Last updated: July 11, 2026
Nylva is an organizational tool for tracking skincare products. We are not doctors, dermatologists, estheticians, or medical professionals of any kind. Nothing in this app — including ingredient conflict flags, expiry estimates, or any other guidance — constitutes medical advice, a diagnosis, a treatment recommendation, or a substitute for professional care.
Consult your own doctor or dermatologist before making decisions about your skin health. Period-After-Opening (PAO) values and ingredient interaction data within Nylva are general-purpose reference information drawn from publicly available cosmetic-chemistry and formulation guidance. They are approximations, not clinical fact, and they cannot account for your individual skin, health conditions, allergies, or any specific product's formulation.
By using Nylva, you acknowledge that you rely on any information within the app entirely at your own risk.
Nylva is operated by Massive Technologies Inc., a company based in Southwest Florida, USA. When this policy says "we," "us," or "our," it means Massive Technologies Inc.
For privacy questions or requests, contact us at Info@nylva.app.
When you create an account, we collect your email address. We use passwordless authentication (magic link), so we do not store passwords.
Information you enter about your skincare products (names, brands, categories, prices, dates, notes, active ingredients) and your morning/evening routines is stored in your account. This data exists solely to power the features you use — inventory tracking, expiry calculation, routine building, and conflict detection.
If you upload product photos or progress photos, they are stored privately in cloud storage buckets scoped to your user account. Photos are accessible only through short-lived signed URLs generated for your authenticated session. They are not publicly accessible, not indexed, and not shared with anyone. We do not analyze, scan, or process the content of your photos beyond storing and displaying them to you.
Products you add to your wishlist are stored in your account and used only for the wishlist feature and duplicate detection.
If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not see, store, or have access to your credit card number, bank account, or other payment details. We receive from Stripe only your Stripe customer ID, subscription status, and the plan you selected, which we use to manage your subscription tier within the app.
We use basic server-side logging (request timestamps, error logs) for operational purposes. We do not use third-party analytics trackers, advertising pixels, or behavioral profiling tools in the app. We do not serve ads.
Your data is used to provide and operate the Nylva service — specifically:
We do not use your data for advertising, profiling, selling, or any purpose other than operating the service you signed up for.
We share data only with the infrastructure providers necessary to operate the service:
We do not sell, rent, license, or otherwise share your personal data with advertisers, data brokers, or any third party for their own purposes. We do not participate in data-sharing arrangements with employers, insurers, or any entity that might use skincare or health-adjacent data against your interests.
Your data is retained for as long as your account exists. If you want your data deleted, email Info@nylva.app and we will delete your account and all associated data (products, routines, wishlist, photos, profile) within 30 days. Stripe retains its own transaction records per its own privacy policy; we cannot delete Stripe's copies of payment events.
We use industry-standard measures to protect your data: encrypted connections (HTTPS/TLS), row-level security policies that ensure each user can only access their own data, private storage buckets with per-user access controls, and server-side enforcement of subscription tier limits. No system is perfectly secure, but we take reasonable steps to protect your information.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data. You may also have the right to object to or restrict certain processing. To exercise any of these rights, contact Info@nylva.app. We will respond within 30 days.
Nylva is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If we make material changes, we will make reasonable efforts to notify you (for example, via email or an in-app notice).
Massive Technologies Inc.
Southwest Florida, USA
Info@nylva.app