Valny Privacy Policy
Effective date: June 2, 2026 · Last updated: June 2, 2026
Valny, Inc. ("Valny," "we," "us") makes an AI personal stylist and personalized outfit discovery app. This policy explains what we collect, how we use it, and your choices. It covers the Valny iOS and Android apps and valny.co. Valny is for adults aged 18 and over. If you don't agree with this policy, please don't use Valny.
1. Key points (the short version)
- We analyze the photos you choose to share (a face selfie and body photos) to create your color/style analysis and virtual try-on images.
- Your photos are processed in the cloud by trusted third-party AI providers (including Google, OpenAI, and fal.ai) only to generate your results.
- We do not use your photos to train AI models, do not sell them, and do not use them for advertising. If we ever offer model training, it will be separate, optional, and opt-in.
- We treat your face and body images as sensitive data and ask for your explicit consent before capture.
- You can delete your photos and account anytime, in the app or at valny.co/delete-account. Questions: [email protected].
2. Who we are
Valny, Inc., a corporation based in the United States, is the data controller responsible for your personal data.
- Privacy contact: [email protected]
- Postal: 1111B S Governors Ave, Suite 56722, Dover, DE 19904, USA
3. The data we collect
- Account: when you sign in with Apple or Google, we receive your name, email, profile picture (avatar), and a user ID. We don't collect a password.
- Your photos: the face selfie and body photos you capture or upload.
- Results derived from your photos: your color palette, body-shape profile, and the style data used to personalize your feed.
- AI-generated content: the virtual try-on images created for you.
- Subscription: your purchase and renewal status (billing is handled by Apple/Google, not by us).
- Device & usage: app version, device model, OS, IP address, crash logs, and how you use the app, including the outfits you like, save, or skip, and time spent in the app.
4. Your photos and biometric data (please read)
This is the most sensitive data we handle. This section also serves as our public retention and destruction schedule.
- What we collect: your face selfie (which we treat as biometric data) and your body photos (which we treat as sensitive data), plus the styling analysis and results we derive from them (such as your color palette and body-shape profile).
- Why: solely to generate your own results: color analysis, body-shape analysis, and virtual try-on images.
- How / where: your photos are uploaded to our secure cloud storage and processed by trusted third-party AI providers (including Google, OpenAI, and fal.ai) to create your results, under contracts that require them to use your data only for Valny, not for their own purposes, and not to train their own models. Before any photo is sent to these providers, the app asks for your explicit permission.
- Consent: before your first capture we ask for your explicit, separate consent, which tells you what we collect, why, and how long we keep it. You can withdraw it anytime, and withdrawing is as easy as giving it.
- Our promises: we do not use your photos or biometric data to train AI models unless you give us separate, opt-in consent; we do not sell, rent, or profit from them; and we do not use them for advertising. We do not use them to identify you.
- Future model training: if we ever want to use your photos to improve our models, we will ask for your separate, optional opt-in first, never on by default.
- Retention & destruction: we keep your face and body photos and the biometric data we derive from them only as long as needed to give you your results, and in any case permanently destroy them when that purpose is met or within 3 years of your last use of Valny, whichever comes first (or sooner if you delete them or your account), unless the law requires us to keep them longer. You can delete anytime in the app or at valny.co/delete-account.
5. How we use your data
- Provide the service: create your analysis, try-on images, and personalized feed.
- Run your subscription and account.
- Keep Valny safe and working: prevent fraud and abuse, debug, and improve features using only aggregated or de-identified data. We never use your photos or biometric data to improve our products without your opt-in.
- Communicate with you: service messages and, with your consent where required, product updates.
- Meet our legal obligations.
Where the EU/UK GDPR or Thai PDPA applies, our legal bases are: your explicit consent (for photos/biometric data and any marketing); performance of our contract with you (to run the app and subscription); our legitimate interests (security, basic analytics); and legal obligations.
6. AI transparency
Valny's stylist is an automated AI system, not a human stylist. Your color and body analysis is produced by AI and is for personal styling only; it is not medical, health, dermatological, or professional advice. Virtual try-on images are AI-generated and labeled as such; they are approximations and may not reflect real fit, color, or appearance. AI results can be imperfect and may vary with photo quality.
7. Who we share your data with
- AI & cloud providers (including Google, OpenAI, and fal.ai): to process your photos and run the app, under data-protection contracts.
- Infrastructure providers: storage, crash reporting, and similar, bound by contract.
- Apple and Google: they process your subscription as merchant of record.
- Legal and safety: when required by law or to protect rights and safety.
- Business transfer: if Valny is merged, acquired, or reorganized, your data may transfer to the successor, who must honour this policy; where the law requires, we will obtain your consent or delete your biometric data rather than transfer it.
We do not sell your personal data and do not share it with data brokers or advertisers.
8. International data transfers
Valny operates from the United States, and your data, including photos, is processed in the United States and other countries where our providers operate. Some of these countries may not offer the same level of data protection as your own. Where required, we protect international transfers using recognized safeguards such as the EU Standard Contractual Clauses, the UK IDTA/Addendum, and the EU-US Data Privacy Framework. Copies are available on request at [email protected].
9. Retention & deletion
We keep personal data only as long as needed for the purposes above or as the law requires. Photos and derived data follow the schedule in Section 4. You can delete your photos and account anytime in the app (Profile → Delete Account) or at valny.co/delete-account; we then delete your data except limited records we must keep by law. We may keep aggregated or de-identified information that no longer identifies you (for example, overall trends) and that we don't try to re-identify, since it is no longer personal data.
10. Your rights & choices
Depending on where you live, you can access, correct, delete, or port your data, object to or restrict processing, and withdraw consent. To exercise these, email [email protected] or use the in-app controls. We honour browser Global Privacy Control (GPC) signals. You won't be charged or denied service for exercising your rights, and you can complain to your local data-protection authority.
11. Region-specific notices
- United States: We do not sell or "share" your personal information (as defined by California's CCPA/CPRA), and we use your sensitive data only to generate the styling results you ask for, not to profile you for unrelated purposes. Illinois (BIPA): see Section 4 for our biometric notice, consent, and retention/destruction schedule; we never sell or profit from biometric data. We honour GPC as an opt-out.
- EEA & UK (GDPR): our legal bases are in Section 5; photos/biometric data are processed only with your explicit consent (Art. 9). For privacy requests contact [email protected]; you may also complain to your local supervisory authority.
12. Security, children, changes, contact
- Security: we use encryption in transit and at rest, access controls, and least-privilege practices. No system is perfectly secure. If a breach affects your data, we'll notify the relevant authority without undue delay (within 72 hours where required) and affected users without undue delay.
- Children: Valny is for users 18+. We don't knowingly collect data from minors; contact us if you believe a minor has used Valny.
- Changes: we may update this policy from time to time. We post the new version and update the effective date, and we let you know about material changes through the app or by email. If you keep using Valny after an update, you accept it; if you don't agree, you can stop using Valny and delete your account. Continued use never counts as consent to any new or expanded use of your face or body images or other sensitive data; that always requires your separate opt-in.
- Contact: [email protected] · Valny, Inc., 1111B S Governors Ave, Suite 56722, Dover, DE 19904, USA.