Privacy Policy

Last Updated: August 18, 2026

1. Introduction & Data Controller

At Dyuvik ("we", "us", or "our"), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy details how we collect, use, process, and disclose your information across our ecosystem of products, including Ages & Spices, DarkLens, and Marquee (collectively, the "Services").

The Data Controller responsible for your personal information is Bhanuprakash Reddy Yanamala, operating out of India. This policy is designed to comply with applicable global privacy frameworks, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

We collect varying types of data depending on which Dyuvik Services you interact with. In addition to standard account information (name, email address, password hash), we collect product-specific data:

2.1 Ages & Spices

  • Dietary Information: Preferences, allergies, and dietary restrictions you explicitly provide to personalize recipe recommendations.
  • AI Interactions: Queries, prompts, and contextual conversations you have with our AI Sous-Chefs to improve response accuracy.
  • Usage Metrics: Saved recipes, cooking history, and interaction patterns within the culinary platform.

2.2 DarkLens

  • Web Scanning Data: URLs submitted for analysis via the DarkLens web application to detect dark patterns.
  • Browser Extension: The DarkLens browser extension collects zero personal data. All scanning occurs locally on your device, and no browsing history or DOM content is transmitted to our servers.

2.3 Marquee

  • Social Graph & Profile: Biographical details, profile imagery, followers/following networks, and posted cinematic content.
  • Virtual Economy Interactions: Transaction history of Box Office Tickets, digital asset ownership, and engagement metrics.
  • AI Prompts: Text prompts and parameters submitted to generate AI cinematic content, stored for moderation and quality assurance.

3. How We Use Your Information

We utilize the collected information for the following purposes:

  • To provide, maintain, and personalize the Services.
  • To process transactions and manage your billing via our Merchant of Record.
  • To improve our proprietary AI models and algorithms, enhancing user experience and feature accuracy.
  • To communicate with you regarding security updates, product announcements, and customer support inquiries.
  • To enforce our Terms of Service and comply with legal obligations.

4. Legal Bases for Processing

Under the GDPR, we rely on the following legal bases to process your personal data: (i) Contractual Necessity: to deliver the core functionality of the Services you signed up for; (ii) Legitimate Interests: to improve our products, ensure security, and conduct analytics; (iii) Consent: when you explicitly opt-in to marketing communications or specific data sharing; and (iv) Legal Obligation: to comply with applicable laws.

5. Third-Party Processors & Data Sharing

We never sell your personal data. We utilize trusted third-party service providers (sub-processors) to operate our Services. These include:

  • Supabase: Database and authentication services.
  • PostHog: Product analytics and usage tracking.
  • Google Gemini & Replicate: Backend providers for AI processing and generation capabilities.
  • Paddle: Merchant of Record for secure payment processing and subscription management.
  • Resend: Transactional email delivery.
  • Upstash: Redis caching and rate-limiting infrastructure.
  • Sentry: Error monitoring and crash reporting.

We ensure all sub-processors are bound by strict data processing agreements that adhere to industry-standard privacy and security requirements.

6. Data Retention

We retain your personal data only for as long as your account is active or as necessary to provide you with the Services. Upon account deletion, we initiate a process to permanently erase your data from our active systems. Backups and logs may retain remnants of your data for up to 30 days before being completely purged. Certain transactional records may be retained longer to comply with legal and tax obligations.

7. Your Privacy Rights

Depending on your jurisdiction, you possess specific rights regarding your personal data:

  • Right to Access: Request copies of your personal data.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): Request deletion of your personal data.
  • Right to Restrict Processing: Request limits on how we process your data.
  • Right to Data Portability: Request transfer of your data to another organization or directly to you.
  • Right to Object: Object to our processing of your personal data, particularly for direct marketing.

To exercise any of these rights, please contact us at privacy@dyuvik.com. We will respond to your request within the legally mandated timeframe.

8. International Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. We implement appropriate safeguards, such as Standard Contractual Clauses, to ensure your data receives adequate protection during international transfers.

9. Cookies & Tracking Technologies

We utilize essential cookies necessary for the fundamental operation of our Services, such as maintaining active sessions and security protocols. We do not use third-party tracking cookies for behavioral advertising without your explicit consent. You can manage your cookie preferences through your browser settings.

10. Children's Privacy

Our Services are not intended for or directed at children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal identifiable information from children. If we become aware that we have inadvertently collected such data, we will take immediate steps to delete it from our servers.

11. Security

We implement robust, industry-standard technical and organizational measures to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure.

12. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect changes in our practices or regulatory requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of the Services after such modifications constitutes your acknowledgment of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at: privacy@dyuvik.com.