Effective Date: October 8, 2026Last Updated: October 8, 2026Applicable Product: Nalva iOS Application
1. Scope & Acknowledgment
This Privacy Policy governs the collection, storage, processing, transfer, and safeguarding of personal information by Nalva ("we," "our," or "us") in connection with your use of the Nalva mobile application for iOS (the "App") and any associated services, features, and content (collectively, the "Services").
Nalva provides a curated digital fashion ecosystem that empowers users to explore outfit inspirations, curate daily Outfit of the Day (OOTD) lookbooks, create and layer clothing items within a virtual styling canvas, and connect socially with other adult style enthusiasts who share similar fashion aesthetics.
By downloading, creating an account on, or accessing Nalva, you confirm that you have read, understood, and agreed to the practices described in this Privacy Policy and our Terms of Service. If you do not consent to any part of this Privacy Policy, you must refrain from using Nalva and uninstall the App from your device.
2. Strict Eligibility & Age Gate (18+ Adults Only)
STRICT 18+ ADULT SERVICE REQUIREMENT: Nalva is strictly developed and operated for individuals who are at least eighteen (18) years of age. Anyone under the age of 18 is strictly prohibited from downloading, accessing, registering, or interacting with Nalva under any circumstances.
In adherence to our strict adult-community standards and international child privacy regulations (including COPPA and GDPR Article 8):
Mandatory Age Affirmation: When registering an account or completing onboarding, you are required to explicitly verify and warrant that you are 18 years of age or older.
Zero Tolerance for Minors: We do not knowingly solicit, collect, maintain, or disclose personal data from any person under 18 years old.
Immediate Account Termination & Data Purging: If we obtain credible notice or discover that an account has been registered by a person under 18, we will immediately freeze account access, ban the corresponding device identifier, permanently delete all associated personal data from active production databases, and purge any UGC uploaded by that account.
Third-Party Reports: If you are a parent, guardian, or user who believes that an individual under the age of 18 has established an account on Nalva, please alert our privacy desk immediately at service@nalva.org.
3. Categories of Information We Collect
To deliver a feature-rich, high-performance fashion curation experience, we collect specific information depending on how you use our Services:
3.1 Information You Provide Directly
Account & Credential Information: Username, profile display name, email address, password credentials (cryptographically secured via one-way salted hashing algorithms), and date of birth/age confirmation. If you authenticate via third-party single sign-on (such as Sign in with Apple), we receive the unique identity token and relay email address authorized by your Apple ID configuration.
Style Profile & Aesthetics: Fashion preferences, style tags (such as Streetwear, Minimalist, Y2K, Haute Couture, Vintage, Avant-Garde, Gorpcore), favorite color palettes, curated aesthetic bios, and wardrobe category filters.
User-Generated Content (UGC): High-resolution outfit photos, styling lookbook collages, virtual canvas layering compositions, preset mixes, captions, tags, user comments, bookmarks, and style forum threads.
Direct Communications & Messages: Text messages, outfit references, and interactions exchanged directly with other style creators through our in-app messaging feature.
Customer Support & Feedback: Information provided when submitting bug reports, performance diagnostics, user surveys, moderation disputes, or general service inquiries.
3.2 Information Collected Automatically
Device Specifications & Hardware Attributes: Apple device model (e.g., iPhone 15 Pro), hardware architecture, iOS build version, system display language, preferred timezone, carrier network, and available screen dimensions.
Device Identifiers: Non-permanent internal vendor identifiers (IDFV - Identifier for Vendor) utilized strictly to manage account state, session stability, and fraud prevention.
Network & Connectivity Diagnostics: Internet Protocol (IP) address, connection stability (Wi-Fi, 5G, LTE), and approximate location data resolved at the country and metropolitan level. We do not collect or process precise satellite GPS location data.
Crash & Performance Telemetry: Anonymized stack traces, crash dumps, memory warnings, and network latency metrics to resolve crashes and improve canvas rendering efficiency.
