Privacy Policy

This Privacy Policy explains how True Eve ("True Eve," "we," "us," or "our"), operated by Mattheos Moniatis, processes information when you use the True Eve mobile application and related services (the "Services").

For privacy questions or requests, contact support@trueeve.app.

Summary of Key Points

• Face photos, scan results, routines, and progress history are stored locally on your device.
• When you request an AI analysis, the selected photo and necessary profile inputs pass through our Cloudflare-hosted security gateway and are transmitted to OpenRouter to generate the requested result.
• True Eve does not maintain its own remote database of your face photos or scan history.
• Analytics, attribution, diagnostics, and subscription information may be processed by the service providers described below.
• We do not sell personal information or send face photos or scan results to advertising providers.

Table of Contents

1. Information We Process
2. Face Photos and AI Analysis
3. How We Use Information
4. Legal Bases
5. Service Providers and Disclosures
6. Analytics, Attribution, and Tracking
7. Data Storage and Retention
8. Data Deletion
9. International Data Transfers
10. Security
11. Children and Teen Users
12. Your Privacy Rights
13. US State Privacy Rights
14. Changes to This Policy
15. Contact Us

1. Information We Process

Depending on how you use the Services, we may process:

• Onboarding and preference information: such as your selected name, age range, gender, goals, concerns, routines, preferences, and acquisition source.
• Face-analysis information: photos you choose to submit, generated scores, metrics, recommendations, and progress history.
• App and device information: such as device type, operating system, app version, language, country or approximate location derived from network signals, identifiers, and diagnostic information.
• Usage information: screens or features used, onboarding progress, paywall interactions, subscription events, and similar product events.
• Purchase information: subscription status, product, price, currency, and transaction-related information provided by Apple and RevenueCat. True Eve does not receive your full payment-card details.
• Support communications: information you include when contacting us.

If you grant permission, the app may access your camera, photo library, notifications, or tracking permission for the functions you choose to use. You can manage these permissions in iOS Settings.

2. Face Photos and AI Analysis

Face photos and generated scan information are stored locally on your device. When you request an AI analysis, the app sends the selected photo and the profile inputs needed for personalization through our Cloudflare-hosted security gateway to OpenRouter. OpenRouter may route the request to a model provider in order to return the requested output.

The gateway applies security controls, usage limits, and subscription verification. It does not intentionally store request bodies, face photos, prompts, or AI responses. It may process an installation identifier, action type, network information such as an IP address, and a RevenueCat app user identifier, and retain hashed usage-limit and entitlement records needed to prevent abuse and verify access.

True Eve does not maintain its own server-side copy of your face photos or scan history. Information sent through Cloudflare and OpenRouter is subject to their processing, security, and retention practices and those of the model provider used to complete the request.

AI-generated appearance scores and recommendations are subjective, may vary, and may be inaccurate. They are provided for informational and entertainment purposes and are not medical or mental-health advice.

3. How We Use Information

• Provide face analysis, personalized recommendations, routines, and progress features.
• Operate subscriptions and restore purchased access.
• Understand onboarding, feature usage, attribution, and product performance.
• Improve reliability, fix errors, prevent abuse, and protect the Services.
• Respond to support and privacy requests.
• Comply with applicable law and enforce our Terms of Service.

4. Legal Bases

Where applicable law requires a legal basis, we rely on your consent, performance of our agreement with you, our legitimate interests in operating and improving the Services, and compliance with legal obligations. You may withdraw consent where applicable, although this does not affect processing already completed lawfully.

5. Service Providers and Disclosures

We use service providers to operate specific parts of the Services:

• Cloudflare: hosts our secure AI gateway, forwards AI requests, applies rate limits and security controls, and supports subscription verification. The gateway does not intentionally store face photos, prompts, request bodies, or AI responses.
• OpenRouter: processes selected face photos and necessary profile inputs when you request AI analysis and routes requests to a model provider.
• Apple: distributes the app and processes App Store purchases, refunds, and subscription management.
• RevenueCat: manages subscription status, entitlements, and purchase analytics.
• PostHog: processes product analytics, performance information, and diagnostic events.
• AppsFlyer: processes install attribution, campaign measurement, device identifiers, and app or subscription events.
• TikTok: processes campaign attribution and selected app, subscription, or purchase events used to measure marketing performance.

We may also disclose information when required by law, to protect users or the Services, to investigate fraud or abuse, or as part of a business reorganization subject to appropriate safeguards.

6. Analytics, Attribution, and Tracking

We use PostHog, AppsFlyer, and TikTok to understand product usage and marketing performance. Depending on your permissions and device settings, these services may process app events, device or advertising identifiers, attribution data, subscription events, approximate location, and technical information.

Face photos, facial metrics, scan results, and personalized recommendations are not sent to PostHog, AppsFlyer, or TikTok. Where required, we request Apple's App Tracking Transparency permission before accessing data used to track activity across other companies' apps or websites. You can change tracking permissions in iOS Settings.

We do not sell personal information. Some laws define certain advertising or attribution disclosures as "sharing" or "targeted advertising." You may contact us to exercise any applicable opt-out rights.

7. Data Storage and Retention

Face photos, scan results, progress history, routines, and onboarding information are stored locally on your device unless they are transmitted as part of an AI request described above. True Eve does not keep its own remote account database containing that information.

Analytics, attribution, diagnostic, support, and subscription records are retained by us or our service providers only for as long as reasonably necessary for the purposes described in this Policy, subject to provider retention settings and legal requirements.

The AI gateway may retain hashed usage-limit records and RevenueCat entitlement status for security, abuse prevention, and subscription verification. It does not intentionally retain the content of AI requests or responses.

8. Data Deletion

Using the Delete Account option in the app removes locally stored face photos, scan results, progress history, routines, and onboarding information from that device. Deleting the app also removes locally stored app data according to iOS behavior.

Local deletion does not automatically erase analytics, attribution, support, or transaction records already held by service providers. To request deletion of personal information that may be associated with you, email support@trueeve.app. We may need limited information to verify and fulfill your request, and some records may be retained where required by law or for fraud prevention, accounting, or security.

9. International Data Transfers

Our service providers may process information in countries other than your own. Where required, we rely on appropriate safeguards for international transfers.

10. Security

We use reasonable technical and organizational safeguards designed to protect information. No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children and Teen Users

The Services may be used by minors with the permission and supervision of a parent or legal guardian where required. If you believe a child has provided information in violation of applicable law, contact us.

12. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, and to withdraw consent. You may also have the right to complain to your local data-protection authority. Contact us to submit a request.

13. US State Privacy Rights

Residents of certain US states may have additional rights, including rights to know, delete, correct, or opt out of certain sharing or targeted advertising. We will not discriminate against you for exercising an applicable privacy right.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes to the Services, our practices, or applicable law. The updated date will appear at the top of this page.

15. Contact Us

• Operator and data controller: Mattheos Moniatis
• Country: Cyprus
• Email: support@trueeve.app