Dear Vanity Privacy Policy

Effective date: November 2, 2026

Dear Vanity is built around a simple promise: photos, camera previews, and face processing should stay as close to your device as possible. This policy explains how the Dear Vanity iOS and Android apps handle data, and how we handle messages exchanged with our official Instagram account.

Summary: photo originals, video originals, and Face Data (face landmarks, face mesh data, and True Face calibration data) are processed entirely on your device and are not sent to Dear Vanity servers, analytics, or any third party. The apps use Firebase Analytics for app usage analytics, and the Android app also uses Firebase Crashlytics for crash reports.

Who We Are

Dear Vanity is operated by OK Home Co., Ltd. (오케이홈 주식회사), a company in the Republic of Korea that runs the Rytos brand ("Dear Vanity", "we", "us", or "our"). This policy covers the Dear Vanity iOS app, the Dear Vanity Android app, and direct messages exchanged with our official Instagram account (@dear.vanity).

Contact: [email protected]

What Stays On Your Device

Photo originals, video originals, and camera previews are not sent to Dear Vanity analytics.
Face landmarks, face mesh data, and True Face calibration data are processed entirely on your device for True Face and real-time camera features. This Face Data is not uploaded to Dear Vanity servers, Firebase Analytics, or any other third-party service, and is not shared with or sold to third parties. See the Face Data and Facial Information section below.
In Duo/P2P features, nearby-device discovery and session data are used to connect your devices. We do not operate a server relay for those P2P media streams.
If you save a photo to your library, the file is stored on your device or in services you have enabled, such as iCloud Photos or Google Photos.

Face Data and Facial Information

Dear Vanity uses Face Data only to power on-device camera features. This section explains what face data the app uses, why, and how it is handled.

Face Data we process: face landmarks, face mesh data, and True Face calibration data, including a device-local True Face calibration profile generated from an optional scan of your face.
Purposes: creating your device-local True Face calibration profile, applying the True Face effect, and driving real-time camera effects. Face Data is not used to identify or track you, and is not used for advertising.
Where it is processed and stored: entirely on your device, inside the app's local storage. Face landmarks and face mesh data are processed in real time and are not retained in persistent storage. The True Face calibration profile is stored only on your device until you reset or delete it.
Sharing and transmission: Face Data is never uploaded to Dear Vanity servers, never sent to Firebase Analytics, and never shared with, transmitted to, or sold to any third party.
Deletion: you can reset (delete) your locally stored True Face calibration profile at any time in the app (Settings > True Face > Reset Calibration), or by deleting the app.
Consent: before your first True Face scan, the app explains what face data is used and that it stays on your device, and the scan starts only after you choose to continue.

Information We Collect

Context

Data

Purpose

iOS app analytics

App launches, product interactions, purchase history, coarse location, and device identifiers collected through Firebase Analytics only.

Analytics for launch quality, product reliability, and feature usage. This is not used for third-party advertising or cross-app tracking.

Android app analytics and crash reports

App launches, product interactions, purchase history, coarse location (estimated from IP address), and app installation identifiers collected through Firebase Analytics; crash stack traces and device diagnostics (device model, OS version, memory) collected through Firebase Crashlytics. File paths and links are masked before crash reports are sent. The advertising ID and Android ID are not collected.

Analytics for launch quality, product reliability, and feature usage, and fixing crashes. This is not used for advertising or cross-app tracking.

Purchases

Product and purchase status from Apple StoreKit (iOS) or Google Play Billing (Android). Apple or Google processes payment details.

Unlocking purchased features, restoring purchases, and understanding purchase funnel quality.

Instagram messages

Your Instagram username, display name, Instagram-scoped ID, and the messages you send to @dear.vanity.

Reading and replying to your messages. See the Instagram Messages section below.

Support

Information you choose to send us by email.

Responding to your request and resolving issues.

Third-Party Services

We use service providers to operate the app:

Apple App Store and StoreKit for app distribution, purchases, and purchase restoration.
Google Play and Google Play Billing for Android app distribution, subscriptions, purchases, and purchase restoration.
Firebase Analytics for iOS and Android app analytics, and Firebase Crashlytics for Android crash reports.
Meta, Cloudflare, Anthropic, and Telegram for handling Instagram direct messages, as described in the Instagram Messages section.

