Effective date: June 24, 2026
This Privacy Policy explains how NANOVERSE TECH LTD (“NanoVerse Tech”, “we”, “us”) handles information when you use Lyora, an AI portrait-creation service.
Information we process
Lyora may process an anonymous account identifier; an Apple account identifier, name and email if you later choose Sign in with Apple; selfies or other photos you select; prompts, style choices and generation settings; generated portraits and collection metadata; subscription, entitlement and usage information; device, app, analytics and diagnostic information; push-notification tokens; and information you voluntarily send to support.
Facial images and AI generation
When you request a portrait, selected photos are uploaded securely for face and safety checks and are sent to our image-generation provider solely to perform the requested generation. Raw source selfies are not kept after generation processing completes. If a facial embedding is used to improve continuity, it is retained for no longer than 30 days and is deleted earlier when the account is deleted. We do not use facial images to identify you in the real world, for advertising or to build a facial-recognition database.
Generated portraits and storage
Generated portraits, job records, style selections and collection information may be stored in Supabase so you can access your gallery, exports and weekly collection. A local cached copy may also remain on your device. You can delete portraits from the app and may request deletion of the associated account data.
Accounts
Lyora uses Supabase anonymous authentication by default. If you make a purchase or choose to protect your balance, you may upgrade to Sign in with Apple. Apple may provide a stable account identifier and, on first authorization, your name or relay email address.
Moderation and safety
Uploaded images may be automatically checked for a visible face, image quality and prohibited or unsafe content before generation. We may retain limited moderation results or abuse-prevention records where necessary to protect the service and enforce these terms.
Analytics, diagnostics and purchases
Lyora uses Firebase Analytics and Crashlytics to understand use and diagnose errors. These services may receive pseudonymous identifiers, device/app details, interaction events and crash information. RevenueCat and the App Store process subscription, purchase and entitlement information. We do not receive your full payment-card details and we do not sell personal information.
How we use information
We use information to authenticate users, generate and deliver portraits, operate galleries and weekly collections, enforce generation limits, process purchases, provide notifications and support, prevent abuse, maintain security, diagnose faults and improve Lyora.
Service providers and international transfers
Lyora relies on service providers including Apple, Supabase, OpenAI or another disclosed image-generation provider, Google Firebase and RevenueCat. They process information for the services described above and may process it outside your country. We use appropriate contractual or legal safeguards where required.
Retention and deletion
Raw selfies are deleted after generation processing. Facial embeddings, if used, are kept for no more than 30 days. Generated portraits and account, entitlement, usage and collection records remain until you delete them, delete your account or they are no longer needed to provide the service. Financial and fraud-prevention records may be kept as required by law. Account deletion is designed to remove user records, stored portraits, generation jobs, entitlements and face data and to initiate deletion with connected service providers where supported.
Your choices and rights
You can choose which images to upload, decline notifications, delete portraits, use in-app account deletion or contact us to exercise applicable access, correction, deletion, restriction, objection or portability rights. You may withdraw consent where consent is the legal basis.
Children
Lyora is not directed to children under 13 and is not intended for independent use by anyone below the digital-consent age that applies in their country. Do not upload a child’s image unless you are the parent or legal guardian and have a lawful basis to do so.
Security
We use reasonable safeguards including authenticated requests, access controls and limited-duration links. No system is completely secure, so only upload images you are comfortable processing through an online AI service.
Changes
We may update this policy as Lyora or its providers change. We will update the effective date and provide additional notice when required.
Contact
NANOVERSE TECH LTD, Company No. 15203022, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Privacy enquiries: info@nanoversetech.co.