags, and eligible public-profile viewers may receive derived skin details.

5. Public content and communications

New posts default to a public audience, with comments and sharing allowed. Basic public-profile details can remain visible, and eligible viewers can receive derived beauty fields according to account and beauty-visibility checks. Public information can be copied, reshared, or captured by others.

Direct messages are stored in a server-readable form, not end-to-end encrypted. Membership checks protect message retrieval. New uploaded attachments are stored privately and returned through temporary signed links; anyone holding a valid link can use it until it expires. Older attachments are being migrated, and some older URLs may remain accessible until that cleanup completes. Message push notifications can include the sender name and the first 160 characters. Recipients can independently save or share copies.

Reports: When you submit a report, including a copyright report, we collect the reporting account’s identifier, identifiers for the reported account and content, the report reason, details you provide, submission time and review status. We use this information to receive and review reports and address abuse and violations. Submitting a report does not automatically remove the content. You can view your reports through the available reporting flow in the app. Content and copyright rules are separate from this policy.

Authorized moderators can inspect the specific content attached to a report, including a reported message. Targeted text rules and fingerprints of removed media are checked before publication. Uploaded images and sampled video frames are also screened on Yarvena servers for explicit sexual imagery, without sending them to a new external moderation provider. Automated checks can make mistakes and do not detect every kind of harmful content. You can report content or contact support about a blocked upload. Fingerprints block matching uploads for 90 days; report records are retained for moderation and security purposes.

6. Service providers and disclosures

Yarvena relies on service providers that include: Railway for the Yarvena API; Supabase for database and object storage; Apple and Google for sign-in; OpenRouter for AI chat and memory extraction; external services for skin inference and makeup processing, which may be hosted on RunPod and are named before you give permission; Expo Push Service and downstream Apple APNs or Google FCM for notifications; Open-Meteo for city-based weather context; Open Beauty Facts for product searches; a configured Redis service for caches and queued jobs; and device map or geocoding services. User-selected sharing and URL-backed media can involve additional destinations.

Each provider processes data under its own terms and settings, including its own retention, model-training, and human-review practices, which Yarvena does not control and does not guarantee. Data may be processed in countries other than your own. Yarvena may also disclose information where required by law or to protect the safety of users and the service.

7. Retention and security

With Save analysis history enabled, saved analysis records and their private images remain until history or account deletion. When disabled, new analysis results are returned without creating a saved analysis or uploading its photo to the analysis-history bucket; the processing request still goes to the disclosed service. Switching it off does not erase earlier history. Delete analysis history removes saved analyses, their derived timeline and matching data, generated analysis memories and associated private images. File and cache cleanup is queued and retried. Independently shared posts and conversation messages are retained; AI chat stops using conversation entries from before the history deletion as saved context. Makeup results and local saved photos have separate controls. Deleting analysis history also removes the private source and blurred preview images used by AI-scan posts, so those posts can remain without their analysis photo. Other independently uploaded posts and messages are not deleted.

Product-analytics events are cleaned up on a best-effort basis after 180 days. Stories have a 24-hour availability period, and some temporary processing sources, queue jobs, signed links, and device caches have narrower technical lifetimes. These periods are not a general retention or guaranteed-erasure schedule for accounts, media, messages, AI data, logs, or backups; retention for those categories can vary with operational, legal, and backup requirements.

Yarvena uses authentication, authorization, and permission controls; account passwords are stored on the server as bcrypt hashes, and session tokens are kept in the device’s secure storage. The app also uses input and upload validation, rate limiting, and filtering of some data from logs. These measures do not guarantee that every storage location, transmission, cache, or provider applies a particular encryption or security control, and no method of transmission or storage is completely secure.

8. Account and data deletion

You can request account deletion within the app. After you confirm the request and verify your identity where required, your account is deactivated and you are shown the 30-day recovery period and the scheduled final deletion date. The applicable Apple or Google sign-in authorization is revoked. After the recovery period ends, our deletion system automatically processes the request to remove the account and the covered data from our operational systems, including the profile, content you own, analysis data, assistant memory and associated files whose ownership has been verified. During final deletion, messages you sent are deleted from our operational database. Other participants’ own messages are preserved, and the deleted account is replaced in the conversation records with a placeholder that cannot sign in. Associated attachment files whose ownership has been verified are processed through our file-deletion workflow. This does not erase copies saved independently by recipients. Submitting a request or receiving a provider revocation email does not mean that all data has already been erased.

If you own businesses, an additional confirmation lists the businesses to close with your account after the recovery period. Cancel to keep them. Closing an approved business removes its content and files and ends its members’ access, while their personal accounts and businesses owned by others remain. Personal attribution in retained records of other businesses is removed where applicable. Specific legal holds can delay deletion; cancel external subscriptions separately with their provider.

A private deletion receipt stored on the device can be checked on the sign-in screen. It shows the scheduled date and whether deletion is pending, delayed, cancelled or complete. Completion is shown only after the account deletion and owned-file cleanup finish. This does not guarantee erasure timing for independent recipient copies, provider records or backups.

You may also contact us about an account or privacy request at sa1fa@live.com. Separately deleting analysis history, clearing a conversation, or deleting a post, Story, or makeup result does not necessarily remove every related copy.

9. Your choices and rights

Server-enforced controls exist for private-account and public-beauty access, hiding the skin timeline, discoverability in user search, direct-message permission, and comments. You can also control camera, photo-library, microphone, location, and notification permissions through your device.

Privacy controls enforce future analysis saving and personalization for analysis and AI chat. Hide Before / After hides your Before / After posts from other app viewers. Tags & mentions controls suggestions and mention notifications; it does not stop someone from typing a name in ordinary text. Each AI permission can be withdrawn in Privacy → AI permissions. Withdrawal blocks new requests for that feature; it does not recall a request already sent or erase previous results. Use the separate deletion controls for those records.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or an appeal, and to complain to a privacy authority. Contact us to make a request.

10. Children and policy updates

The minimum age for creating a Yarvena account is 13 years, and this restriction is enforced at signup in the current production app. Yarvena is not directed at children under 13, and we do not knowingly collect their data.

Material policy changes are communicated through an appropriate notice before they take effect where required.

11. Contact us

Yarvena is operated by MALIK SAEED ALKHALDI, an individual based in Saudi Arabia. Questions, privacy requests, and deletion requests can be sent to: