Privacy Policy

Last updated: October 10, 2026

Summary: Yarvia is an AI-powered makeup coaching app. Live AR mirror guidance is processed on your device; the only exception is the optional voice coach, which sends small mirror frames while you talk to it (and when a voice session or step starts) so it can see you. Photos you take for AI features, coach chat messages and voice coach audio are processed by AI providers abroad (Google's Gemini models through OpenRouter, and Google Gemini Live). Your account data and photos are stored in Germany (EU). We never sell your data. Contact: [email protected]. Turkish KVKK notice: KVKK Aydınlatma Metni.

1. Data Controller

This Privacy Policy applies to the Yarvia mobile app and the yarvia.app website. The data controller is VEAUTHY BİLİŞİM HİZMETLERİ TİCARET ANONİM ŞİRKETİ (MERSİS: 0924117108800001), İsmetpaşa Mah. Demircioğlu Cad. No: 102 İç Kapı No: 7, Merkez / Çanakkale, Türkiye. For any question or request regarding your data, contact [email protected]. The notice required under Turkey's Personal Data Protection Law (KVKK) is available in Turkish at yarvia.app/kvkk.

2. Data We Collect

Account information: your email address; if you sign in with Google or Apple, that account's identifier.
Personalization preferences: name, skin tone, undertone, face/eye shape, color season and coaching level, if you provide them.
Content you create: your makeup bag, lessons, session records and coach chat messages.
Photos: photos you take or upload for features such as color season analysis, makeup analysis, Try On Me (photo try-on) and the photo try-ons in Studio, and the try-on images generated for you.
Voice coach data: if you turn on the optional voice coach, the sound from your microphone and small mirror frames during that session (see sections 3 and 4).
Subscription information: your premium subscription status. Payments are processed by the App Store or Google Play; we never see your card details.
Technical records: your device's notification token if you allow notifications, in-app events, lesson step durations, numeric summaries of on-device mirror measurements, error logs and connection data such as IP address.

We do not collect location data.

3. Live Mirror and Camera

Face points and measurements in the live mirror are processed on your device; the live camera feed is not sent to our servers. When you leave a lesson step, only that step's duration and a numeric summary of the measurement (such as how much of the area is covered and how balanced the two sides are; never an image) are saved to your account. We also use these records and usage data to improve Yarvia and its lessons and to produce aggregate statistics that do not identify you. The one exception is the voice coach: if you start it, downscaled copies of the mirror frame are streamed to Google's Gemini Live service while you talk (at most one per second), when the session opens and when the step changes, so the coach can see you; when you ask how something looks, a small crop of your face or of that area is also sent to an AI provider. Yarvia does not store these frames.

4. AI Processing

Photos: when you use a photo feature, the photo you take or choose is sent to an AI provider for analysis or image generation — only when you start that feature. For makeup analysis, Try On Me and the photo try-ons in Studio, the photo is also uploaded to protected storage linked only to your account and deleted automatically: try-on photos and generated try-on images after 60 days, makeup analysis photos after 90 days. An image you upload to create a lesson from a makeup photo is deleted when you delete that lesson; a screenshot you upload for Filter → Real Makeup is deleted when you delete your account. For color season analysis (Know Me), the photo is not uploaded to storage: it is only sent for the analysis and removed from the server record when the analysis finishes; a copy stays only on your phone so you can reopen your results, and it is deleted when you sign out or delete your account.
Coach chat: your messages are sent to an AI provider together with your profile preferences, makeup bag and recent analysis summaries so a reply can be generated; your chat history is stored in your account so you can pick up where you left off.
Voice coach: the sound from your microphone is streamed live to Google's voice AI service (Gemini Live) for the session; so the coach can talk to you personally, your profile preferences, makeup bag and recent lesson and analysis summaries are also given to this service when the session starts. Yarvia does not store voice recordings or transcripts. The microphone is used only while the voice coach is on.

Our photo and text features use Google's Gemini models through OpenRouter (USA); under the providers' paid-use terms, this content is not used to train their models. The voice coach uses Google's Gemini Live service (USA) directly.

5. Where Data Is Stored and Security

Your account data and photos are stored on Supabase infrastructure, on servers in Germany (Frankfurt, EU). Data is encrypted in transit and protected at row level, so only you can access your own records. Some AI tasks, such as photo analysis and image generation, run on Supabase servers in the USA; your photo is only processed there temporarily and is not stored there.

6. Sharing and International Transfers

We do not sell your personal data or share it for advertising. We share it only with the providers needed to deliver the service:

Hosting and database: Supabase (data stored in Germany, EU; some AI tasks that process photos run on Supabase servers in the USA)
AI processing: OpenRouter and Google (USA) — only when you use the relevant feature
Subscription management: RevenueCat (USA); payments by Apple App Store and Google Play
Notifications: Expo (USA)
Account emails (confirmation and password-reset links): Resend (USA)
Sign-in, if you choose: Google, Apple
On-device text and barcode reading: Google ML Kit (USA) — reading products from a screenshot and, on Android, barcode scanning run on your device; ML Kit sends Google only diagnostic data (device model, system and app version, performance metrics, a per-installation identifier), never the image

Because these providers' servers are outside Turkey, these are international transfers; they are carried out within the appropriate safeguards required by applicable law (for Turkey, the standard contracts under KVKK article 9). These providers are contractually bound to protect your data to a standard equivalent to this policy. We may disclose data to authorities when legally required.

7. Retention and Deletion

Your data is kept while your account is open; try-on and analysis photos are deleted automatically after the periods in section 4. You can delete your makeup analyses, your own lessons and your makeup bag data in the app at any time. When you delete your account (Settings → Delete my account), your photos, try-on images, chat history and all records are permanently deleted, subject to statutory retention obligations. How-to: yarvia.app/delete-account.

8. Your Consent

The first time you use a photo, analysis or coach feature, the app asks for your consent to send your data to AI providers (Google Gemini via OpenRouter; Google Gemini Live for the voice coach). You can withdraw it anytime in Settings → Privacy & Security → Withdraw AI consent; those features will ask again next time. Withdrawing doesn't affect processing done before.

9. Your Rights

Under applicable data protection laws (including Turkey's KVKK article 11 and, where applicable, the GDPR), you have the right to access, correct and delete your data and to object to its processing. Write to [email protected] from the email address registered in the app; requests are answered free of charge within 30 days.

10. Children's Privacy

Yarvia is not designed for children under 13, and we do not knowingly collect data from this age group.

11. Changes

We may update this policy from time to time. For significant changes, we will update the "last updated" date on this page.

12. Contact

For questions: [email protected]