MeiYan

Legal

Privacy Policy

Effective date: 27 October 2026 · Applies to the MeiYan app for iPhone and to this website

The short version

  • Your photos never leave your iPhone. All editing, face detection and background removal run on your device.
  • Signing in with Apple or Google is optional. If you do, we get your account ID, and your name, email and profile picture if the provider shares them.
  • We don't sell your data, we don't show ads, and we don't track you across other apps or websites.
  • Any payment goes through Apple. We never see your card.
  • You can delete your account and your edits from inside the app, or email support@meiyan.beauty.

Who we are

MeiYan is a beauty camera and selfie editor for iPhone. In this policy, “MeiYan”, “we”, “us” and “our” mean the developer and publisher of the MeiYan app, who is responsible for your personal data. “You” means anyone who uses the app or this website.

This policy explains what information the app handles, why, and the choices you have. If you don’t agree with it, please don’t use MeiYan.

Your photos & face data

MeiYan is built so that your photos never reach us.

  • On-device processing. When you take or choose a photo, every edit — skin smoothing, reshaping, makeup, filters, cropping, ID photos and background removal — is computed on your device. We do not upload your photos to our servers or to any third party.
  • Face data. To place makeup and reshape features accurately, MeiYan detects the position of your face and facial features (for example the outline of the eyes, lips and jaw) using on-device technology, using Apple’s Vision framework. This face geometry is used only to apply the edit you ask for, on your device. It is not used to identify you, not used for authentication, not used for advertising or profiling, not used to train any model, and never sent to us or shared with anyone.
  • My edits. If you leave an edit to finish later, MeiYan keeps a copy of the original photo, your edit settings and a thumbnail in the app’s private storage on your device, so you can pick it up again. These files are excluded from iCloud backup and are deleted when you delete the edit, or when you delete the app.
  • Saving. When you tap Save, the edited photo is written to your device’s photo library. What happens to it after that is controlled by you and your device settings (for example iCloud Photos).

What we collect

We collect as little as we can. Here is everything the app handles that could relate to you:

Data When Where it goes Why
Account details: Apple or Google user ID; name, email address and profile picture if the provider shares them Only if you choose to sign in Stored securely on your device (Keychain). When our account service is active, also sent to our servers so your account works across reinstalls and devices. To create and run your account, show your name and picture in the app, and contact you about your account if needed
App settings request: platform (iOS), app language, app version When the app opens or returns to the foreground Our settings server To show the right features, update notices, gifts and texts in your language
Install ID: a random identifier created by the app; an Apple DeviceCheck token Only when you claim a gift or free credits, or unlock a photo with credits Our gift server; the DeviceCheck token is checked with Apple To grant each gift once and prevent fraud and abuse. It is not used for advertising or tracking.
Credits & gift history: balance, which gifts you claimed and when When you claim or use credits On your device, and on our servers when the gift service is active To keep your balance correct
Photo unlocks: which Pro looks or tools a saved photo used, how you unlocked them (free try or credits), the install ID and app version. Never the photo itself. When you save a photo that uses a Pro look or tool Our unlock server To count free tries and spend the right number of credits
Technical data: IP address, request time, device type and OS version in standard server logs Whenever the app contacts our servers Our servers and hosting providers To deliver the service, keep it secure, rate-limit abuse and fix problems
Messages you send us: your email, what you write, and the app version, device model and language that the app pre-fills When you use Help & feedback or Report content Our support inbox To answer you and fix issues
Preferences: language, onboarding progress, cached settings While you use the app Your device only To remember your choices

What we don’t collect: your photos, your face data, your contacts, your precise location, your browsing history, the advertising identifier (IDFA), or payment card details. MeiYan contains no advertising SDKs and does not track you as defined by Apple’s App Tracking Transparency.

Sign in with Apple & Google

You can use MeiYan without an account. If you choose to sign in:

Sign in with Apple

Apple sends us a unique, app-specific user ID and, on your first sign-in only, the name and email you choose to share. You can use Apple’s Hide My Email, in which case we receive a private relay address that forwards to you. You can stop using Sign in with Apple for MeiYan at any time in your device’s Settings › [your name] › Sign-In & Security › Sign in with Apple; MeiYan then signs you out.

Sign in with Google

MeiYan asks Google only for the basic openid, email and profile permissions. Google sends us your Google account ID, name, email address and profile picture URL. We do not request access to your Gmail, Drive, Contacts, Calendar, Photos or any other Google data. You can remove MeiYan’s access at any time at myaccount.google.com/permissions.

