This Privacy Policy applies to Universal AI LLC ("we", "us", "our") and the iOS apps we operate, including Jineo, Cooked, and Banchan.
Our apps are designed to operate anonymously. We do not require sign-up to use core features. Where data is collected, it falls into one of these categories:
For California residents, the following table maps each category we collect to its business purpose, retention period, and whether we sell or share it:
| Category | Business purpose | Retained | Sold or shared? |
|---|---|---|---|
| Anonymous Supabase identifier (UUID) | Per-account state, deletion routing | Until you delete your account | No |
| Skin scan image (inline) | Single AI inference, then discarded | Not retained — discarded after inference | No |
| Chat prompts and AI responses | Deliver Hana coaching experience | On-device only; not retained on our servers | No |
| Crash + performance events | Fix bugs, restore service | 30 days at Sentry, then auto-purged | No |
| Product analytics events (screen views, taps) | Understand what features are used | Retained at PostHog per their default policy | No |
| Subscription state | Unlock paid features | Duration of subscription per Apple/RevenueCat | No |
| Email address (only if you opt in to digests or contact us) | Send emails you asked for | Until you unsubscribe | No |
We do not sell or share personal information as defined by CCPA / CPRA § 1798.140. See § 4 below for how to exercise your rights, including the right to opt out of any future sale or sharing. Because we do not sell or share personal information, there is nothing to opt out of — and any Global Privacy Control (GPC) browser or operating-system signal we receive is honored as a valid opt-out request.
To deliver app functionality, we use the following processors:
We have signed Data Processing Agreements (or have GDPR Art. 28-compliant terms on file) with every processor above.
Our apps are not directed at children under 13, and we do not knowingly collect personal information from children under 13. (On the App Store, Jineo and Banchan are rated 4+; Cooked is rated 17+.) If you believe a child under 13 has provided us personal information, contact contact@universalaillc.com and we will delete it.
We retain no personal data beyond what is necessary to deliver the service. Inline AI requests are processed and discarded. Subscription identifiers are retained for the duration of the subscription per Apple's requirements.
When you take a skin-analysis selfie in Jineo, our AI examines the geometry and surface of your face — the position and appearance of features, pores, and marks — to produce your cosmetic skin read. We treat this as biometric information. We do not create a facial-recognition template, we do not use it to identify you, and we do not sell it.
Consent. Before your first scan you check an affirmative biometric-consent box that names this collection and its purpose. This is your informed, written, opt-in consent under the Illinois Biometric Information Privacy Act (740 ILCS 14/15), the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code §503.001), and Washington (RCW 19.375). You may withdraw it any time in Profile → AI & Privacy.
Retention & destruction schedule (BIPA §15(a)). Your facial geometry and the underlying image are held only transiently, in memory, for the single analysis call, and are permanently destroyed immediately upon return of your score — never written to durable storage. The numeric score breakdown persists only on your own device until you delete it. OpenAI, acting as our processor, may retain the API request for up to 30 days for its own abuse monitoring under its API terms, then deletes it; it is never used to train models. We retain no readable image or biometric data after the request completes — well within the BIPA three-year outer limit.
We may update this policy as our apps evolve. Material changes will be reflected in the "Last updated" date at the top of this page.
If you believe content on our apps or backend infringes your copyright, send a notice meeting the requirements of 17 U.S.C. §512(c)(3) to our designated agent. Notices must include: (a) identification of the copyrighted work, (b) identification of the infringing material with enough detail to locate it, (c) your contact information, (d) a good-faith statement that the use is not authorized, (e) a statement under penalty of perjury that the information is accurate, and (f) your physical or electronic signature.
Designated Agent: Aiden Price, Universal AI LLC
Email: privacy@universalaillc.com
Postal: 18415 Thundercloud Rd, Boyds, MD 20841, USA
General privacy questions: privacy@universalaillc.com
Other questions: contact@universalaillc.com
Universal AI LLC
18415 Thundercloud Rd
Boyds, MD 20841
United States