Privacy Policy
Effective 2026-05-05
1. Who we are
YoungerMe ("we", "us") operates the YoungerMe iOS app. We can be reached at 206afb+youngerme@gmail.com.
2. What we collect
- Account data. Email address and a hashed password, or your Apple/Google/Facebook account identifier if you sign in with one of those providers. We never receive your social provider password.
- Photos you upload. The portrait you submit for transformation, plus the AI-generated variants we create from it. These are stored in our hosting provider's object storage and are accessed only via short-lived signed URLs.
- Face data contained in your portrait. YoungerMe does not create a separate faceprint, face template, face ID, biometric identifier, or facial-recognition profile. The app processes the visible face information already present in the photo only to generate the rejuvenated portrait you requested.
- Usage data. Transformation history, timestamps, quota usage, app version, OS version, and crash diagnostics.
- Subscription data. Apple-issued transaction identifiers and subscription expiration dates. We never receive or store your payment card details — those stay with Apple.
3. How we use your data
- To create the AI portrait transformation you requested.
- To process visible facial features in the portrait only for the requested transformation, such as subtly refreshing skin, lighting, and age-related appearance while preserving identity.
- To maintain your account, history, and subscription state.
- To investigate crashes, abuse, and security incidents.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell your data, train models on your photos, or use your data for advertising.
4. Third parties we share data with
- Google LLC. Your photo and the transformation prompt are sent to Google LLC, our AI processing provider, to generate the result. Per Google's API terms for paid usage, this content is not used to train Google's models. Google receives the uploaded portrait, which may include face data visible in the photo, only to provide the requested AI transformation. Google processes this content as our service provider under its API data-protection terms, which provide protections equivalent to those described in this policy, and before any photo is sent the app asks for your permission and tells you the photo is sent to Google for AI processing.
- Supabase. Hosts our database and the object storage bucket where uploaded and transformed images live.
- Apple. Handles Sign in with Apple and all in-app purchases.
- Sentry. Receives anonymized crash and error reports from our servers.
- Hosting provider (Railway / Vercel / equivalent) runs our backend and website.
5. Retention
Original and transformed photos are retained for as long as your account exists or until you delete the transformation, whichever comes first. Account data is retained while your account is active. When you delete your account, we delete your account row, your transformation history, and the associated stored images within 30 days. Aggregated, non-identifying logs may be retained for security and abuse-prevention purposes.
We do not retain a separate face template, faceprint, biometric identifier, facial-recognition profile, or other extracted face-data record. Any face data is retained only as part of the original and transformed photos described above.
6. Your rights
You can:
- Access and export your data by emailing us.
- Delete your account at any time from Settings → Account → Delete Account in the iOS app.
- Object to or restrict certain processing where required by applicable law (GDPR, UK GDPR, CCPA).
- Lodge a complaint with your local data-protection authority.
7. Security
We use TLS in transit, hashed passwords (bcrypt), short-lived signed URLs for stored images, JWT access tokens with rotation, and rate limiting. No system is perfectly secure; we will notify affected users of any breach as required by law.
8. Children
YoungerMe is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact 206afb+youngerme@gmail.com and we will delete it.
9. International transfers
Our infrastructure is hosted in the United States. By using the service you consent to your data being processed there. Where required, we rely on standard contractual clauses with our sub-processors.
10. Changes
We will post a new effective date and, for material changes, notify you in-app or by email before the change takes effect.