# Privacy Policy
Effective Date: March 17, 2026
Thuy Duong built the EDNA app as a Free app. This SERVICE is provided by Thuy Duong at no cost and is intended for use as is.
This page is used to inform visitors regarding my policies with the collection, use, and disclosure of Personal Information if anyone decides to use my Service.
If you choose to use my Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that I collect is used for providing and improving the Service. I will not use or share your information with anyone except as described in this Privacy Policy.
The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which are accessible at EDNA, unless otherwise defined in this Privacy Policy.
## Information Collection and Use
For a better experience, while using our Service, I may require you to provide certain personally identifiable information, including a **selfie or portrait photo**. This photo is used solely for the purpose of ancestral heritage analysis.
## Face Data and AI Analysis
**What Face Data is Collected:**
The app collects a single photo (selfie) provided by the user. We do not use TrueDepth APIs or collect depth maps; we only analyze the 2D image for phenotypic traits.
**Purpose of Collection:**
The face data is collected and processed to identify facial features and characteristics that allow our AI to estimate ancestral origins and generate a heritage report.
**Data Sharing and Third Parties:**
To provide the analysis, your photo is transmitted securely to our third-party AI service providers:
* **Google Cloud / Firebase Functions:** Used to host the analysis logic.
* **Gemini AI (via Google Cloud):** Used to perform the phenotypic analysis and generate the heritage narrative.
These third parties are obligated to provide the same or equal protection of your data as described in this policy. They process the data solely for the purpose of generating the response and do not use it for marketing or profiling.
**Data Retention:**
* **On Device:** The photo is stored temporarily on your device for the duration of the analysis session.
* **On Servers:** Your photo is **not retained** after the analysis is complete. It is processed in-memory and deleted immediately after the heritage result is returned (typically within seconds). We do not store face data indefinitely.
* **Third Parties:** Our AI partners (Google/Firebase) do not retain the face data after the processing request is completed.
**Disclosure:**
We do not sell, trade, or use your face data for any purpose other than the heritage analysis requested by you. We do not use face data for user identification or advertising.
## Uploaded Content and AI Processing
**What Happens When You Submit Content**
If you submit text, prompts, or images within the app for AI processing:
- The content is transmitted securely to Gemini AI through the Google Cloud/Firebase platform for processing.
- The data is processed temporarily to generate a response.
- I do not store, retain, or archive your submitted content on my own servers.
- I do not build user profiles or store personal data from AI interactions.
**Data Handling and Tokenization**
AI systems such as Gemini process data in tokenized form (text converted into numerical tokens for processing). Based on the technical operation of such systems:
- Your submitted content is converted into tokenized format during processing.
- Processing occurs temporarily for the purpose of generating a response.
- I do not store tokenized data, raw prompts, images, or AI outputs after the session ends.
**Data Retention**
- I do not retain submitted prompts, uploaded content, or AI-generated results.
- Any data used for processing exists only for the duration of the active session.
- Once processing is complete, no data is stored by me.
## Advertising (AdMob)
The app uses Google AdMob to serve advertisements. AdMob may collect certain data automatically, which may include:
- Device information
- IP address
- Advertising identifiers
- Usage data
This data is handled according to Google’s AdMob policies and privacy practices. I do not control how Google uses collected advertising data.
For more information, please review Google’s policies: https://support.google.com/admob/answer/6128543?hl=en
## Log Data
Whenever you use my Service, in the case of an error in the app, I may collect data and information (through third-party products) on your device called Log Data.
This Log Data may include:
- Your device Internet Protocol (“IP”) address
- Device name
- Operating system version
- App configuration at the time of use
- Time and date of use
- Other diagnostic statistics
This information is used solely for debugging and improving app performance.
## Cookies
This Service does not explicitly use cookies.
However, third-party services such as AdMob may use cookies or similar tracking technologies to improve their services. You may accept or refuse these through your device settings. Refusing cookies may limit certain functionalities of the Service.
## Service Providers
I may employ third-party companies and individuals for the following reasons:
- To facilitate our Service
- To provide the Service on our behalf
- To perform Service-related services
- To assist in analyzing how our Service is used
These third parties may have access to your Personal Information only to perform assigned tasks and are obligated not to disclose or use it for any other purpose.
## Data Security
I value your trust in providing information. While I strive to use commercially acceptable means to protect it:
- No method of transmission over the Internet is 100% secure.
- No method of electronic storage is completely secure.
- Therefore, I cannot guarantee absolute security.
## Links to Other Sites
This Service may contain links to third-party websites. If you click on a third-party link, you will be directed to that site.
I strongly advise reviewing the Privacy Policy of those websites. I have no control over and assume no responsibility for their content, policies, or practices.
## Children’s Privacy
This Service does not address anyone under the age of 13.
I do not knowingly collect personally identifiable information from children under 13. If I discover that a child under 13 has provided personal information, I will delete it immediately.
If you are a parent or guardian and believe your child has provided personal information, please contact me so I can take necessary action.
## User Rights
Depending on your location, you may have rights regarding your personal data, including:
- The right to request access
- The right to request correction
- The right to request deletion
Since I do not store uploaded AI content or personal data, deletion requests may not be applicable after session completion.
## Changes to This Privacy Policy
I may update this Privacy Policy from time to time. You are advised to review this page periodically for any changes.
Changes are effective immediately after they are posted on this page.
## Contact Us
If you have any questions or suggestions about this Privacy Policy, do not hesitate to contact me.