Our Commitment
Vellaya AI is built on a foundation of user trust. We are committed to handling your personal data — including photos you upload for skin and hair analysis — with transparency, care, and strict security practices. This Privacy Policy explains exactly what we collect, why we collect it, who receives it, how long it is retained, and the rights available to you.
Introduction
This Privacy Policy governs the collection, use, storage, and disclosure of personal data by Vellaya AI ("Vellaya", "we", "our", "us") through its mobile and web application (the "App").
By accessing or using the App, you acknowledge that you have read and understood this Policy. If you do not agree, please discontinue use of the App.
1. Information We Collect
We collect only the information necessary to deliver a personalised and functional experience.
a. Account Information
- Full name and email address
- Login credentials, whether via direct email registration or a supported social login provider
b. Face, Skin, Hair & Scalp Images ("Face Data")
To use our AI-powered analysis features, you may voluntarily upload photographs of your face, skin, hair, or scalp ("Face Data").
Face Data may include:
- Facial skin appearance
- Skin texture
- Acne visibility
- Pigmentation visibility
- Redness visibility
- Hair appearance
- Hair density visibility
- Scalp visibility
- Other cosmetic characteristics visible within submitted images
Face Data is collected only when:
- You voluntarily capture or upload an image
- You grant camera and/or photo library permissions where required
- You explicitly initiate an image-based analysis
- You provide consent for AI-powered image processing
The App does not collect facial images automatically and does not access your camera or photo library without your permission.
To improve the relevance and accuracy of analysis results, uploaded images may be processed together with information you provide, including age, gender, allergies, pregnancy or nursing status, lifestyle information, cosmetic goals, geographic region, and environmental conditions.
c. Analysis & Metrics Data
We generate and store analysis information derived from submitted images, including:
- Hydration indicators
- Acne observations
- Pigmentation indicators
- Skin texture assessments
- Hair density observations
- Scalp health observations
- AI-generated insights and recommendations
- Historical trend and progress information
d. Location & Environmental Data
- Approximate geographic location
- Regional weather and environmental information
- UV index, humidity, climate, and seasonal factors
This information is used solely to improve the relevance of recommendations and analysis results.
e. Device & Usage Data
- Device type
- Operating system
- Application version
- Feature usage information
- Crash reports and diagnostic logs
- Performance analytics
2. How We Use Your Data
We use collected information solely for the following purposes:
- Performing AI-powered skin, hair, and scalp analysis
- Generating cosmetic insights and personalised recommendations
- Maintaining your historical scan timeline and progress tracking features
- Improving recommendation quality using environmental and location factors
- Maintaining account functionality and security
- Detecting fraud, abuse, and technical issues
- Complying with legal and regulatory obligations
- We do not sell personal data.
- We do not rent, lease, or trade uploaded images.
- We do not use uploaded images for behavioural advertising.
- We do not use uploaded images to train consumer-facing AI models without obtaining any permissions required by applicable law.
3. Face Data Disclosure
What Face Data We Collect
When you choose to use image-based analysis features, we collect only the facial, skin, hair, and scalp images that you voluntarily upload or capture through the App.
Why We Collect Face Data
Face Data is collected solely to:
- Perform AI-powered skin, hair, and scalp analysis
- Generate personalised cosmetic insights and recommendations
- Provide scan history and progress tracking
- Enable historical comparisons of previous scans
- Improve continuity and consistency of future analyses
Who Receives Face Data
To generate analysis results requested by users, uploaded images and relevant profile information may be securely transmitted to: Google LLC Google Generative Language API (Gemini)
This transmission occurs solely to provide the analysis functionality requested by the user.
- We do not sell Face Data.
- We do not license Face Data.
- We do not share Face Data with advertisers.
- We do not use Face Data for behavioural advertising.
How Long Face Data Is Retained
If image analysis cannot be completed successfully, uploaded images are automatically deleted shortly after the failed processing attempt.
For successful analyses, uploaded images and associated analysis records may be retained while your account remains active in order to provide:
- Historical scan timelines
- Progress tracking
- Historical comparisons
- Personalised recommendations
- Long-term cosmetic insights
You may delete scans through the App at any time.
If you delete your account, Face Data and associated analysis records are permanently removed from active systems within a reasonable period, except where retention is required by law.
4. Facial Image & Biometric Data Disclaimer
No Facial Recognition. No Biometric Identification.