We do not sell your personal information. We do not use the app analytics or crash reports described above for advertising or cross-app tracking.

Instagram Messages

When you send a direct message to our official Instagram account (@dear.vanity), we receive it through the Instagram API provided by Meta so that we can read and reply to it.

Data we process: your Instagram username, display name, Instagram-scoped ID, the text of your messages (attachments are noted by type only), timestamps, and our replies.
Purposes: responding to your messages, and keeping short internal notes about our conversation (for example, whether we sent you a gift code) so that we can follow up consistently. We do not use this data for advertising, and we do not sell it.
Drafted replies: to reply faster, we use Anthropic's Claude API to draft a suggested reply from the recent conversation. Every reply is reviewed and approved by a member of our team before it is sent. We never send automated replies without human review.
Service providers: Meta (Instagram API), Cloudflare (hosting and storage of the message service), Anthropic (drafting suggested replies; under its commercial API terms, inputs are not used to train its models), and Telegram (delivering drafts to our team for approval).
Retention: we keep the most recent part of each conversation (up to 40 messages) for up to 180 days after the last message in the conversation, and drafted replies for 14 days. Internal notes are kept only while we are in contact with you and are deleted on request. Messages also remain in Instagram under Meta's own policies.
Deletion: you can ask us to delete the data we hold about your Instagram conversation by sending us a direct message or by contacting [email protected].

Permissions

Camera access is used for previews and capture.
Photo Library add access is used when you choose to save photos.
Bluetooth, local network, and Wi-Fi aware capabilities are used for nearby-device connection features.
Location is optional and used only when you choose to save location data with captured photos.
On Android, microphone access is used only to record audio for videos, and notification permission is used only for reminders you ask for, such as a reminder before a free trial ends. Audio is not sent to us or to analytics.

You can manage app permissions in iOS Settings or Android Settings. Some features may stop working if a required permission is disabled.

Retention

Local app settings, saved media, and Face Data such as the True Face calibration profile remain on your device until you delete or reset them in the app.
Face landmarks and face mesh data are processed in real time only and are not retained in persistent storage.
App analytics event data collected through Firebase Analytics is kept for 2 months. Analytics data tied to an app installation identifier is kept for up to 14 months after the app was last used on that installation. Android crash reports collected through Firebase Crashlytics are kept for up to 90 days. After these periods, the data is deleted automatically. Aggregated reports that do not identify an installation may be kept longer.
Instagram conversation data is kept for up to 180 days after the last message in the conversation, and drafted replies for 14 days.

Your Choices

You can request deletion of support messages and Instagram conversation data by contacting [email protected].
You can manage iOS permissions in Settings and reset local Dear Vanity settings inside the app.
You can delete your locally stored True Face calibration profile (Face Data) at any time in the app: Settings > True Face > Reset Calibration.

Depending on where you live, you may have rights to access, correct, delete, or object to certain processing of your personal information. Contact us and we will respond as required by applicable law.

Deleting Your Data

This section explains how to delete data related to the Dear Vanity apps (iOS and Android), operated by OK Home Co., Ltd. (Rytos). Dear Vanity has no user accounts, so app analytics and crash data are linked only to a random app installation identifier, not to your name, email, or Google or Apple account.

Data on your device (photos you saved, app settings, and Face Data such as the True Face calibration profile): delete or reset it in the app, or delete the app. This removes it immediately.
App analytics and crash data: deleting the app resets its installation identifier, so no new data is linked to the old one. To ask us to delete data already collected, email [email protected] with the subject "Data deletion" and tell us which app (iOS or Android) you use. We will delete the data we can associate with your request within 30 days and confirm by email.
Support emails and Instagram conversation data: email [email protected] or send a direct message to @dear.vanity asking for deletion.

Data we delete: app analytics events, crash reports, support emails, and Instagram conversation data related to your request. Data we may keep: records we must keep by law, and purchase records held by Apple or Google under their own policies. Data not deleted on request is deleted automatically after the retention periods in the Retention section above.

Children

Dear Vanity is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this policy when the app or legal requirements change. The effective date above shows when this policy was last updated.