Privacy Policy

Last updated September 14, 2026

Effective Date: September 14, 2026

This Privacy Policy explains how Ysoftware LLC ("Ysoftware," "Avina," "we," "us," or "our") collects, uses, discloses, and protects information when you use the Avina mobile applications, the Avina web application at https://avina.skin/app, the website at https://avina.skin, and related services collectively referred to as the "Services."

Ysoftware LLC is located at:
4111-e Rose Lake Dr #10237
Charlotte, NC 28217
United States

Privacy questions and requests may be sent to privacy@avina.skin.

Support requests may be sent to support@avina.skin.

1. Information We Collect

We collect only information reasonably necessary to provide, secure, maintain, and improve Avina.

Account and authentication information

Depending on how you sign in, we may process:

email address;
authentication provider information from Apple, Google, or email sign-in;
a unique Avina/Supabase account identifier;
account creation and login timestamps;
optional display name; and
optional Avina preset avatar selection.

Avina does not require you to create or store a password with Ysoftware when using the supported passwordless sign-in methods.

On supported mobile flows, Avina may create a temporary anonymous account before you complete sign-in so that onboarding progress can be preserved.

Skin profile information

You may voluntarily provide cosmetic profile information such as:

skin type;
skin concerns; and
skin goals.

This information is used to personalize relevant parts of Avina, such as product discovery and routine suggestions.

Avina is not designed to collect medical records, diagnoses, prescription information, pregnancy information, or other clinical records.

Routine and app information

We may store information you create or generate while using Avina, including:

skincare routines and routine steps;
scheduled routine days;
routine completion history;
streaks and achievements;
favorites and recently viewed products;
Shelf, restock, and wishlist information;
reminder preferences;
custom products;
product notes;
product names, brands, categories, sizes, and ingredient information you enter;
barcode scan records associated with product lookup or catalog maintenance; and
related app settings and preferences.

Some preferences may be stored only on your device or browser.

Product photos

Avina may allow you to take a photo or choose a photo from your device library for a custom product.

Custom-product photos are stored privately and are intended to be accessible only in connection with your account and authorized operation of the Service. They are not automatically published as catalog images.

When Avina uses the camera to scan a barcode or product label, scan frames are processed on the device and are not uploaded as scan photographs.

If you choose to save an Avina achievement or sharing image, the app may request permission to save that image to your device photo library.

Communications

If you contact us, we may collect:

your name;
email address;
message;
attachments or other information you voluntarily provide; and
information necessary to respond to your request.

Subscription and transaction information

If you purchase Avina Premium, the transaction is processed by the applicable payment provider.

Depending on the platform, this may include:

Apple App Store;
Google Play;
Stripe for web purchases; and
RevenueCat for subscription entitlement and purchase-status management.

We may receive information such as the subscription product, transaction or purchase identifier, subscription status, renewal status, entitlement status, and related billing metadata.

Ysoftware does not receive or store your full payment-card number when a web payment is processed by Stripe.

Device, technical, and usage information

We and our service providers may process limited technical information such as:

IP address;
browser or device type;
operating system;
user agent;
timezone;
app version;
pages or screens viewed;
app-open and app-close activity;
feature interactions;
approximate geographic information derived from IP address; and
diagnostic and security information.

2. Analytics

Avina uses PostHog to understand how the Services are used and to improve the product.

Mobile analytics

On iOS and Android, Avina may collect limited analytics such as:

screen views;
app lifecycle events;
routine-completion events; and
broad categories associated with certain feature usage.

Mobile analytics does not use session replay or mobile autocapture.

Avina does not intentionally send PostHog your email address, skin profile, custom-product photos, barcode values, notes, or catalog search text.

Web analytics

On the Avina website and web application, non-essential PostHog analytics are activated only after you accept analytics through Avina’s privacy choices.

If accepted, web analytics may include:

pageviews;
feature interactions;
autocaptured clicks and submissions;
web performance information;
heatmaps; and
session replay.

Text inputs are configured to be masked in session replay.