The image analysis performed by Vellaya AI is limited strictly to cosmetic assessments, such as skin texture, tone, visible skin conditions, hair characteristics, and scalp observations.
We do NOT perform facial recognition.
We do NOT perform identity verification.
We do NOT attempt to identify or authenticate individuals from uploaded images.
We do NOT create, store, or process biometric identifiers or biometric templates as defined under applicable privacy regulations, including GDPR, CCPA, or BIPA.
Images are never used for any purpose beyond generating the analysis you requested.
5. Data Sharing & Third-Party Services
We do not sell, trade, or rent your personal data.
AI Processing Providers
To generate analysis results, uploaded images, Face Data, and relevant profile information may be securely transmitted to:
Google LLC Google Generative Language API (Gemini)
The transmission of this information is necessary to provide the AI-powered analysis functionality requested by the user.
Data transmitted to these providers is protected using industry-standard HTTPS/TLS encryption.
We require service providers to process data only for authorised purposes and in accordance with applicable privacy and security requirements.
Payment Processing
For purchases and subscriptions made through the iOS application, payment transactions are processed by Apple through the App Store In-App Purchase system.
We do not collect, store, or have access to users' full payment card details, banking information, or payment credentials.
Payment information is handled by Apple in accordance with Apple's privacy and security practices.
For purchases made through other platforms, payments may be processed by the applicable platform provider or authorised payment processor.
Infrastructure & Hosting Providers
We may use trusted hosting and infrastructure providers to securely operate the App and store authorised user data.
Apart from these service providers required for operation of the App, we do not disclose uploaded images or Face Data to third parties.
6. Data Security
We implement appropriate technical and organisational safeguards to protect personal information.
Security measures include:
- HTTPS/TLS encryption during transmission
- Authentication and access control systems
- Restricted administrative access
- Segregation of user data
- Continuous monitoring and security reviews
Access to user images and analysis data is limited to systems and personnel who require such access to operate, maintain, secure, or support the service.
7. Data Retention & User Control
Failed Scan Deletion
If an uploaded image fails quality validation or analysis generation cannot be completed, the image is automatically and permanently deleted.
Successful Scan Retention
Successful scan images and associated analysis results may be retained while your account remains active to provide:
- Historical progress tracking
- Scan timeline functionality
- Personalised recommendations
- Long-term cosmetic insights
Scan History Deletion
You may permanently delete scan history and associated images through the App.
Deletion removes the analysis records and associated image files from active systems.
Account Deletion
When you delete your account, uploaded images, Face Data, scan history, and associated personal analysis records are permanently removed from active systems within a reasonable period, except where retention is required by law.
Certain non-identifiable administrative, accounting, fraud-prevention, security, or legal compliance records may be retained where legally required.
Please contact us at vellayaAI@gmail.com. We will respond within 30 days. Users in the European Union, United Kingdom, and California have additional rights under the GDPR, UK GDPR, and CCPA respectively.
8. Children's Privacy
The App is not directed at, and is not intended for use by, individuals under the age of 13, or under the age of 16 where required by applicable law (including in EU member states).
We do not knowingly collect personal data from children.
If you believe that a child has provided us with personal data without appropriate parental consent, please contact us immediately at vellayaAI@gmail.com, and we will take prompt steps to delete the relevant information.
9. Medical & Clinical Disclaimer
This Is Not a Medical Service
Vellaya AI is an informational wellness application. It is not a medical device, diagnostic tool, or clinical service and is not regulated as such.
Nothing within the App, including AI-generated analysis results, skin assessments, or product recommendations, constitutes medical advice, a clinical diagnosis, or a prescribed course of treatment.
AI-generated results are estimations based on visual data and are subject to variability depending on image quality, lighting, and individual factors.
You should always seek the advice of a qualified physician, dermatologist, or other licensed healthcare professional before making any decisions regarding your health, skin condition, or treatment regimen.
10. Amendments to This Policy
We reserve the right to update or modify this Privacy Policy at any time.
When material changes are made, we will notify you by email or via a prominent in-app notification prior to the changes taking effect.
Your continued use of the App following such notification constitutes your acceptance of the revised Policy.
The current version of this Policy will always be accessible at https://mindhatch.ca/privacy-policy.html.
11. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which we handle your personal data, please contact our team at:
Vellaya AI — Privacy
Email: vellayaAI@gmail.com
Website: https://mindhatch.ca/