1) Who we are
Andrava is operated by Andrava Team ("Andrava", "we", "us", or "our").
Intended audience: 17+ (not directed to children under 17).
2) Scope
This Privacy Policy applies to information processed through the Service, including when you:
- create or manage an account;
- use features to capture quotes, create reading notes, or generate visual diary-style outputs; or
- contact customer support.
3) Information we collect
We collect information in three main ways: (A) information you provide, (B) information collected automatically, and (C) information collected with your permission (e.g., location).
3.1 Information you provide
- Account information: name, username, email address.
- Customer support information: the content you send to us (e.g., messages, attachments, and any information you choose to include).
- Content you create or upload (optional): reading notes, quotes, images/photos, and related inputs you choose to provide in the Service.
3.2 Information collected automatically
- Device information: device model, operating system version, app version, language, time zone, and identifiers such as device IDs or app instance identifiers.
- Usage data: interactions with the Service, feature usage, settings and preferences, and basic performance metrics.
- Crash logs and diagnostics: crash reports, error logs, and related technical data to troubleshoot reliability and improve stability.
3.3 Location information (only if you allow it)
If you grant permission, we may collect location information, which may be precise or approximate, depending on your device settings and permission level. You can withdraw permission at any time in your device settings.
3.4 Cookies and similar technologies
If parts of the Service are delivered through web views or web-based components, we (and our service providers) may use cookies, local storage, and similar technologies (which may include web beacons) to:
- keep you signed in;
- remember preferences; and
- help measure performance and reliability.
4) Photos, face-related data, and biometrics
Andrava may allow you to select or upload photos/images as part of creating visual diary-style outputs.
- No face recognition: we do not perform face recognition.
- No biometric identification: we do not collect or create biometric identifiers or biometric information for identification purposes.
- One-time processing: when you choose to use generation features that require server processing, we process your uploaded image/text only to produce the requested result and then delete the uploaded inputs as described in Section 10 (Data retention).
- Default local storage: your created content is intended to be stored locally on your device by default, unless you choose to upload content for a specific feature.
- Not used for training/marketing: we do not use your uploaded photos or text inputs for advertising/marketing, and we do not use them to train third-party models.
5) Optional automated/AI-assisted generation features
Some features may use automated algorithms (and may be described as "AI" in the app) to generate visual outputs from text or images. When you use these features:
- Processing location: any text or images you choose to upload are processed on our own servers controlled by Andrava Team.
- No third-party sharing: we do not share your uploaded text/images with any third party for this processing.
- Deletion after processing: after the requested output is generated, we delete the uploaded text/images from our servers promptly (typically immediately after processing, unless temporary retention is required for reliability, security, or legal compliance).
- Your control: you decide whether to upload inputs and whether to generate content. If you do not upload, the feature will not process content on our servers.
6) How we use information
We use information for the following purposes:
- Provide and maintain the Service (e.g., account creation, feature operation).
- Personalize the experience (e.g., remembering preferences and settings).
- Improve the Service (e.g., analyzing usage, fixing bugs, enhancing performance).
- Safety and security (e.g., preventing fraud, abuse, or security incidents).
- Customer support (e.g., responding to inquiries and troubleshooting).
- Legal compliance (e.g., complying with lawful requests and applicable laws).
We do not sell personal information.
8) International transfers
Your information may be processed in countries other than where you live. Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms for cross-border transfers.
9) Data security
We use reasonable safeguards designed to protect information, including:
- encryption in transit and, where appropriate, encryption at rest;
- access controls and least-privilege permissions;
- periodic security reviews/audits; and
- backups designed to support availability and recovery.
No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
10) Data retention
We retain information as follows (unless a longer retention period is required by law):
- Account information: retained for as long as your account is active.
- Account deletion: if you request deletion, we delete or anonymize account-related personal information within 30 days, except as needed for legal compliance, security, or dispute resolution.
- Usage data: retained up to 12 months for product improvement and performance analysis.
- Customer support: retained up to 6 months after the support case is closed.
- Generation feature uploads (if used): deleted promptly after processing, as described in Section 5.
11) Your privacy rights and choices
Depending on your location, you may have rights to:
- access and obtain a copy of your information;
- correct inaccurate information;
- delete your information;
- restrict or object to certain processing; and
- withdraw consent (where processing is based on consent).
To exercise rights, email us at sqrhlisr911734@outlook.com. We will respond within 5 business days (and may request reasonable verification to protect your account).
12) Children’s privacy
The Service is intended for users aged 17 and older and is not directed to children under 17. If you believe a child under 17 has provided personal information, contact us and we will take appropriate steps to delete it.
13) Third-party services
The Service may rely on third-party software development kits (SDKs) or infrastructure (e.g., crash reporting). These providers process information on our instructions as service providers, unless otherwise disclosed. This Privacy Policy does not cover third-party websites or services you may access outside the Service.
14) Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will update the "Effective Date" at the top when changes take effect. If changes are material, we will provide additional notice within the Service where required.
15) Contact us
Andrava Team
Email: sqrhlisr911734@outlook.com