Does a makeup still leave the phone?
It does not. On the Android handset you hold, you may keep a note of a touch-up made while traveling to work, a look prepared before you depart, a correction after a midday meal, a paired image of the face at two moments, or a compact inventory of cosmetics meant to travel in a bag. Nuvra does not teach a course. Nuvra does not publish that note for other people to browse.
For purposes of this Privacy Policy, "Nuvra" means that Android application as obtained from Google Play. "Controller" means Tingjunying Daily Necessities Co., Ltd., Enyang District, Bazhong City. "You" shall mean the person who installs the package. "Personal data" shall mean information relating to an identified or identifiable person that the Controller actually receives.
This Privacy Policy takes effect on 2026-09-07. That day is its effective date. The Controller's postal address is No.B-0163, 1st Floor, East of Nanjiadong, Enyang District, Bazhong City. The privacy contact is igushaqushandrak@gmail.com.
Minors must not use Nuvra; the package is for an adult who is 18, the age written as eighteen.
This Privacy Policy explains how the Controller handles personal data in connection with Nuvra on Google Play for Android. It is the notice for that package only.
A makeup still stays on the phone. A spoken note stays on the phone. A screen cache that restores the note you were editing stays on the phone. If you mark a note as liked or saved, that mark stays on the phone with the file. Nuvra has no posting path and no message thread, because the note is not offered to other people.
You save the refresh as a file on the phone. The makeup still is edited without a sign-in, and the Controller does not create a member profile for the person who holds the phone.
You may jot cosmetics you already own. A list of those items does not carry an in-app price.
Nuvra does not read an advertising identifier, because the package does not show ads.
Collection by the Controller is limited to mail you choose to send and to the page request described later in this notice. A makeup still stays outside that collection, and so does a spoken note, and so does a screen cache, because each one remains on the phone. This notice stays consistent with the Play Data safety form on what Nuvra receives, what it shares, and why.
The result of using Camera is a still of the refresh, and that still remains on the phone. Camera stays idle until you tap it. Once the still is stored, Camera is not in the background. Android Settings is where Camera is revoked. Typed notes and a bag list on the phone continue to work after that capture stops.
The result of using Microphone is a spoken note about the refresh, and the note remains on the handset. Only an explicit tap starts Microphone. At all other times, Microphone is not in the background. Android Settings is where Microphone is revoked. A still already saved and the typed list continue to work after that capture stops.
An existing picture may be chosen through the Photo Picker. The Photo Picker is not a media permission, and the picture you choose remains on the phone. Nuvra does not record video, because the refresh is kept as a still or as text. Nuvra does not read location, because the note does not use where the handset is.
You use a still, a spoken note, a screen cache, and a bag list on the phone to remember a refresh. The Controller does not use those files for its own purposes, because the Controller does not receive them.
When you write to igushaqushandrak@gmail.com, the Controller uses that mail to answer you, to carry out a privacy request, and to follow the deletion or correction you asked for. The Controller shall not use the letter for a purpose you did not write about.
When you open a legal page from inside Nuvra, the page request is used so the text can be sent back to the phone. That is the use of the request. It is not a use of your makeup note.
The General Data Protection Regulation (GDPR) applies where the Controller processes personal data of a person who is in the European Union. It also applies for a person who is in the European Economic Area.
Mail sent to the mailbox is processed under legitimate interest where the GDPR applies, because the Controller reads that mail to answer a privacy request. Records of a legal-page request are processed under that same legitimate interest, because the request has to be fulfilled before the text can appear. The Controller does not rely on processing being necessary for the performance of a contract, because the package does not open an account with you.
You shall have the right to lodge a complaint before the supervisory authority of the Member State of your residence, your work, or the alleged infringement.
Nuvra has no separately named Data Protection Officer. Letters about this role shall go to igushaqushandrak@gmail.com.
Disclosure depends on the scene, and the scenes are few.
In one scene you open the terms of use, you open the children's notice, and you open this privacy policy. The phone then reaches a hosting provider. That reach produces HTTPS server logs. What you asked to read is sent back to the phone. The host relies on those logs for that sending. A makeup still does not travel in that scene, and neither does a spoken note or a screen cache.
