1. Introduction
Your privacy matters. This Privacy Policy explains what information YouPretty ("we", "us") collects when you use the Service, how we use it, who we share it with, and what rights you have over it.
YouPretty is operated by Malik Abimanyu, a sole proprietor based in Jakarta, Indonesia. If anything below is unclear, email us at support@youpretty.app.
2. Information We Collect
Account information
Your email address, which you provide to create and sign in to your account.
Payment information
We do not collect or store your card or payment details directly. Payments are handled entirely by our Merchant of Record, Paddle.com Market Ltd. From Paddle we receive only your customer ID, subscription status, plan, and current billing period — enough to grant access to the Service.
Content you upload and create
- Selfies you upload for AI processing
- AI-generated makeup looks saved to your vault
- Metadata about each look: occasion, aesthetic vibe, timestamp
Technical information
- IP address (temporarily, for security and rate-limiting)
- Device and browser information (user agent, OS)
- Usage events captured by our analytics provider (PostHog) — things like which screens you viewed and which buttons you tapped
- A signed session cookie (named
youpretty_session) used to keep you logged in
3. How We Use Your Information
We use the information above to:
- Deliver the Service — run AI processing on your selfies and show you the results
- Process payments and grant the correct level of access (via Paddle)
- Maintain your account and protect it from abuse
- Understand how the app is used in aggregate so we can improve it
- Send essential service emails (billing receipts, security notices, material changes to these policies)
We do not use your selfies or generated looks to train AI models.
4. Where Your Data Lives
- Primary database: Supabase, hosted in the U.S. East region. Stores your account record and your looks.
- AI processing: WaveSpeed AI receives your selfie to generate a look. They do not retain your selfie long-term after processing.
- Analytics: PostHog, hosted in the U.S. region, for usage events.
- Payments: Paddle, PCI-compliant. We never see your card data.
We use HTTPS in transit, encrypted storage at rest, and signed, HTTP-only session cookies. Access to production data is limited to what is required to run the Service.
5. Image Processing & Retention
When you upload a selfie, it's sent to WaveSpeed AI for look generation. The resulting look is saved to your personal vault.
Your looks stay in your vault until you delete them. There is no automatic expiry. You can delete an individual look from the Look Detail page at any time, or delete your entire account — which removes all associated looks and account data from our primary database.
6. Sharing Your Information
We never sell your personal data.
We share data only with:
- Service providers that help us operate the Service (Paddle, Supabase, WaveSpeed AI, PostHog). Each is contractually bound to process data only on our instructions and with appropriate security measures.
- Authorities, if required by law, valid legal process, or to protect our rights, property, or the safety of users or the public.
7. Cookies
- Session cookie (essential) — keeps you signed in. Required for the Service to work.
- Analytics cookie (PostHog) — records usage events to help us understand and improve the product.
We do not use third-party advertising or tracking cookies. You can manage or block cookies in your browser settings; blocking the session cookie will sign you out.
8. Your Rights
You have the right to:
- Access the personal data we hold about you — email support@youpretty.app and we'll send it to you
- Correct data that is inaccurate or out of date
- Delete your data — you can delete individual looks from the app or close your account to remove everything
- Export your data — contact us and we'll send a copy in a portable format
- Withdraw consent — you can cancel your subscription anytime from the Account page
We'll respond to rights requests within a reasonable time, typically within 30 days.
9. Children's Privacy
YouPretty is not intended for users under 18 without parental consent, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information without appropriate consent, please contact us and we'll delete it.
10. International Data Transfers
Our primary storage and analytics providers are located in the United States. By using YouPretty, you understand and consent to your data being transferred to, processed in, and stored in the U.S., which may have different privacy laws than your country of residence.
11. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes we'll notify you by email and/or an in-app notice before they take effect. The "Last updated" date at the top of this page always reflects the current version.
12. Contact
Privacy questions or requests? Email support@youpretty.app with the subject line "Privacy Inquiry" and we'll get back to you.