Privacy Policy

Klyva ("Klyva," "we," "us," or "our") is a mobile app that helps you understand the ingredients in cosmetic and personal-care products. Klyva is provided by Legend Business Limited Liability Company, a company registered in Delaware, United States. This Privacy Policy explains what information we process when you use the Klyva app and the klyva.app website, how we use it, and the choices you have.

If you have any questions, contact us at support@klyva.app.

The short version

• You can use Klyva without giving us your name or email. Sign-in is anonymous.
• When you scan a label, the photo is read on your device — we do not upload or store your photos.
• We do not sell your data, we do not show ads, and we do not share your skin profile with anyone.

Information we collect

1. Scans and ingredient data. When you scan a product, we may store the product's barcode, name, and its ingredient list (as text) so we can show your scan history and improve product coverage for everyone. When you read a label with the camera, the image is processed on your device using your phone's built-in text-recognition (Apple Vision on iOS, Google ML Kit on Android). We do not upload or keep your photos — only the confirmed ingredient text.

2. Your skin profile. If you complete onboarding, we store your choices (skin type, concerns, and ingredients you want to avoid) so we can personalize your results. This is used only to calculate your personalized scores and picks. We do not share it.

3. Account and device information. Basic use relies on an anonymous account — we do not require your name, email, or phone number. We store a random, anonymous identifier so your scan history and settings stay on your account.

4. Usage analytics. We collect anonymous, aggregated usage events (for example: app opened, a product scanned, the paywall viewed) to understand how the app is used and improve it. We use a privacy-respecting analytics tool and disable IP-based geolocation. We do not send your photos, your skin profile, or your personalized scores to analytics.

5. Subscription information. If you subscribe to Klyva Premium, your payment is handled by Apple or Google through their in-app purchase systems (managed via RevenueCat). We receive your subscription status (active, trial, expired) — we do not receive or store your credit-card or payment details.

6. Contributions to our shared product database. When you confirm a product's ingredient list, we may save it to a shared products database keyed by the product's barcode, so the next person who scans the same product gets an instant result. This shared data contains only the product and its ingredient text — it does not include anything that identifies you.

How we use your information

We use your information to scan products and read labels; to calculate ingredient scores; to personalize your results based on your skin profile; to show and sync your scan history; to grow our product database so results improve over time; to operate, maintain, secure, and improve the app; and to process subscriptions.

Legal bases (for EU/UK users). Where the GDPR or UK GDPR applies, we process your information to perform our contract with you (providing the app's core features), on the basis of our legitimate interests (improving and securing the app, understanding aggregate usage), on the basis of your consent where required, and to comply with our legal obligations. You can withdraw consent at any time.

Service providers we use

We use a small number of trusted providers to run Klyva. They only process data as needed to provide their service, under contracts that require them to protect it:

• Supabase — database, storage, and anonymous authentication.
• PostHog — privacy-respecting, anonymous usage analytics.
• RevenueCat with Apple App Store and Google Play — subscription management and payments.
• Apple / Google — on-device text recognition (OCR) frameworks.
• Open Beauty Facts — an open, public database we use as one source of product and ingredient information.

Our ingredient assessments are based on public scientific and regulatory sources, including the EU Cosmetics Regulation (CosIng / Annexes) and the Cosmetic Ingredient Review (CIR).

What we do NOT do

We do not sell your personal information. We do not show advertising. We do not partner with brands to influence scores. We do not upload or store your camera photos. We do not share your skin profile.

How we store and protect your data

We follow generally accepted industry standards to protect your information during transmission and once we receive it, and we work only with reputable hosting and service providers that apply appropriate technical and organizational safeguards. No method of transmission or storage over the internet is 100% secure, so we cannot guarantee absolute security. If a breach ever affects your information, we will notify you as required by law.

Data retention

We keep your scan history and skin profile while your account is active. If you delete your data or stop using the app, we remove your personal information within a reasonable period, except where we must keep some data to comply with a legal obligation or to prevent fraud or abuse. Anonymized product ingredient data contributed to the shared database is kept to keep the database useful for all users, but it never identifies you.

International users

Klyva is operated from the United States and may process data in the United States and other countries, which may have different data-protection laws than your own. We take steps to ensure your information receives appropriate protection wherever it is processed.

Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• The right to know / access — get confirmation of what we process and a copy of it.
• The right to data portability — receive your data in a portable, machine-readable format.
• The right to correct inaccurate information.
• The right to delete ("erasure" / "right to be forgotten").
• The right to restrict or object to certain processing.
• The right to withdraw consent where processing is based on consent.

You can exercise most of these in the app (clear your history, edit your profile, delete your data) or by emailing support@klyva.app. We will respond within the time required by applicable law (generally within 30–45 days). To protect you, we may need to verify your request before acting on it. If you are in the EU, UK, or another region with a data-protection authority, you also have the right to lodge a complaint with your local authority.

Your US state privacy rights

If you are a resident of a US state with a comprehensive privacy law (such as California's CCPA/CPRA, Virginia's VCDPA, Colorado's CPA, Connecticut's CTDPA, Texas's TDPSA, and others), you have the rights listed above and, in addition:

• The right to opt out of the "sale" or "sharing" of personal data and of targeted advertising. Klyva does not sell your personal data and does not use it for targeted advertising, so there is nothing to opt out of — but you may contact us to confirm.
• The right to non-discrimination — we will not treat you differently for exercising your privacy rights.
• The right to appeal — if we decline a request, you may ask us to reconsider.

To exercise any of these, email support@klyva.app with your request and your state of residence.

Children

Klyva is not directed to children. We do not knowingly collect personal information from anyone under 13 in the United States, or under 16 in the EU/UK (or the minimum age set by local law). If you believe a child has provided us information, contact support@klyva.app and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. We'll post the updated version here with a new effective date, and, where appropriate, notify you in the app.

Contact

Legend Business Limited Liability Company
16192 Coastal Hwy, Lewes, DE 19958, USA
support@klyva.app