ylmX Privacy Policy

Effective date: July 15, 2026

1. Face Data We Access and How We Access It

When a user chooses a camera feature, ylmX accesses camera frames on that user's device. When a user chooses media or a custom model, ylmX accesses only the photo, video, or model file selected through Apple's system photo or document picker.

During on-device processing, ylmX derives face bounding boxes, landmarks, aligned face crops, masks, and numerical face embeddings. These items are processing data. ylmX does not use them to identify or authenticate a person and does not create a server-side biometric identity profile.

2. How We Use Face Data

ylmX uses face data only on the device to detect, track, align, and transform faces; create a live preview; and process or export media selected by the user. Face data is not used for identity recognition, authentication, profiling, advertising audiences, decisions about a person, or server-side model training.

3. Face Data Transmission and User-Directed Sharing

ylmX does not automatically transmit camera frames, photos, videos, face landmarks, face embeddings, aligned face crops, masks, or custom model contents to the developer, TikTok, Meta, advertisers, analytics providers, or any other third party.

A user may intentionally share exported media through the iOS share sheet. In that case, the destination selected by the user receives the exported media and handles it under its own terms and privacy policy.

4. Face Data Storage, Retention, and Deletion

• Camera frames, landmarks, aligned face crops, masks, and embeddings are held in device memory only while the related feature or app session is active and are then discarded.
• Temporary working media used for local processing is deleted when the related processing screen is closed or during the next app launch cleanup.
• Media explicitly exported by the user remains in the destination chosen by the user until the user deletes it.
• An imported custom model is compiled and stored inside the app's local Documents container so the user can use it again. It remains there until the user deletes that model in ylmX or deletes the app.
• Deleting the app, rather than offloading it, removes the app sandbox and its stored custom models.

None of the face-data categories listed above is sent to a developer-controlled server. Therefore, the developer has no server-side face-data record to retain or delete.

5. Attribution and Purchase Events

With the permissions required by the operating system, ylmX may send limited non-media events such as first preview success, export completion, trial start, and purchase success. These events may include app version, campaign identifiers, device or advertising identifiers when permitted, product identifier, currency, and purchase value. A preview or export event indicates only that the feature completed. These events do not include photos, videos, camera frames, face landmarks, face embeddings, aligned face crops, masks, or model contents.

Purchase transactions may be verified using Apple StoreKit and Apple's App Store services. Limited event data may be forwarded to TikTok and Meta for advertising measurement and optimization. These providers process that data under their own privacy policies.

Photos, Camera, and Saved Media

ylmX requests access to the camera, microphone, or user-selected photos and videos only when needed for the feature the user chooses. The system photo picker grants access only to the item selected by the user. Processing is performed locally. ylmX does not upload user media for face processing.

Accounts and Contact Information

ylmX does not require an account and does not request a user's name, email address, phone number, or password. If a user contacts support outside the app, the information included in that message is used only to respond to the request.

Children

ylmX is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy when the app or legal requirements change. The effective date above identifies the latest version.

Contact

Questions about this policy may be sent to wang614240842@gmail.com.