If you choose Essentials only or otherwise reject analytics, Avina does not initialize the non-essential PostHog web analytics covered by that choice and removes associated PostHog browser storage where supported.

You can change your web analytics preference through the Privacy Choices control made available by Avina.

Advertising measurement

The Avina mobile apps include the Meta (Facebook) software development kit so that Avina can measure whether its advertising on Facebook and Instagram leads to installs and subscriptions. For this purpose the app may send Meta:

app-open, onboarding, checkout, and routine-completion events;
a device advertising identifier where you allow it (on iOS only after you allow tracking in the system prompt; on Android the advertising ID); and
subscription events, sent through RevenueCat.

Meta processes this information under its own privacy policy, including to measure and improve the delivery of Avina’s advertising. Avina does not send Meta your email address, skin profile, custom-product photos, barcode values, notes, or catalog search text.

You can decline on iOS in the tracking prompt or later in Settings, Privacy & Security, Tracking. On Android you can delete or reset your advertising ID in the system settings.

If your device region is in the European Economic Area, the United Kingdom, or Switzerland, the app keeps this Meta measurement switched off until you agree to it in the app. You can change your choice at any time in Profile, under Ad measurement.

3. Cookies and Similar Technologies

Avina uses browser storage and similar technologies.

Essential and functional storage

These technologies may be used for purposes such as:

maintaining your authenticated session;
security;
remembering your theme;
remembering app preferences;
preserving onboarding or interface state; and
remembering your privacy choices.

These functions may be necessary for the web application to work properly.

Analytics storage

PostHog may use cookies, local storage, or similar browser technologies when web analytics have been accepted.

Avina does not use advertising cookies on its website. The mobile apps include the Meta measurement software described in section 2.

4. How We Use Information

We may use information to:

create and maintain your account;
authenticate you;
provide Avina’s routines, product catalog, Shelf, reminders, history, streaks, and other features;
personalize features using information you choose to provide;
process and maintain subscriptions;
provide customer support;
respond to requests and communications;
operate product and barcode lookup functionality;
maintain and improve the product catalog;
analyze product performance and usage;
detect abuse, fraud, security incidents, or technical problems;
protect Avina, our users, and our systems;
comply with legal obligations; and
enforce our Terms of Use.

Where applicable law requires a legal basis for processing, we process information as necessary to perform our agreement with you, comply with legal obligations, pursue legitimate interests such as operating and securing the Service, or based on your consent where consent is required.

5. How We Disclose Information

We do not sell your personal information.

We share device identifiers and app events with Meta for advertising measurement as described in section 2. Under some U.S. state laws this may be considered “sharing” for cross-context behavioral advertising; you can opt out as described in section 2.

We do not operate third-party advertising inside Avina.

We may disclose information to service providers that process information on our behalf or help us operate Avina, including:

Supabase

We use Supabase for authentication, database services, private file storage, server functions, and related infrastructure.

PostHog

We use PostHog for product analytics as described above.

Vercel

We use Vercel to host and deliver portions of the Avina website and web application.

Resend

We use Resend to deliver certain user-initiated contact communications.

Apple and Google

Apple and Google may process information when you use their authentication services or purchase subscriptions through their stores.

RevenueCat

We may use RevenueCat to process and synchronize subscription status and premium entitlements associated with mobile purchases.

Stripe

We use Stripe to process web subscription payments. Stripe processes payment information under its own privacy practices.

Browser notification providers

If you enable web push notifications, encrypted notification messages are transmitted through the applicable browser or operating-system push infrastructure.

Legal, safety, and business purposes

We may disclose information when reasonably necessary to:

comply with law, regulation, legal process, or valid governmental request;
protect the rights, property, security, or safety of Ysoftware, our users, or others;
investigate fraud, abuse, or security issues;
enforce agreements; or
complete a merger, financing, acquisition, reorganization, sale of assets, or similar corporate transaction, subject to applicable law.

6. Product Information and Catalog Contributions

Avina contains information about third-party skincare and related products.

