Privacy Policy
Renato Fernandes Ruiz (“Tavia”, “we”, “us”) makes the Tavia app. This policy explains what we collect when you use Tavia, why, who helps us process it, how long we keep it and the choices you have. It covers the Tavia iOS app and taviacolor.com. Tavia is offered in the United States and Canada.
The short version
- Tavia reads the face photo you take to find your color season, face shape and how your skin looks, and to track it over time. It is a cosmetic tool, not a medical one.
- Your photo is measured by our own Tavia Face Engine and described by Google Gemini, a third-party AI. We ask for your permission before your first scan, and again if this changes.
- We never sell your personal information, never use your face data for ads and never use it to recognize who you are.
- You can delete a scan or your whole account at any time in the app.
1. What we collect
1.1 Face photos and face data
- The face photo you take for each scan.
- Face geometry: to read the photo, our engine maps 478 points on your face. It uses them in memory to find the skin zones and measure proportions, then discards them. We never store these points or a face template.
- Results derived from the photo, which we store: color values, undertone, depth, contrast, color season, face shape, eye shape, skin appearance scores (such as evenness, radiance and smoothness), facial hair style, coverage and color when shown, and notes about the lighting.
- Your answers to the optional color check questions.
We call all of this “face data” and treat it as biometric and sensitive personal information (section 4).
1.2 Account details
- You can use Tavia without an account: we create an anonymous account ID for your device.
- If you save your results: your email address, or the identifier and email Apple shares when you use Sign in with Apple (which can be a private relay address).
- Optional: your name, gender and region (United States or Canada).
- Your answers to two setup questions: what you want from Tavia (colors, skin or both) and whether you want makeup or grooming tips.
1.3 What you add
- Skincare products you add: name, brand, category, ingredients, and the product or label photos you take or pick.
- Routine check-ins and the reminders you set.
- Messages you send in Ask.
1.4 Purchases
Your subscription status, plan, trial and renewal dates, from Apple through RevenueCat. We never receive your card or payment details.
1.5 Usage and diagnostics
- App events such as screens viewed, scan completed or paywall viewed, with the app version, device model and iOS version.
- Crash reports and performance traces.
Analytics can include your plan, region and what you want from Tavia. Analytics and crash reports never include your photo, face data, color season, scores, email or name.
1.6 Approximate location
Your country only (United States or Canada), from your device’s region setting. It sets the product catalog, currency and retailers. We do not use GPS or your precise location.
1.7 Invites
If you invite friends or use a friend’s invite code: your invite code, which account invited you, and how many of your friends subscribed. We use it only to give invite rewards, which RevenueCat applies to your subscription. The person who invited you sees a count of friends, never your name or email. We never see your contacts: you choose who gets your code.
2. How we use it
- To run Tavia: scans, results, your palette and virtual draping, progress tracking, your routine, product checks and Ask.
- To compare scans over time. We only call a change progress when it is bigger than normal photo-to-photo variation.
- To suggest skincare and makeup products that fit your results. Some are affiliate links (section 3.3).
- To manage your plan, free limits and subscription.
- To keep Tavia secure and prevent abuse.
- To understand how the app is used and fix bugs, with analytics and crash reports that never contain face data.
- To send sign-in codes and answer your emails.
- To meet legal obligations.
What we never do
- Sell or rent your personal information, or share it for cross-context behavioral advertising.
- Use face data for advertising, marketing or data mining, or to identify or recognize you.
- Use your photos or face data to train AI models, ours or anyone else’s. If we ever want to, we will ask for your separate, opt-in permission first.
- Track you across other companies’ apps or websites.
4. Face data and biometric notice
Purpose. We use face data only to give you your color analysis, face shape guide, skin appearance tracking and facial hair notes, and to keep those features working.
Consent. Before your first scan we show you what we collect and who processes it, and ask you to tap I agree. That is your written release. We ask again whenever this notice changes in a material way.
What is derived. Face geometry (478 points) is computed in memory and discarded. The results listed in section 1.1 are stored.
No identification. We do not use face data to identify you or anyone else, and we do not build a face template.
No sale. We never sell, lease or trade face data, or otherwise profit from it, and never use it for ads.
Disclosure. Only to the providers named in section 3.1, only to run your scan, or when the law requires it.
Retention and destruction. We keep face data while you use Tavia so you can see your history. We permanently delete it at the earliest of: when you delete the scan, when you delete your account, or 12 months after you last opened Tavia. Deleted data leaves our backups within 30 days. The Tavia Face Engine keeps nothing, and Google keeps Gemini logs for up to 55 days.
Security. Face photos sit in private storage that only your account can reach through short-lived links. Data is encrypted in transit and at rest, and access is limited to the few people who run Tavia.
Withdrawing consent. Delete your scans or your account in the app, or email privacy@taviacolor.com. We then stop processing your face data.
5. How long we keep data
- Face photos and face data: see section 4.
- Account details, products and routine history: until you delete them or your account.
- Ask conversations: we do not store them on our servers. They stay on your phone until you leave the chat, and Google may keep them for up to 55 days.
- Purchase records: Apple and RevenueCat keep them as required for accounting and tax.