Google API Services. MeiYan’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to sign you in and show your profile in the app. We do not sell it, use it for advertising, use it to train AI or machine-learning models, or let humans read it except with your consent, for security reasons, or where the law requires.

Your use of Apple’s and Google’s sign-in services is also governed by their own privacy policies: Apple Privacy Policy and Google Privacy Policy.

How we use data

We use the information above only to:

  • provide the app and its features, including your account, credits, gifts and photo unlocks;
  • show the right content, update notices and texts for your app version and language;
  • prevent fraud, abuse and duplicate gift claims, and keep our services secure;
  • answer support requests and reports;
  • comply with legal obligations.

We do not sell or rent personal data, we do not share it for cross-context behavioural advertising, and we do not use it to make automated decisions that have legal or similarly significant effects on you.

Legal bases (EEA, UK and similar laws). We process data to perform our contract with you (providing the app and your account), for our legitimate interests (security, fraud prevention, improving reliability), to comply with the law, and with your consent where required (for example when you choose to sign in).

Who we share it with

We share personal data only with:

  • Apple, to sign you in with Apple, process any App Store purchase and verify gift claims with DeviceCheck; Google, only if you sign in with Google. They act under their own terms and privacy policies.
  • Service providers who host our servers and support email, and who process data only on our instructions and under confidentiality obligations.
  • Authorities, when required by law, or to protect the rights, safety and property of our users, the public or MeiYan.
  • A successor, if MeiYan is involved in a merger, acquisition or sale of assets. This policy will continue to apply to your data, and we’ll tell you before it becomes subject to a different policy.

Device permissions

  • Camera — to take a selfie in MeiYan’s camera. Optional; you can pick photos from your library instead.
  • Photos / media — MeiYan uses the system photo picker to open only the photos you choose, and asks for add-only access to save your edited photos. MeiYan does not read your whole library.
  • Network — to load settings, sign in, claim gifts and unlock photos with credits. Editing works offline.

You can change these permissions at any time in your device settings.

How long we keep it

  • Photos, face data and edits: only on your device, until you delete the edit or the app. We never hold them.
  • Account data: for as long as your account exists. When you delete your account, we delete it from our servers within 30 days, except where we must keep limited records by law.
  • Gift claim records: for as long as needed to prevent duplicate claims and fraud, and no longer than 24 months after the campaign ends.
  • Server logs: up to 90 days.
  • Support emails: up to 24 months after your request is resolved.

Deleting your data

  • Delete your account: see Delete your account, or open the app › Me › Account & security › Delete account. This removes your sign-in from the device and, where an account exists on our servers, deletes it. You can also email support@meiyan.beauty from the email linked to your account and we’ll delete it within 30 days.
  • Delete an edit: Me › My edits › choose an edit › Delete.
  • Delete everything on the device: uninstall the app.
  • Purchases are managed by Apple. Deleting your account does not cancel anything you bought through the App Store; manage it in your App Store account settings.

Your rights

Depending on where you live (for example under the GDPR in the EEA and UK, the CCPA/CPRA in California, Vietnam’s Decree 13/2023/ND-CP on personal data protection, or similar laws), you may have the right to:

  • access the personal data we hold about you and get a copy;
  • correct inaccurate data;
  • delete your data;
  • restrict or object to certain processing;
  • data portability;
  • withdraw consent at any time (this does not affect processing before you withdrew it);
  • lodge a complaint with your local data protection authority.

To exercise any of these, email support@meiyan.beauty. We’ll reply within 30 days and may need to confirm your identity first. We will never discriminate against you for exercising your rights.

Security

Account details are stored in the device’s secure storage (the iOS Keychain). All connections between the app and our servers use HTTPS. Sign-in with Google uses the secure PKCE flow in a system browser window, so MeiYan never sees your Google password, and Sign in with Apple never shares your Apple ID password with us. No method of storage or transmission is 100% secure, but we work hard to protect your information and to keep what we hold to a minimum.

International transfers

Our servers and service providers may be located in countries other than yours. When we transfer personal data internationally, we use appropriate safeguards required by applicable law, such as standard contractual clauses.

Children

MeiYan is not directed to children under 13 (or the minimum age required in your country, such as 16 in some EEA countries). We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the app changes. We’ll post the new version here and update the effective date. If the changes are significant, we’ll also tell you in the app before they take effect.

Contact

Questions, requests or complaints about privacy:

Email: support@meiyan.beauty
Website: this site