Privacy Policy
Who is responsible
Oyu is provided by Beknazar Karin. Contact for privacy requests: info@oyu-app.com. This policy describes the Oyu application and its supporting services. Updated 6 October 2026.
Data we process
Account: email address, optional display name, password hash, account ID and account creation date. Passwords are transmitted to the server for authentication and stored as hashes, not readable passwords. An app-generated device identifier and authentication token link your session to your account. Content: saved motifs, ornament compositions, generated variants, drafts, exported-work records, favourites, collections, recently viewed items and app/export preferences. Service usage: allowance balances and usage records, aggregated ornament view/export counters, and technical request data needed to deliver and protect the service. Network providers receive an IP address when you connect.
Why we use it
We use these data to register and authenticate accounts, restore saved work, synchronise settings, generate requested designs, deliver files, operate usage limits, answer support requests and maintain security. Account-linked data are needed for these features; optional display names and AI prompts are supplied by you. Where applicable, processing is based on providing the requested service, legitimate interests in security and support, legal obligations, or consent when required.
Storage and service providers
Account records and editable work are held in PostgreSQL hosted by DigitalOcean. Artwork files are held in DigitalOcean Spaces; file access can use temporary signed links. Device storage holds session information, preferences, caches and pending synchronisation data. Information is transmitted over the network; Oyu is not an offline-only application. Providers may process data outside your country. Safeguards and rights depend on the applicable law and provider arrangements.
AI features
When you request AI assistance, your description, relevant motif geometry, composition parameters and selected reference context are sent through our backend to the configured AI service. The current integration supports DeepSeek or the cloud-native.kz MaaS service. We do not intentionally include your account email or password in those requests. Do not include confidential or sensitive personal information in prompts. Generated variants can be stored with your account. AI providers process requests under their own terms and privacy practices; this policy does not promise zero retention or exclude provider-side processing.
Sharing, tracking and permissions
We do not sell your personal information or use advertising/tracking SDKs in the current app. We share necessary data with infrastructure and AI providers to operate requested features, and may disclose data when legally required. Photo-library add access is used when you choose to save an image. Export, clipboard and sharing use operating-system features; files you send to another app are then subject to that service’s policies. The app does not need your contacts, precise location, microphone or camera for its current features.
Retention and deletion
Account data and saved content are retained while your account exists or until you remove them. To delete your account, open Settings → Account → Delete account and confirm. The server removes account-linked database records and files under your account’s storage prefix. Aggregated catalogue counters and detached technical device records can remain. Deleting the application or signing out alone does not delete server data. Backups, previously migrated copies, security records or data retained to meet legal obligations may remain separately from the live service. Contact us about their scope and deletion. Copies you exported or shared remain under your control or that of their recipients. We do not promise immediate erasure from all backups or third-party systems.
Your choices and rights
You can update available profile settings, remove saved items, export artwork, avoid AI features and delete your account. For access, correction, a copy of your personal data, deletion questions or objections, email info@oyu-app.com. We may need to verify your ownership of the account. Applicable law may give you additional rights, including a complaint to a data-protection authority. Children should use the service only when permitted by local law and with a parent or guardian’s involvement where required. Contact us if a child has supplied personal information improperly.
Changes and contact
We will update this page when our practices change and provide additional notice or request consent where required. Privacy and support: info@oyu-app.com. Developer: Beknazar Karin.