Privacy Policy

Last updated: May 22, 2026

This Privacy Policy explains how Soreva, Inc., doing business as "ManeFeed" ("ManeFeed", "we", "us"), collects, uses, and shares personal information when you use the ManeFeed mobile app and manefeed.soreva.company (together, the "Service"). ManeFeed is available to users in the United States.

1. Who we are

2. Information we collect

a. Information you provide

• Account information — name, email, and avatar, provided either directly or via the social identity provider you sign in with (Google or Apple).
• Client records — names, contact information, service history, notes, and color formulas you enter for your salon clients.
• Visit data — service type, color codes, mixing ratios, pricing, and any notes recorded per visit.
• Photos — before-and-after images you capture or upload for client visits.
• Social media connections — when you connect a TikTok or Instagram account for automated posting, we store the necessary OAuth tokens to publish on your behalf.
• Support correspondence — the content of any messages you send us.

b. Information collected automatically

• Device and technical data — device model, OS version, app version, language, IP address, and push-notification tokens.
• Usage data — screens visited, feature interactions, and similar telemetry used to operate and improve the app.

c. Information from third parties

• Identity providers — Google and Apple share your name, email, and a unique identifier when you sign in through them. We do not receive your password.
• Payment processor — Stripe processes all subscription payments. We receive confirmation of the transaction (status, amount, transaction ID) but we do not receive, store, or have access to your full card number.

3. How we use information

• Create and maintain your account.
• Store and organize your client records, visit histories, and color formulas.
• Generate AI-powered captions and hashtags for your social media posts.
• Publish or schedule posts to your connected social media accounts.
• Process subscription payments.
• Deliver push notifications and transactional email.
• Detect and prevent fraud, abuse, and violations of our Terms.
• Respond to support requests.
• Improve the Service and develop new features.
• Comply with legal and regulatory obligations.

4. AI caption generation and client privacy

When you generate AI captions, ManeFeed sends only service metadata (service type, technique, color formula, target platform) to our AI provider (AWS Bedrock). Client names and personally identifiable information are never sent to AI services. AI-generated content is returned to you for review before posting.

5. How we share information

We do not sell your personal information. We share it only as follows:

• Service providers acting on our instructions:
  • Amazon Web Services — hosting, storage (S3, CloudFront), email (SES), push delivery (SNS), user directory (Cognito), database (RDS), and AI caption generation (Bedrock).
  • Stripe — subscription payment processing.
  • bundle.social — social media post delivery to TikTok and Instagram.
  • Google and Apple — identity federation (only when you sign in with them).
• Social media platforms — when you post through ManeFeed, your photos, captions, and hashtags are published to the platforms you have connected (TikTok, Instagram). This content becomes subject to those platforms' terms and privacy policies.
• Legal, safety, and enforcement — when we believe in good faith that disclosure is required by law or necessary to protect rights, property, or safety.
• Business transfers — in a merger, acquisition, or asset sale, subject to this Policy.

6. Retention

We keep personal information only as long as needed for the purposes described above or as required by law. Client records, visit data, and photos are retained for as long as your account is active. Account information is deleted within thirty (30) days of a verified deletion request, except where retention is legally required. Subscription and payment records are retained for up to seven (7) years for tax compliance.

7. Your choices and rights

• Access, correction, deletion, export. You can edit your data in the app, request a copy, or delete your account — see Delete Account.
• Push notifications. Disable in your device settings at any time.
• Social connections. Disconnect social media accounts from within the app at any time.

California residents (CCPA/CPRA)

If you are a California resident, you have the right to know the categories of personal information we collect, the right to request deletion, the right to correction, and the right to opt out of "sale" or "sharing". We do not sell personal information and we do not share personal information for cross-context behavioral advertising. To exercise any of these rights, email support@soreva.company or use the deletion flow in the app.

8. Security

We use encryption in transit (HTTPS/TLS), encryption at rest (AWS S3 and RDS managed encryption), hardware-backed secure storage for authentication tokens on device (iOS Keychain / Android Keystore), and tightly scoped access controls. No system is perfectly secure, but we work to protect your information using industry-standard practices.

9. Children

ManeFeed is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact support@soreva.company and we will delete it.

10. International users

The Service is offered in the United States, and all personal information is processed and stored in the United States.

11. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect. The "Last updated" date at the top indicates the most recent revision.

12. Contact us

Questions about this Policy or your personal information? Email support@soreva.company or write to Soreva, Inc. at the postal address above.