Privacy Policy

This Privacy Policy explains how YumnAI (“we”, “us”, or “our”) collects, handles, processes, and protects information when you use the YumnAI website, mobile web application, and AI-powered beauty analysis services. We respect your personal privacy and are committed to complete transparency, especially regarding photos submitted for analysis.

1. Introduction

YumnAI provides AI-powered beauty analysis tools designed to help individuals discover styling and cosmetic guidance tailored to their natural features. Our core features include:

• Seasonal Color Analysis: Identifying your personal seasonal color palette across 12 distinct seasons based on undertone, value, chroma, and contrast.
• Skin Care Analysis: Analyzing observable facial skin characteristics (such as surface texture, tone uniformity, apparent pore visibility, hydration appearance, and under-eye shadowing) to offer tailored cosmetic care tips.
• Makeup Analysis: Providing personalized cosmetic recommendations, color harmonies, and product finishes suited to your face attributes.

YumnAI analyzes user-provided photos to generate these personalized beauty insights and recommendations.

2. Information We Collect

We clearly separate information provided by authenticated users from information processed during guest analysis.

Information Provided by Authenticated Users

If you choose to sign in to YumnAI, we may collect or receive:

• Google account name, where provided
• Google account email address
• Account and session identifiers used to authenticate your session and link subscription allowances

Analysis-Related Information

When you request a beauty analysis, we process:

• The selfie photo or facial image submitted directly by you via upload or device camera
• Analysis inputs (such as selected category: Color, Skin Care, or Makeup) and generated analysis results

Temporary Processing: YumnAI temporarily processes your submitted photo in memory solely to perform the requested analysis. YumnAI does not store user selfies.

4. Our AI Vision Engine

YumnAI operates its own application-level AI Vision and analysis engine. The YumnAI application combines its own analysis logic, preprocessing, normalization, and recommendation systems with third-party AI model infrastructure.

YumnAI currently uses the Google Gemini API as a third-party AI model and service for image analysis and generation of analysis insights. Google Gemini is an independent third-party service provider operated by Google LLC. Gemini is not owned by YumnAI, and YumnAI has not trained its own foundational large language or vision model.

5. How Your Image Is Processed

The processing flow for your image follows a secure, direct, and transient path:

• User Selfie: You capture or upload a photo via your browser on desktop or mobile.
• YumnAI Processing: The image is received over an encrypted TLS connection and validated for face framing and scale in memory.
• Gemini API Analysis: The submitted image is transmitted to the Google Gemini API to perform the requested AI vision analysis and extract observable attributes.
• YumnAI Result Processing: YumnAI receives the structured analytical observations from Gemini, matches them against our seasonal taxonomy and catalog algorithms, and creates your personalized report.
• Personalized Result: The finished result is returned to your device screen.

YumnAI itself does not retain the uploaded selfie as a permanent stored image. Google's handling of data through the Gemini API is governed by Google's applicable service terms and privacy documentation.

6. What YumnAI Does With Analysis Results

YumnAI may use the generated analysis output to:

• Display your personalized analysis report and score breakdowns on your screen
• Generate personalized beauty, styling, and color recommendations
• Match complementary beauty, skincare, and makeup products suited to your profile
• Provide you with the requested interactive analysis experience

YumnAI does not use your selfies or personal analysis results to train foundation AI models.

7. Guest Analysis

Users may currently perform their first YumnAI analysis without creating an account. An account is not required for the initial guest analysis. During guest analysis, you do not need to provide personal identifying information or contact details—your photo is processed in real time solely to generate your single complimentary analysis result.

8. Google Login

Users who subscribe to a paid plan or wish to save their allowances may optionally sign in using Google. When you authenticate using Google, YumnAI receives the basic information made available through the Google authentication flow, such as your name and email address as applicable.

This authentication information is used solely to create and maintain your YumnAI account and active session. YumnAI does not receive, access, or store your Google account password.

9. Cookies and Sessions

YumnAI may use necessary cookies and session identifiers solely to:

• Keep users signed in during active sessions
• Maintain authentication sessions and session security
• Support secure application functionality and client-side analysis state

YumnAI does not deploy third-party advertising cookies, behavioral tracking pixels, Google Analytics tracking scripts, or Meta tracking pixels.

10. Data Security

YumnAI implements reasonable technical and organizational safeguards to protect your information, including:

• HTTPS/TLS: Enforced encrypted data transmission across all website pages and API endpoints.
• Server-Side API Credentials: API keys and secrets are secured in server-side environments and never exposed to client browsers.
• Secure Authentication Sessions: User authentication tokens are verified securely on serverless endpoints.
• Restricted System Access: Access to backend hosting and cloud infrastructure is strictly restricted.

While we implement reasonable safeguards, no method of transmission over the Internet or electronic storage is completely secure, and absolute security cannot be guaranteed.

11. Third-Party Services

YumnAI relies on trusted third-party cloud infrastructure providers to run our application and AI features. These include:

• Google Gemini API (Google LLC): Third-party AI model service utilized to perform facial image analysis and return structured feature observations.
• Google Sign-In (Google LLC): Identity provider used for optional user authentication and account sign-in.
• Vercel (Vercel Inc.): Cloud hosting and serverless compute provider that hosts our web application and runs our server-side API functions.
• Neon Postgres (Neon Inc.): Serverless cloud database infrastructure used to store account profiles, authentication sessions, and subscription entitlement data when account features are active. (Neon Postgres does not store user selfie images).

YumnAI does not sell, rent, or trade personal information to third parties.

12. Data Retention

We maintain clear distinctions regarding data retention across different data types:

• Selfie Images: Not permanently stored by YumnAI. Images are temporarily processed in memory during the active analysis request and discarded immediately after.
• Account Information: Retained for as long as necessary to maintain the user's account and provide ongoing service, subject to applicable law.
• Sessions: Retained only for the duration of the configured session lifetime or until the user signs out.
• Third-Party AI Processing: Third-party service providers (such as Google Gemini API) process data in accordance with their applicable terms and privacy documentation.

13. User Rights

Depending on your jurisdiction and applicable privacy laws, you may have rights regarding your personal information, including:

• The right to access account information held about you
• The right to request correction of inaccurate personal details
• The right to request deletion of your account and related records
• The right to ask privacy questions or make data inquiries
• The right to withdraw consent where applicable

To exercise any of these rights, please contact YumnAI at support.yumnai@gmail.com.

14. Children’s Privacy

YumnAI is intended for general audiences and is not directed at children under the age of 13 (or the applicable minimum legal age in your jurisdiction). YumnAI does not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support.yumnai@gmail.com so that we can promptly remove the information.

15. Changes to This Policy

YumnAI may update this Privacy Policy when its services, technological infrastructure, or operational practices change. When changes are made, the revised policy will be posted on this page with an updated “Last updated” date at the top. We encourage you to review this page periodically.

16. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or YumnAI’s privacy practices, contact us at:

Email: support.yumnai@gmail.com