Beauty images and profile data
Aveline processes camera captures and user-selected reference images on the device for color, face-shape, and beauty-look analysis. Camera captures are written temporarily to app cache for decoding and are then deleted. Reference images selected through the system picker are decoded for analysis and are not copied into Aveline's persistent storage.
Numeric results and user choices are stored in app-private storage. These can include color measurements, melanin index, facial ratios, face shape, season probabilities, preferences, saved looks, analysis history, drape decisions, and custom swatches. Aveline excludes this storage from Android cloud backup and device-to-device transfer.
A beauty dossier is exported only when the user requests it. Android's share sheet sends that dossier to the application selected by the user; the selected application's privacy practices then apply.
Firebase diagnostics and app security
Aveline uses Firebase Crashlytics for crash diagnostics. Crash reports can include stack traces, app/device state, and installation identifiers, but Aveline does not intentionally attach beauty images or profile fields. Firebase Analytics and advertising-storage consent are denied by the app.
Firebase App Check with Play Integrity sends app/device attestation data to protect the purchase-verification function. Firebase Anonymous Authentication creates an account identifier used only to bind a Play purchase to the app installation/account context.
Subscriptions
Google Play handles subscription checkout and payment information. Aveline sends the Play purchase token and anonymous account identifier to an App Check-protected Firebase function. The function validates the fixed Aveline package, product, base plan, account binding, state, and expiry with the Google Play Developer API and acknowledges valid purchases. The Android app does not persist purchase tokens.
Retention and deletion
Local profile data remains until the user deletes it or removes the app. "Purge All Data" clears Aveline's Room tables, settings, cached entitlement, temporary selfie files, and generated dossier exports. A valid Play subscription can be restored from Google Play after local deletion. Crashlytics, Firebase Authentication, Google Play, and a user-selected sharing application retain data according to their own policies and configured retention periods.
Sale and advertising
Aveline does not sell beauty images or facial analysis data and does not request the Android advertising ID. The app does not show third-party advertising.
Contact and publication
Before a production Play release, the operator must publish this notice at a stable HTTPS URL and provide the same support/privacy contact in that public notice and the Play listing.