Privacy Policy

This Privacy Policy explains how Velyune collects, uses, shares, retains, and protects information when you use the Velyune website, the Velyune: AI Makeup Artist iOS app, and related support services.

1. Information we process

Website information

We do not use advertising pixels, marketing cookies, or behavioral analytics on this website. Cloudflare may process ordinary request information needed to deliver and protect the site, including an IP address, request headers, requested URL, timestamp, and security signals.

If you email us, Velyune and the email providers involved process the address, message, attachments, and related correspondence you choose to send.

App information

• Source photos and generated result images. We process the portrait you select and the image generated for your requested edit.
• Installation information. The app creates an anonymous installation identifier and authentication credential. Velyune does not require a Velyune account or collect a legal name through an account profile at launch.
• Edit and usage records. We process the selected preset, job status, timestamps, request identifiers, usage, quota, retry, and deletion records needed to operate the service.
• Notifications. If you enable notifications, we process the APNs device token, environment, and authorization state needed to deliver completion notifications.
• Subscriptions. We process subscription tier, product, entitlement, purchase, renewal, transfer, and quota state supplied through Apple and RevenueCat.
• Operational data. We keep limited reliability and security logs needed to diagnose failures, enforce rate limits, prevent abuse, and operate the service.

2. How we use information

We use information to create and deliver requested AI edits; save, synchronize, retry, display, share, and delete projects; deliver optional notifications; authenticate an installation; enforce usage limits; prevent abuse; manage subscriptions and restore purchases; calculate monthly edit allowances; provide support; maintain reliability; and comply with legal obligations.

3. How photo processing works

Your selected source photo and the chosen style are sent to Velyune’s Cloudflare infrastructure. The source and a style reference are processed by OpenAI’s image model through Cloudflare Workers AI to create the requested result. Velyune does not use your photo to advertise to you.

4. Service providers and disclosures

We disclose information only as needed to operate the service, protect users and Velyune, complete transactions, respond to lawful requests, or with your direction:

• Cloudflare provides Workers, Workers AI gateway/runtime, D1, R2, Queues, static asset delivery, security, and operational infrastructure.
• OpenAI provides the image model used through Cloudflare Workers AI for requested image generation.
• Apple provides iOS distribution, App Store purchases, Photos integration, and APNs notifications.
• RevenueCat provides subscription entitlement and purchase-state management.
• Email providers process support correspondence sent by you or Velyune.

We may also disclose information when required by law, to protect safety or legal rights, or as part of a business transaction subject to appropriate safeguards.

5. Retention and deletion

• A source photo for a successful job is deleted from server object storage promptly after processing. If the first cleanup attempt fails, cleanup is retried.
• A source photo retained for a failed or abandoned job expires within 24 hours after the terminal failure state so retry can remain available during that period.
• A generated output remains available on the server for no more than 30 days after completion unless you delete the project sooner. After that availability period expires, it is removed through scheduled cleanup, and failed cleanup attempts are retried.
• Deleting a project requests deletion of its server input, output, and job row and removes the app’s local project copy.
• Installation, subscription, quota, and security records remain as needed for service operation, purchase reconciliation, abuse prevention, and legal obligations.
• Support correspondence remains only as needed to resolve the request, keep necessary business records, and meet legal obligations.

6. Your choices and requests

You choose which photo to submit. You can decline or disable notifications in iOS settings, delete projects in the app, manage subscriptions through Apple, and contact us to request access to or deletion of information where applicable. We may need to verify a request using information reasonably available to us.

7. Security

We use technical and organizational measures designed to protect information, including installation authentication, access controls, rate limits, private object keys, transport encryption, and restricted secrets. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

8. International processing

Velyune and its providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. We use the service-provider and legal safeguards available for the relevant processing.

9. Children’s privacy

Velyune is not directed to children who cannot lawfully consent to the processing described here. A parent or guardian should supervise use and provide consent where required. If you believe a child submitted information without required permission, contact us.

10. Changes to this policy

We may update this policy when the service, providers, or legal requirements change. We will post the revised policy here and update its effective date. Material changes may also be communicated in the app when appropriate.

11. Contact