In the scene where you email the Controller, the Controller receives the letter in order to answer it. The letter is not handed to the host. The Controller does not sell personal information.
No other scene in Nuvra discloses a copy of a refresh, because the refresh remains on the phone.
A makeup still, a spoken note, and a screen cache do not move to another country, because they do not leave the phone. Personal data crosses a border only in the legal-page scene: the phone requests the page over HTTPS, and the host may answer from outside the country where you installed Nuvra. The Controller does not run a second overseas path for a refresh file.
Retention follows the life of each record.
You end a local file by uninstalling Nuvra or by clearing storage on the Android device. If a reply window is stated for a letter, that window is 15 business days. After the answer is finished, the letter is not kept as a standing archive.
You may ask the Controller to delete personal data it actually received. Deletion of a file on the phone is done by uninstall or by clearing storage in Android Settings. Deletion of mail the Controller holds is requested by writing to igushaqushandrak@gmail.com.
You may ask for an export of the personal data the Controller holds, sent to igushaqushandrak@gmail.com. That export covers mail the Controller has. It does not cover a still that remained on the phone.
You may request correction of inaccurate or incomplete personal data. Rectification is that same request when the GDPR applies. Submit it by email to igushaqushandrak@gmail.com, and state what is inaccurate or incomplete.
You may ask what personal data the Controller holds about you. Send that access request to igushaqushandrak@gmail.com.
Where the GDPR applies, you may ask the Controller to restrict processing, or to object to processing that rests on legitimate interest, by the same mailbox. The Controller shall answer these requests within 15 business days after a complete letter reaches the mailbox.
The refresh stays on the phone. The package keeps no hosted account. For that reason it offers no in-package path for deleting an account, and it offers no website page for closing one.
The Controller shall limit mailbox access to people who answer letters. Staff who read a letter shall use it only to answer that letter, and the Controller shall review who still needs access when the matter is closed. A legal-page request travels by HTTPS. Files that remain on the phone depend on the lock and the storage controls of that Android device.
If the Controller learns that a letter was exposed to the wrong person, the Controller shall write to the affected person when it has an address for that person. You may also write to igushaqushandrak@gmail.com if you believe this happened. These steps reduce the chance of misuse. They do not remove every risk.
A California resident is covered here by the California Consumer Privacy Act. The same resident is covered by the California Privacy Rights Act. A California resident may ask whether personal information is collected or shared. To do that, the resident shall write the mailbox and ask us to confirm whether collection or sharing has taken place. The mailbox is igushaqushandrak@gmail.com.
The Controller does not share personal information in order to advertise, since the package carries no ads. A California resident shall opt out of selling by writing that mailbox. A do-not-sell request uses that same mailbox. The Controller does not sell personal information.
The Virginia Consumer Data Protection Act applies to a Virginia resident who uses the package. Targeted advertising, sale, and profiling do not happen here, because there are no ads, no sale, and no profile.
A Virginia resident may refuse a sale by a letter to the mailbox, which is also how that resident shall opt out of selling. The mailbox address is igushaqushandrak@gmail.com.
The adult makeup note that stays on the phone is why the package is not designed for children. That same note is why the listing is not marketed to children. The screens show that adult note, so they are not aimed at children. Sensitive identifiers belonging to children are not taken, and biometric data belonging to children is not taken, because the note is a record of a look rather than an identity check. The adult makeup note that stays on the phone has no child-focused features.
The refresh itself is a private note of cosmetics an adult packs before leaving home, kept on the phone that adult unlocks.
A parent or guardian may use the mailbox igushaqushandrak@gmail.com to request access to children's information actually received. A parent or guardian may use that mailbox to request deletion of such information. A parent or guardian may use that mailbox to request stopping processing of that information.
Knowing collection of personal information from anyone under 18 is refused.
The Controller shall replace this Privacy Policy by posting later wording in Nuvra and on the page that serves it. The effective date shown on that wording shall be the date the replacement takes effect. Until a replacement is posted, the effective date remains 2026-09-07.