Back to Home

Privacy Policy

Last updated: 3/15/2026

1. Who We Are

Data Controller (EU/GDPR): Virtual World LLC
Contact: hello@virtualworldlc.com

2. Data We Process

We do not collect advertising identifiers (IDFA), contacts, or health data.

Account (Optional)

Email or alias, password (hashed server-side), internal user ID, progress, and cloud backups (via Supabase).

In-App Purchases

Purchase history and receipts (via Apple IAP / RevenueCat) to unlock and restore access.

Product Usage Events

Paywall views and clicks, screen events (via Superwall) to improve the application experience.

Facial Data (Selfies)

When you use the hairstyle try-on, the Application captures or imports a selfie of your face. This photo is used solely to generate a hairstyle preview.

  • What we collect: A selfie submitted by you for hairstyle generation.
  • Server Retention: Your original photo is securely uploaded (via Supabase) and stored as long as your account exists, to allow you to view generation history. You can delete history or your account at any time to remove this data permanently.
  • No use for identification: Facial data is not used for identification or authentication purposes.
  • Third-party processing: Your selfie is transmitted to Google (via Gemini API). Google does not retain your data after processing.

We do not sell or share this data for advertising purposes.

Support

Your message and email address when you contact us.

3. Purposes and Legal Bases

  • Performance of Contract: To provide features, manage your account, purchases, and restorations.
  • Legitimate Interests: Non-advertising analytics, security, and fraud prevention.
  • Legal Obligations: Accounting and tax compliance.
  • Consent: Before sending your selfie to the AI and for other optional features.

4. Third-Party Services and Data Sharing

We do not sell data.

  • Processors: Apple, RevenueCat, Superwall, Supabase (hosting), and Google (Gemini API).
  • Google Gemini API: During hairstyle generation, the photo is processed and not retained by Google to train an advertising model.

5. Retention

  • Account and Progress: As long as the account is active.
  • Facial Data (Selfies): Removed when deleting your generations via the app or account cancellation.
  • Third-party retention (Google): Immediately deleted after generation.
  • Analytics: Aggregated data may be kept longer.

6. Your Rights (EU - GDPR)

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Deletion ("right to be forgotten")
  • Restrict processing
  • Object to processing
  • Data portability
  • Revoke your consent at any time

To exercise a right, contact us by email at hello@virtualworldlc.com.

7. Choices and Controls

  • No Targeted Ads: We do not use IDFA.
  • Account Deletion: From Settings → Account → Delete Account.

You can also email hello@virtualworldlc.com.

8. Children

Orvea is not intended for children under 13.

9. Security

We implement organizational measures:

  • HTTPS/TLS encryption
  • Access and log control
  • Encrypted data transmission

10. Changes to This Policy

We may update the policy as our processes evolve.

11. Contact

hello@virtualworldlc.com
Virtual World LLC