- Analytics events and crash reports: kept by PostHog and Sentry for a limited time under our settings with them, then deleted.
When you delete your account, your sign-in, profile, scans, photos, products and routine history are deleted from our live systems right away and leave our backups within 30 days. Anything the law requires us to keep is kept only as long as the law requires.
6. Your choices and rights
Everyone can:
- Get a copy of your data: Account, then Export my data.
- Correct your details in Account, or take a new scan.
- Delete a scan from your scan history, or your whole account from Account, then Delete my account.
- Withdraw consent for face processing by deleting your scans or your account.
- Turn reminders off in Account, then Notifications.
- Email privacy@taviacolor.com for anything else.
We answer within 30 days, verify requests through your signed-in app or the email on your account, and never treat you differently for using your rights. Where the law allows, you can ask someone to act for you as your authorized agent.
7. United States
7.1 California
In the last 12 months we collected: identifiers (email, account IDs); customer records (name); commercial information (subscription purchases); internet or other electronic activity (app events); approximate location (country); sensory information (photos); inferences (color season, skin appearance results); and sensitive personal information (face data, account login). Sources: you, your device, Apple and RevenueCat. Purposes: section 2. We disclose it for business purposes to the providers in section 3.1.
We do not sell or share personal information, and we use sensitive personal information only to provide the services you ask for, so there is nothing to opt out of or limit. You have the right to know, access, correct, delete and get a copy of your data, and not to be treated differently for using these rights. Retention: sections 4 and 5.
7.2 Illinois
Section 4 is our public written policy for biometric data, with our retention schedule and destruction guidelines. We get your written release through the consent screen before any scan, never sell, lease, trade or otherwise profit from face data, and destroy it on the schedule in section 4, and in any case within 3 years of your last interaction with Tavia.
7.3 Texas
We tell you what we capture and get your consent before your first scan, never sell face data, and destroy it on the schedule in section 4, within one year after the purpose ends. Under the Texas Data Privacy and Security Act you also have the rights in section 7.5.
7.4 Consumer health data (Washington, Nevada and Connecticut)
Tavia is a cosmetic app, not a health service, and we do not collect medical records. Some state laws, like Washington’s My Health My Data Act, define consumer health data broadly and can include biometric data or information about how your body looks. To be careful, we treat face data, skin appearance results and anything you tell Ask about your skin as consumer health data.
We collect it only with your consent, use it only to provide the features you ask for, share it only with the providers in section 3.1 with your consent, never sell it, and do not use geofencing. You can ask us to confirm whether we hold it, get a copy with the list of third parties that received it, withdraw your consent and delete it by emailing privacy@taviacolor.com. This section is our Consumer Health Data Privacy Policy.
7.5 Other states
If you live in a state with a comprehensive privacy law, such as Colorado, Connecticut, Virginia, Oregon, Texas or Utah, you can access, correct, delete and get a copy of your data, and opt out of sale, targeted advertising and profiling that has legal or similarly significant effects. We do none of those three. We process sensitive data only with your consent. For Colorado residents, section 4 is also our biometric identifier policy.
If we decline your request, reply with “Appeal” in the subject within 45 days. We will answer within 45 days (60 in some states), and if you still disagree you can contact your state Attorney General.
8. Canada
Everywhere in Canada (PIPEDA). You can access and correct your information and challenge how we handle it. Our Privacy Officer is reachable at privacy@taviacolor.com, and you can also complain to the Office of the Privacy Commissioner of Canada.
Quebec (Law 25). The person in charge of the protection of personal information at Tavia is our Privacy Officer (privacy@taviacolor.com). We ask for your express consent before processing face data, which is sensitive. Your data is stored and processed outside Quebec: in the United States (Supabase, Google Gemini, RevenueCat, PostHog, Sentry) and in Ontario (Tavia Face Engine).
You can access and correct your data, get it in a structured, commonly used format (Account, then Export my data), withdraw consent and ask us to stop sharing it. Your color season and skin results are produced automatically: you can ask which information and main factors led to a result, and send your comments to a person at privacy@taviacolor.com. You can also complain to the Commission d’accès à l’information du Québec.
9. Age limit
Tavia is for people 18 and older. It is not directed to children, and we do not knowingly collect data from anyone under 18. If we learn that someone under 18 has used Tavia, we delete their data. Please never scan anyone else, and never a child. If you think a child has used Tavia, email privacy@taviacolor.com.
10. Security
We use encryption in transit and at rest, database rules so each account can only reach its own records, private storage with short-lived links, and server keys limited to what each service needs. No system is perfect: if a breach affects you, we will tell you and the authorities as the law requires.
11. Where your data is processed
In the United States and Canada, with the providers listed in section 3.1. Each of them is bound by contract to protect it.
12. Changes to this policy
We will post updates here and in the app, and change the date above. If we change how face data is used or who receives it, we will ask for your consent again in the app before the change applies to you.
13. Contact us
- Developer: Renato Fernandes Ruiz
- Privacy Officer: privacy@taviacolor.com
- Support: support@taviacolor.com
Please put “Privacy request” in the subject line so we can find it quickly.