3.3 Information We Do NOT Collect
We do not collect or process sensitive categories of personal data, including financial payment card details (all transactions, if any, are handled securely through Apple App Store In-App Purchases), government-issued identification numbers, biometric recognition data, health or medical information, or religious beliefs.
4. iOS Native Device Permissions
In accordance with Apple App Store Review Guidelines, Nalva requests access to specific device capabilities only when necessary to execute explicit user-triggered actions. You maintain granular control over these permissions via your iOS settings (Settings > Privacy & Security > Nalva):
iOS Permission
System Key
Functional Necessity
User Impact if Revoked
Photo Library (Read)
NSPhotoLibraryUsageDescription
Required to select and upload your daily outfit photos (OOTDs), wardrobe images, or avatar photos from your Photos album.
You cannot upload existing photos from your album to the community or styling studio.
Photo Library (Save)
NSPhotoLibraryAddUsageDescription
Required when you export and save your completed virtual mix-and-match styling boards directly into your device camera roll.
You cannot export saved styling collages to your local camera roll; designs remain stored solely inside your in-app lookbook.
Camera
NSCameraUsageDescription
Required only if you choose to snap live photos of your outfits directly from the in-app camera viewport.
Real-time photo capture is disabled. You may still pick existing images from your photo library if read access is granted.
Push Notifications
UNUserNotificationCenter
Used to send optional alerts when other creators like, bookmark, or comment on your outfits, or when style peers send you direct messages.
Push notifications will not appear on your lock screen. All notifications remain accessible inside the in-app notification center.
App Tracking Transparency
NSUserTrackingUsageDescription
If presented, requested strictly in compliance with Apple's ATT framework to measure cross-platform discovery campaign performance.
Tracking is disabled; app experience and core features remain completely unaffected.
5. Purposes & Legal Bases of Data Processing
If you reside in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, our processing of your personal information is grounded in distinct legal frameworks under the General Data Protection Regulation (GDPR Article 6):
Processing Purpose
Description of Activity
Lawful Basis (GDPR Art. 6)
Core Service Operation
Registering user accounts, authenticating sessions, rendering community outfit feeds, and executing styling canvas features.
Performance of Contract (Art. 6(1)(b))
Social Connection
Enabling style profile discovery, community discussions, following creators, and direct peer-to-peer messaging.
Performance of Contract (Art. 6(1)(b))
Platform Security & Moderation
Detecting spam bots, screening objectionable or illicit uploads, enforcing Community Guidelines, and protecting users from harassment.
Accessing camera sensors and photo libraries for uploading outfit media and saving rendered styling canvases.
Explicit Consent (Art. 6(1)(a))
Regulatory Compliance
Fulfilling legal obligations, defending against legal claims, and cooperating with valid law enforcement requests.
Legal Obligation (Art. 6(1)(c))
6. Styling Studio & Mix-and-Match Data Processing
The second primary tab of Nalva provides a proprietary virtual wardrobe studio where users can freely experiment with clothing combinations, custom layering presets, and styling templates. Here is how your styling activity is processed:
Local Draft Composition: As you layer, scale, or swap items on the styling canvas, manipulation coordinates and layer indexes are processed in real-time memory on your iOS device for rapid 60 FPS responsiveness.
Saved Presets & Cloud Sync: When you hit "Save Look" or "Publish Preset", the compiled styling layout (including selected item IDs, color configurations, visual scale coordinates, and background elements) is synchronized to our cloud servers to enable access across your devices.
Anonymized Style Affinity: We aggregate non-identifiable statistics regarding which garment categories and aesthetic pairings are most popular (e.g., blazer + cargo combinations) to improve the default presets offered in future seasonal wardrobe updates.
7. User-Generated Content & Social Interactions
Public Nature of Community Sharing: Nalva is built around social outfit discovery. Outfits, lookbooks, styling formulas, public bios, and comments that you publish to the community feed are visible to all other registered adult users.
To safeguard your privacy while enjoying the community:
Avoid Personal Identifiers in Images: We advise users to check outfit photos before posting to ensure they do not inadvertently reveal private information (such as street address signs, identifiable vehicle license plates, school logos, or work badges).
