Privacy Policy
Effective 30 July 2026 · Last updated 30 July 2026
AY Media Services LLC ("we," "us") operates this website and our mobile applications, including shimmr (together, the "Services"). This policy explains what we collect, why, and what control you have. It applies to all of our applications unless an application's own in-app disclosure says otherwise.
1Information we collect
Account information
An anonymous or authenticated account identifier used to associate your data with your device and subscription status.
Photographs you capture
Our applications capture photographs at your direction. Photos are used to generate the tracking features and scores shown in the app.
Derived data
Numerical features and scores computed from your photos, along with the dates of capture.
Information you enter
Routine and product logs, notes, and any other content you choose to record.
Subscription information
Purchase and subscription status received from Apple and our subscription management provider. We never receive your full payment card details.
Technical and diagnostic data
Device model, operating system version, app version, crash reports, and anonymized performance data.
Website data
If you contact us through this site, we receive the information in your message.
2How we use information
- To provide each application's core function: recording your captures and showing you change over time
- To maintain your account and verify subscription entitlement
- To respond to support requests
- To diagnose crashes and improve reliability
- To comply with legal obligations
3Your photographs
- We do not use your photographs to train third-party foundation models for their own purposes.
- We do not publish or share your photographs.
4Research use — opt-in only
We may use de-identified data to conduct research and to develop and improve our products. De-identified data may also be licensed to research institutions and industry partners, including on a paid commercial basis.
This requires your consent, and consent is off by default. Research participation is a setting inside the app that you must actively turn on. You may turn it off at any time, which stops any further inclusion of your data. Data contributed while consent was active may remain in de-identified research datasets already provided to partners under a perpetual, irrevocable license, and cannot be recalled from those datasets.
De-identified means identifiers such as your name, email address, and account identifier are removed. Photographs are not included in commercially licensed datasets unless separately and explicitly consented to.
5Data separation between applications
Each of our applications maintains its own data. We do not combine your data across separate applications to build a single profile of you without your consent.
6Service providers
We use third-party providers to operate the Services, including:
- Google Firebase (Google LLC) — authentication, database, cloud functions, and app integrity verification
- RevenueCat, Inc. — subscription management
- Anthropic PBC — processing of capture data to extract observable image features
- Apple Inc. — app distribution and payment processing
These providers process data on our behalf under contract and are not permitted to use it for their own unrelated purposes.
7Data retention and deletion
We retain your data while your account is active. You can delete individual entries in the app at any time, and you can request deletion of your entire account and associated data by emailing ahmed@aymediaservicesllc.com or using the account deletion option in the app. We will complete verified deletion requests within 30 days, except where retention is legally required.
8Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to withdraw consent, and to object to certain processing. Residents of the European Economic Area, United Kingdom, and Switzerland have these rights under the GDPR; California residents have comparable rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. To exercise any right, email ahmed@aymediaservicesllc.com.
Our legal bases for processing under the GDPR are: performance of a contract (providing the Services), consent (research use), legitimate interests (security, reliability, and product improvement), and legal obligation.
9International transfers
We are based in the United States and process data there. Where we transfer personal data out of the EEA or UK, we rely on Standard Contractual Clauses or another lawful transfer mechanism.
10Children
Our products are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users under the age of majority in their jurisdiction should use our applications only with the involvement of a parent or guardian. If you believe a child has provided us information, contact us and we will delete it.
11Security
We use encryption in transit and at rest, device-level app attestation, and access controls. No system is perfectly secure, and we cannot guarantee absolute security.
12Changes
We will post any changes to this policy on this page and update the date above. Material changes will be communicated in the app.
13Contact
AY Media Services LLC
9169 W State St #2276
Garden City, ID 83714
United States
ahmed@aymediaservicesllc.com