CRAVI PRIVACY POLICY
Effective Date: 2026-01-30

Cravi (“Cravi”, “we”, “us”, or “our”) is a community platform dedicated to sharing and discovering beauty makeup videos. This Privacy Policy explains how Cravi Team (“Data Controller”, where applicable) collects, uses, shares, and protects information when you use the Cravi mobile application and related services (collectively, the “Service”).

If you have questions, contact us at: kironkiron667@outlook.com

IMPORTANT NOTICE ABOUT AGE
The Service is intended for users aged 17 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

1) SCOPE
This Privacy Policy applies to information processed by the Service, including when you:
- create or use an account;
- view, upload, or interact with content;
- contact support; or
- enable optional device permissions (such as location).

2) INFORMATION WE COLLECT
We collect information you provide, information collected automatically when you use the Service, and information from optional permissions you control.

2.1 Information you provide
- Account information: name, username, email address.
- Support communications: the content of messages you send to customer support, and related metadata needed to respond.

2.2 Information we collect automatically
- Device information: device model, operating system version, language, time zone, app version, identifiers and similar device signals (as allowed by the operating system and your settings).
- Usage data and analytics: interactions with the Service (e.g., screens viewed, taps, session duration), and performance metrics.
- Crash logs and diagnostics: crash reports, error logs, and related diagnostic information to help us fix bugs and improve stability.

2.3 Location information (only if you allow)
If you grant permission, we may collect location information:
- Precise location (e.g., GPS-level) and/or approximate location (e.g., derived from network signals),
depending on the permission you grant and your device settings.
You can withdraw location permission at any time in your device settings.

2.4 Cookies, similar technologies, and web beacons (where applicable)
If the Service uses web-based components (such as in-app web views) we may use:
- Cookies and similar technologies to keep you signed in and remember preferences.
- Web beacons (or similar) to understand usage and improve performance.
You can typically control cookies through your device and browser settings; some features may not work properly if cookies are disabled.

2.5 Photos and face-related data
The Service may allow you to select or use photos/videos you choose to provide for creation or editing features (for example, generating a beauty-related output based on an input image).
- No face recognition / biometrics: We do not perform face recognition, and we do not build or store biometric templates or “faceprints”.
- One-time processing and deletion: When an image is processed for a feature, it is processed one time and then deleted from our processing pipeline once the output is generated, except as needed for short-lived technical operations (e.g., transmission).
- Default local storage: By default, outputs are stored locally on your device (subject to your device settings). If a feature requires uploading media for processing or sharing, we only use it for that specific purpose.
- No training or marketing use: We do not use your photos/videos to train models for our benefit, and we do not use them for marketing without your explicit consent.

3) HOW WE USE INFORMATION
We use information to:
- Provide and maintain the Service (account creation, authentication, content delivery, community features).
- Personalize your experience (remember preferences; improve content relevance and usability).
- Improve the Service (analytics, troubleshooting, crash analysis, performance tuning).
- Ensure safety and security (fraud prevention, abuse detection, enforcing rules, protecting users).
- Provide customer support and respond to inquiries.
- Comply with legal obligations and respond to lawful requests.

We do not sell your personal information.

4) LEGAL BASES (WHERE APPLICABLE)
If you are in a jurisdiction that requires a legal basis (e.g., EEA/UK), we process information under the following bases as applicable:
- Contract: to provide the Service you request.
- Legitimate interests: to secure, improve, and maintain the Service (balanced with your rights).
- Consent: for optional permissions such as precise location, where required.
- Legal obligation: where we must comply with law.

5) HOW WE SHARE INFORMATION
We share information only as necessary and proportionate:

5.1 With your consent or at your direction
We share information when you choose to post content, connect with others, or otherwise direct us to share.

5.2 Service providers (processors)
We may share information with trusted vendors who process data on our behalf (e.g., cloud hosting, analytics, crash reporting, customer support tooling). They are authorized to use information only to provide services to us and must follow contractual confidentiality and security obligations.

5.3 Legal and safety reasons
We may disclose information if we believe in good faith that it is necessary to:
- comply with applicable law, regulations, legal process, or governmental requests;
- enforce our terms and policies;
- protect the rights, property, and safety of Cravi, our users, or the public; or
- detect, prevent, or address fraud, security, or technical issues.

5.4 Business transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards.

6) INTERNATIONAL DATA TRANSFERS
Your information may be processed in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.

7) SECURITY
We use reasonable administrative, technical, and organizational measures designed to protect information, including:
- Encryption in transit and, where appropriate, encryption at rest;
- Access controls and least-privilege principles;
- Regular security reviews/audits and monitoring;
- Backup and recovery procedures.
No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8) DATA RETENTION
We retain information as follows, unless a longer period is required by law:
- Account information: for the duration of your account.
- Deletion after account closure: after you delete your account, we delete or anonymize personal information within 30 days, unless we must retain certain data for legal, security, or dispute-resolution purposes.
- Usage data: up to 12 months (typically aggregated and/or de-identified where feasible).
- Support content: up to 6 months after the support request is resolved, unless we need it longer for safety, quality, or legal reasons.

9) YOUR RIGHTS AND CHOICES
Depending on your location, you may have rights to:
- Access and obtain a copy of your personal information;
- Correct inaccurate or incomplete information;
- Delete your personal information;
- Restrict or object to certain processing;
- Withdraw consent (e.g., location permission) at any time (without affecting processing before withdrawal).

How to exercise your rights:
- Email us at kironkiron667@outlook.com with your request and the email associated with your account.
- We will respond within 5 business days (or sooner where required by law). We may need to verify your identity to protect your account.

10) DO NOT TRACK / TARGETED ADVERTISING
We do not sell personal information. If we use analytics or measurement tools, they are used to understand performance and usage, not to sell your data. Your device may provide settings to limit tracking; we respect applicable platform and legal requirements.

11) CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date. If changes are material, we will provide additional notice as required by law.

12) CONTACT US
Cravi Team
Email: kironkiron667@outlook.com