Direct Messaging Confidentiality: Direct messages between style friends are transmitted over encrypted TLS channels and stored securely. Message contents are not scanned for advertising purposes, but are subjected to automated safety filters to prevent phishing links and abusive content.
Remix & Preset Forking: If you publish an outfit preset publicly, other community members may view your combination and use it as a reference template for their own styling experiments.
8. Information Sharing, Disclosure & Third Parties
OUR CORE PRIVACY PLEDGE: We do NOT sell, rent, lease, or monetize your personal information or user-generated content to third-party data brokers, marketers, or advertisers.
We share information solely with authorized parties under the following limited conditions:
Technical Infrastructure & Cloud Hosts: We partner with industry-leading cloud service providers (e.g., enterprise cloud databases, object storage for outfit photos, and content delivery networks). These vendors process encrypted data exclusively on our instructions under strict Data Processing Agreements (DPAs).
Content Safety & Moderation Services: We may utilize automated image-analysis APIs to scan uploaded media for prohibited content (such as explicit nudity or violence). These services operate statelessly and do not train models on your private photos.
Corporate Changes: In the event of a merger, acquisition, restructuring, or asset transition, user data may be transferred as part of business assets. Any acquiring entity will remain bound by the provisions of this Privacy Policy.
Legal & Safety Mandates: We may disclose information if required to do so by applicable law, court order, subpoena, or where we reasonably believe that disclosure is critical to prevent imminent physical danger, identity fraud, or malicious network attacks.
9. Automated Analysis & Feed Recommendations
To show you outfits that match your preferred aesthetic vibe (such as Y2K, Streetwear, or Minimalism), we employ algorithmic ranking models:
Recommendation Factors: Feeds are prioritized based on style tags you choose to follow, presets you bookmark, outfits you like, and general trending looks within the community.
No Legal Effects / Sensitive Profiling: Our recommendation systems serve solely to organize fashion aesthetics. We do not engage in automated decision-making or profiling that produces legal consequences or similarly significant effects regarding our users.
10. Data Retention Schedules & Storage Architecture
We retain your personal data only for as long as necessary to fulfill the operational purposes described in this Privacy Policy:
Active Account Data: Profile information, lookbooks, outfit posts, and messages are retained for the active lifetime of your account.
Usage Logs & Telemetry: Anonymized server logs and performance telemetry are systematically purged on a rolling 90-day cycle.
Moderation Action Logs: Incident reports and records of terms violations are retained for up to 12 months following account action to prevent ban evasion and handle appeals.
Disaster Recovery Snapshots: Encrypted backup snapshots are maintained for no longer than thirty (30) calendar days before being completely overwritten.
11. Account Deletion & Right to Erasure (Apple Guideline 5.1.1(v))
In strict accordance with Apple App Store Review Guideline 5.1.1(v), Nalva provides an immediate, frictionless self-service account deletion mechanism directly inside the iOS app.
How to Permanently Delete Your Account
Launch the Nalva application on your iOS device.
Navigate to your Profile tab (bottom right corner).
Tap the Settings icon (gear icon) > select Account Security.
Select Delete Account at the bottom of the screen.
Read the irreversible deletion confirmation notice and tap Confirm Permanent Deletion.
Consequences of Deletion:
Your profile, outfit posts, presets, collages, comments, and style connections are immediately removed from public view across the platform.
All personal identifiable information (PII) is permanently wiped from active production databases within thirty (30) calendar days.
You may also submit a formal manual deletion request by emailing service@nalva.org from your registered email account with the subject line "Account Deletion Request".
12. International Cross-Border Transfers & Safeguards
Because Nalva connects a global community of style enthusiasts, your information may be processed and stored on secure cloud servers situated outside of your home country or region (including within the United States or the European Union).
Where personal data originating in the European Economic Area (EEA), the United Kingdom, or Switzerland is transferred outside these territories, we implement rigorous cross-border transfer mechanisms, including:
Standard Contractual Clauses (SCCs): Incorporating European Commission-approved standard contractual clauses into vendor agreements to enforce data protection equivalents.
