Privacy Policy
Virra AI (operated by Magna Growth Partners LLC) takes your privacy seriously. This policy explains what data the Virra AI mobile app and website collect, how we use it, who we share it with, and the rights you have over your data.
1. Data we collect
- Photos. Front, side, and (optional) smile photos you take inside the app.
- Quiz answers. Your responses to the in-app questions about goals, lifestyle, budget, and concern areas.
- Derived measurements and scores. Facial landmarks, jaw angle, symmetry, skin status, and the resulting tier and rating computed by our scoring engine.
- Subscription and purchase events. Purchase status, trial status, and entitlement, handled by RevenueCat and Apple.
- Basic technical data. Device type, OS version, app version, and crash logs for debugging.
- Advertising identifiers (iOS IDFA, Android GAID), only with your permission. If you allow tracking when prompted by iOS App Tracking Transparency (or your equivalent Android setting), we share your advertising identifier with AppsFlyer for install attribution — so we know which ad campaign brought you to Virra AI. If you decline, no identifier is collected and no attribution is performed.
2. How we use your data
- To run the face rating and generate your personal protocol.
- To improve the scoring model and the protocol over time.
- To process subscriptions and in-app purchases.
- To provide customer support when you contact us.
3. Third parties we share data with
We use a small number of vendors to deliver the rating, the read, and the subscription. Each vendor receives only what they need:
- Face++ (Megvii Technology, China). Receives the front, side, and smile photos to detect facial landmarks and skin attributes. Photos are sent over TLS. Face++ retains processed face tokens per their policy. Face++ Privacy Policy.
- Anthropic (Claude). Receives your scan measurements, score, tier, and quiz answers (no photos, no name) to generate your honest read and insights. Anthropic Privacy Policy.
- OpenAI. Used as a fallback if Anthropic is unavailable. Same payload as above. OpenAI Privacy Policy.
- Supabase. Stores your scan history if you opt in to cloud sync (off by default). Supabase Privacy Policy.
- RevenueCat. Handles subscription state. Does not receive your photos or scan data. RevenueCat Privacy Policy.
- AppsFlyer. Receives your advertising identifier (IDFA on iOS, GAID on Android) and basic install/event metadata only if you grant tracking permission. Used to attribute installs to the marketing campaign that referred you. Does not receive your photos, scan data, or name. AppsFlyer Privacy Policy.
- Apple. Receives purchase events for in-app subscriptions per the App Store agreement.
3a. Face data — specific disclosure
Because face data is sensitive, we call out exactly how it is handled in Virra AI:
- What we collect. Two required photos (front and side) and one optional photo (smile). From these photos, our analysis partner derives 106 facial landmark points and skin attributes (acne, dark circles, staining, health score).
- How we use it. The photos are sent to Face++ (Megvii Technology) over TLS to compute facial landmarks and skin attributes. The resulting numeric measurements — not the photos — are then passed to Anthropic (Claude) or, as a fallback, OpenAI, to generate your rating, written read, and protocol. Photos never leave the app for any other purpose.
- Third-party sharing. Photos are shared with Face++ only. Numeric measurements derived from your photos are shared with Anthropic and OpenAI (no photos, no name, no email). No face data is shared with advertisers, data brokers, AppsFlyer, RevenueCat, or Apple.
- Where it is stored. Photos and scan results are stored locally on your device by default. If you opt in to cloud sync (off by default), scan results (not raw photos) are stored in Supabase tied to your account.
- How long we keep it. Local photos and scans remain on your device until you delete them or uninstall the app. Cloud-synced scan results remain until you delete your account, at which point they are removed within 14 days. Face++ may retain processed face tokens per their own policy; we do not control that retention and cannot delete it on your behalf, but you can contact Face++ directly.
- No biometric identification. Face data is used only to score your face for a wellness/cosmetic rating. It is never used to identify you, authenticate you, train AI models, or for advertising.
4. Data retention
- Photos and scan data are stored locally on your device by default. Deleting the app removes them.
- If you opt in to cloud sync, your scans live in Supabase until you delete your account.
- Anthropic and OpenAI retain prompt and response data per their respective policies; we do not control their retention.
- Face++ retains face tokens per their policy; we do not control their retention.
4a. Tracking (iOS App Tracking Transparency)
On iOS, Virra AI shows the system App Tracking Transparency prompt the first time you open the app. If you choose "Allow", we share your advertising identifier (IDFA) with AppsFlyer to attribute your install to the campaign that referred you. If you choose "Ask App Not to Track", no IDFA is collected and AppsFlyer receives no identifier from us. Your choice can be changed at any time in iOS Settings → Privacy & Security → Tracking. Tracking is never used to advertise face data or scan results.
5. Your rights
- Access. Email us and we will send you a copy of any data we hold.
- Delete. Tap "Delete account" inside the app, or email us. We will delete your data within 14 days. We will request deletion from Supabase. We cannot delete data already retained by Anthropic, OpenAI, or Face++ but you can contact each vendor directly.
- Export. Email us for a JSON export of your scans and quiz answers.
- Opt out. You can use the app without cloud sync at any time.
6. Children
Virra AI is rated 17+. We do not knowingly collect data from anyone under 17. If you believe a child under 17 has used the app, contact us and we will delete the account.
7. Changes
We may update this policy as the app changes. Material changes will be announced inside the app and dated at the top of this page.
8. Contact
Questions, requests, or complaints: august@magnamarketing.io.