Catalog information, including ingredient lists, may be incomplete, outdated, or incorrect. Always read the actual product label before buying or using a product, and do not rely on Avina for allergen information. See the Terms of Use for the full product and ingredient disclaimer.

Information submitted or generated in connection with maintaining the product catalog may be reviewed by authorized Ysoftware personnel where reasonably necessary to operate or improve the Service.

Private account content is not automatically made public merely because you use Avina.

7. Notifications

If you enable notifications, Avina may send reminders related to routines, restocking, or other features you request.

Mobile reminders are generally scheduled locally on your device.

Web reminders may use browser push technology.

Notification content may appear on your device lock screen depending on your device settings and may include information such as a routine or product name.

You can control notifications through Avina and your device or browser settings.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, fulfill the purposes described in this Privacy Policy, comply with law, resolve disputes, prevent abuse, and enforce agreements.

Account-related content is generally retained while your account remains active.

When you delete your Avina account, Avina initiates deletion of account-associated records and private custom-product files. Analytics associated with your Avina account identifier is also scheduled for deletion from PostHog.

Some deletion processes may occur asynchronously and require a reasonable period to complete.

Certain limited information may remain temporarily in:

provider-managed backups;
security or system logs;
records required for accounting, tax, fraud prevention, legal compliance, or dispute resolution; or
systems where immediate deletion is technically impracticable.

Such information will not be retained longer than reasonably necessary for those purposes.

Payment providers such as Apple, Google, and Stripe maintain transaction information according to their own legal obligations and retention policies.

9. Account and Data Deletion

You may initiate deletion of your Avina account:

from the account settings available in the Avina mobile application; or
through https://avina.skin/app/account.

Account deletion is intended to permanently remove your Avina account and associated user content from Avina’s active systems, subject to limited lawful or technical retention described above.

For accounts linked to Sign in with Apple, Avina attempts to revoke the associated Apple authorization as part of the supported mobile account-deletion process.

Deleting your Avina account does not necessarily cancel an active subscription. You should separately cancel any subscription through the platform through which you purchased it, such as Apple, Google Play, or Avina’s web billing system.

10. Your Choices and Privacy Rights

You can edit many types of Avina information directly through the Service.

Depending on where you live, you may also have rights to:

request access to personal information;
request correction of inaccurate information;
request deletion;
withdraw consent where processing is based on consent;
object to or restrict certain processing;
request portability where required by law; and
complain to an applicable privacy or data-protection authority.

To submit a privacy request, contact: privacy@avina.skin

We may need to verify your identity before completing certain requests.

We will not discriminate against you for exercising privacy rights provided by applicable law.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information.

These measures include access controls, authenticated access, private storage for user-product images, database access restrictions, encrypted network communications, and server-side handling of sensitive credentials.

No system can be guaranteed to be completely secure. You use online services with the understanding that no transmission or storage system is free from all risk.

12. International Processing

Ysoftware LLC is based in the United States.

Your information may be processed in the United States and other countries in which Ysoftware or its service providers operate.

Those countries may have privacy laws that differ from the laws where you live. Where required, we take appropriate measures relating to international processing and transfers.

13. Children

Avina is intended for users who are at least 13 years old.

We do not knowingly collect personal information from children under 13.

If you are under the age of legal majority where you live, you may use Avina only with the permission of a parent or legal guardian where required.

If you believe a child under 13 has provided personal information to Avina, contact privacy@avina.skin so we can investigate and take appropriate action.

14. Third-Party Services and Links

Avina may contain links or references to third-party services, products, brands, websites, app stores, or payment providers.

Their privacy practices are governed by their own policies, not this Privacy Policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy as Avina evolves or as legal, technical, or business requirements change.

If a change is material, we may provide additional notice through the Service or another appropriate method.

The Effective Date at the top indicates when this version became effective.

16. Contact Us

For privacy questions or requests: privacy@avina.skin

For general support: support@avina.skin

Ysoftware LLC
4111-e Rose Lake Dr #10237
Charlotte, NC 28217
United States