Adequacy Determinations: Transferring data to jurisdictions officially recognized by the European Commission as providing adequate data security.
Technical Controls: Enforcing end-to-end encryption in transit and rest to prevent unauthorized interception during transfer.
13. Global Privacy Rights (GDPR, UK GDPR, CCPA/CPRA)
Depending on your geographic residency, you are entitled to exercise statutory rights over your personal data under global privacy statutes:
13.1 European Union & United Kingdom Residents (GDPR)
Right of Access (Art. 15): Request confirmation and an export copy of personal data we maintain about you.
Right to Rectification (Art. 16): Request correction of inaccurate, incomplete, or out-of-date personal data.
Right to Erasure (Art. 17): Request the permanent deletion of your data where continued retention is no longer necessary.
Right to Restrict Processing (Art. 18): Request temporary freezing of your data processing under specific conditions.
Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21): Object to data processing based on our legitimate interests.
Right to Lodge a Complaint: Lodge a complaint with your local Data Protection Supervisory Authority.
13.2 California Residents (CCPA / CPRA & CalOPPA)
Right to Know & Access: Inquire about categories and specific pieces of personal information collected over the preceding 12 months.
Right to Delete: Request deletion of personal information collected from you.
Right to Correct: Request correction of inaccurate personal records.
No Sale or Sharing: Nalva does not sell or share personal data for cross-context behavioral advertising.
Right to Non-Discrimination: We never deny services, adjust features, or impose penalties because you exercised statutory privacy rights.
To exercise any of these privacy rights, email our team at service@nalva.org. We verify requests against your registered account email and respond within thirty (30) calendar days without charge.
14. Security Measures & Technical Safeguards
We deploy robust administrative, operational, and technical safeguards to protect your data against accidental loss, unauthorized access, destruction, and alteration:
Transport Security: All data transmissions between the iOS application and our cloud infrastructure are strictly secured using Transport Layer Security (TLS 1.2 and TLS 1.3) with modern cipher suites.
Encryption at Rest: Database storage, user records, and media volumes are encrypted at rest using AES-256 standard cryptographic encryption.
Credential Hashing: Passwords and sensitive authentication tokens are irreversibly protected via modern salted one-way hashing schemes (such as Argon2/bcrypt).
Principle of Least Privilege: Operational access to internal databases is restricted exclusively to authorized engineering personnel using multi-factor hardware authentication and detailed access audit trails.
15. Community Safety, Content Moderation & Reporting
To cultivate an inspiring and respectful styling sanctuary for adult fashion lovers (in compliance with Apple App Store Review Guideline 1.2):
Prohibited Content: Nalva strictly prohibits hate speech, sexual violence, non-consensual imagery, harassment, bullying, illegal goods, and copyright-infringing uploads.
In-App Reporting Tools: Every outfit post, styling collage, and user comment includes a dedicated reporting trigger. You can flag inappropriate content with just two taps.
Instant User Blocking: You can block any user at any time from their profile screen. Blocking immediately severs all messaging, hides their outfits from your feed, and prevents them from viewing your looks.
24-Hour Moderation SLA: Flagged content is routed to our trust and safety workflow and reviewed within twenty-four (24) hours. Content violating our Community Guidelines is promptly removed and repeated offenders are permanently banned.
16. Policy Updates & Notifications
We may periodically update this Privacy Policy to reflect new outfit styling features, UI additions, security enhancements, or changing regulatory mandates. When revisions occur:
We will update the "Last Updated" timestamp displayed at the head of this policy document.
For material modifications that significantly alter your privacy rights or data handling practices, we will provide prominent advance notice through an in-app banner alert or direct inbox message prior to the changes taking effect.
Your continued use of Nalva following the effective date of an amended Privacy Policy constitutes your acceptance of the updated terms.
17. Contact Us & Privacy Inquiries
If you have any questions, comments, concerns, or formal data subject requests regarding this Privacy Policy or our data protection practices, please contact our team: