Privacy Policy

Summary: My Ethnicity is an AI-powered app that analyzes selfies to generate entertainment-purpose insights about cultural origins, past portraits, ancestral lifestyles, and compatible partner images. We do not perform actual DNA testing or scientific ancestry analysis.

This Privacy Policy describes how Visorya ("we," "us," "our") collects, uses, shares, and protects your information when you use the My Ethnicity mobile application (the "App"). By using My Ethnicity, you agree to the terms described in this Policy.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email address, password (hashed), date of birth, and gender (optional).

Sign-in Credentials: When you sign in with Google or Apple, we receive basic profile information from those providers (such as your name and email address).

Photos and Selfies: Images you upload or capture for AI analysis.

Survey Responses: Preferences you provide during onboarding and feature use (e.g., the Ideal Partner questionnaire).

Support Communications: Information you send when contacting us, including the content of your messages.

1.2 Information Collected Automatically

Device Information: Device model, operating system version, language and region settings, time zone, and device identifiers.

Usage Data: Features used, screens viewed, session duration, errors encountered, and in-app actions.

Diagnostic Data: Crash logs and performance data.

Network Information: IP address (used for fraud prevention, security, and approximate location).

1.3 Information from App Store

Purchase Information: Subscription status and transaction identifiers. We do not store payment card data; payment processing is handled by Apple.

2. How We Use Information

We use your information to:

Provide the AI analysis features (Ethnic Origin, Past Portrait, Ancestor Gallery, Ancestral Lifestyle, Ideal Partner).

Create and manage your account.

Process subscription payments and manage your Pro status.

Personalize your experience based on preferences and survey responses.

Communicate with you about service updates, security alerts, and support.

Detect, prevent, and address fraud, abuse, or technical issues.

Improve and develop new features.

Comply with legal obligations.

3. How We Handle Your Photos and Face Data

Photos and selfies are the most sensitive data we process. We take the following measures to handle them responsibly:

Purpose-Limited Use: Photos are used solely to generate the AI outputs you request (ethnicity estimation, ancestor portraits, past-life portraits, ideal partner previews, ancestral lifestyle narratives).

Encrypted Transmission: All photo uploads occur over encrypted HTTPS/TLS connections.

AI Processing by Google Gemini: Your selfies are transmitted to Google's Gemini API (operated by Google LLC), specifically the gemini-2.5-flash and gemini-3.1-flash-image-preview models, for AI analysis and image generation. Google's paid API terms apply (https://ai.google.dev/terms). Per these terms, Google does not retain your content for model training.

No Biometric Templates: We do not create biometric templates, face geometry, FaceID-style face signatures, or any other persistent biometric identifier from your photos. We do not use ARKit face tracking, the TrueDepth camera API, or Vision framework face landmark detection.

Storage: Photos and generated outputs are stored on our servers only as long as needed to deliver the result, plus a retention period for your in-app history. You can delete individual analyses and photos at any time through the History or Device Images screens.

Retention Limit: Face images and generated outputs are deleted within 30 days when you remove them from the in-app History screen or close your account.

No Facial Recognition Database: We do not use your face to identify you across services or build a biometric identification database.

No Sale of Photos: We do not sell, rent, share, or trade your photos to third parties for marketing, advertising, or data brokerage purposes.

No Training Without Consent: Your photos are not used to train AI models without your explicit consent.

4. Third-Party Services

We rely on the following categories of third-party services that may process your data on our behalf:

Google Gemini API (Google LLC): Processes your selfies for AI analysis and image generation. Subject to Google's API terms at https://ai.google.dev/terms. Google does not retain your content for model training under the paid Gemini API.

Firebase (Google): Authentication only. Firebase Analytics, Firebase Ads, and Firebase Crashlytics are not enabled in this app.

Google Sign-In: Optional authentication method.

Apple Sign-In: Optional authentication method.

Apple App Store: Subscription processing and account verification.

Cloud Storage Providers: Secure hosted storage for uploaded media and generated content.

Each third-party service has its own privacy policy. We encourage you to review them. We enter into data processing agreements with our service providers and require them to handle your data securely and only for the purposes we specify.

5. Information Sharing

We do not sell your personal information. We may share information in the following limited circumstances:

Service Providers: With vendors who process data on our behalf (AI providers, cloud hosting, analytics), bound by data processing agreements.

Legal Requirements: When required to comply with law, court order, or government request.

Safety: To protect the rights, property, or safety of Visorya, our users, or others.

Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality protections.

With Your Consent: When you explicitly agree to a specific sharing.

6. Data Storage and Security

We implement industry-standard technical and organizational measures to protect your information:

Encryption in transit (HTTPS/TLS) and at rest.

Access controls and least-privilege permissions for our staff.

Regular security reviews and software updates.

Hashed and salted passwords; we never store passwords in plaintext.

Logging and monitoring for suspicious activity.

While we take reasonable precautions, no system is completely secure. We cannot guarantee absolute security of your information.

7. Data Retention

Account Data: Retained while your account is active and for a reasonable period after account closure to comply with legal obligations.

Photos and Analyses: Retained in your history until you delete them or close your account.

Diagnostic Data: Retained for up to 90 days.

Backups: Removed from active systems within 30 days of deletion; may remain in encrypted backups for an additional period before being purged.

You can delete your account at any time through the in-app "Close My Account" option, which will trigger deletion of your personal data within 30 days.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you.

Correction: Request correction of inaccurate or incomplete data.

Deletion: Request deletion of your data ("right to be forgotten").

Restriction: Restrict processing of your data in certain cases.

Portability: Receive your data in a portable, machine-readable format.

Objection: Object to certain types of processing.

Withdraw Consent: Withdraw consent where processing is based on consent.

Lodge a Complaint: File a complaint with your local data protection authority.

To exercise these rights, contact us at support@myethnicity.io. We will respond within 30 days.

8.1 California Residents (CCPA/CPRA)

California residents have additional rights, including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.

8.2 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are in the EEA, UK, or Switzerland, our lawful bases for processing your information include: (a) your consent; (b) performance of a contract with you; (c) compliance with legal obligations; and (d) our legitimate interests in operating and improving the service. You have the right to lodge a complaint with your local supervisory authority.

9. International Data Transfers

My Ethnicity is operated by Visorya. Your data may be transferred to and processed in countries other than your country of residence, including jurisdictions that may have different data protection laws than your own. We implement appropriate safeguards (such as standard contractual clauses) for international transfers where required by applicable law.

10. Children's Privacy

My Ethnicity is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children under this age. If we learn that we have collected such information, we will delete it promptly. If you believe that a child has provided us with information, please contact us immediately at support@myethnicity.io.

11. Analytics and Tracking

We do not use third-party analytics tools, advertising trackers, or cookies within the App. Firebase Analytics and Firebase Ads are explicitly disabled in our application configuration (IS_ANALYTICS_ENABLED and IS_ADS_ENABLED both set to false in our Firebase configuration file). We use no attribution SDKs, no audience measurement SDKs, and no advertising identifiers. Apple's App Tracking Transparency framework is respected: if tracking is ever required for a future feature, you will be asked for permission first.

12. Third-Party Links

Our App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Please review their policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, by providing in-app notification or email. Your continued use of My Ethnicity after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Visorya — Email: support@myethnicity.io

© 2026 Visorya. All rights reserved.