Modava Mobile App - Privacy Policy

Effective: August 17, 2026 | Last updated: August 17, 2026

Privacy at a glance

Modava is a fashion-discovery and referral service. It does not sell products or process retail payments.
We collect account details, saved fashion preferences, service activity, device/technical data, support messages, and website subscription details when you provide them.
We do not intentionally collect payment-card details, shipping addresses, precise location, contacts, photos, health data, or biometric data through Modava.
When you select a product, you leave Modava and deal directly with the retailer. Affiliate networks and retailers may receive referral information and may report a resulting purchase back to Modava.

1. Scope and who is responsible

This Privacy Policy explains how Modava (the “Operator,” “we,” “us,” or “our”), an independently operated fashion-discovery service based in British Columbia, Canada, collects, uses, discloses, retains, and protects personal information through modava.app, the Modava mobile application, related pages, communications, and support services (together, the “Services”).

Modava is accountable for personal information under its control. The Privacy Lead can be reached at the contact details in Section 16. This Policy is intended to meet applicable Canadian private-sector privacy requirements, including British Columbia’s Personal Information Protection Act and, where applicable, the Personal Information Protection and Electronic Documents Act. Additional rights may apply based on where you live.

A privacy policy is a notice, not a substitute for consent where consent is legally required. We seek consent at or before collection when required and limit collection to purposes a reasonable person would consider appropriate.

2. What Modava does

Modava lets users discover, filter, swipe through, save, and revisit fashion products from third-party brands and retailers. Modava displays product information obtained from retailers, affiliate networks, and product feeds, then redirects users to the applicable retailer to learn more or complete a purchase.

Modava is not the retailer, seller, merchant of record, payment processor, shipper, or returns provider. The retailer—not Modava—collects information you submit after leaving Modava, including payment, billing, shipping, and order information. The retailer’s own privacy policy governs that collection.

3. Personal information we collect

3.1 Information you provide

Account information: email address, display name or name if provided, authentication records, account status, and internal user identifier. Authentication providers process credentials; Modava does not receive your plaintext password.
Profile and preferences: country/market, selected fashion categories, brands, colours, sizes or price preferences if you choose to provide them, saved products, favourites, and prior selections.
Communications: questions, feedback, support requests, deletion requests, and any information you include in correspondence.
Website subscription information: first name, last name, email address, country, consent status, and subscription preferences when you sign up for updates.
Optional notification choices: notification status and a device push token if push notifications are offered and you enable them.

3.2 Information collected automatically

Usage and interaction information: products viewed or skipped, swipes, saves, filters, searches, outbound retailer clicks, screens or features used, timestamps, session duration, and navigation paths.
Technical information: IP address, browser or app type, operating system, app version, device type, language, time zone, crash information, diagnostic events, and app- or installation-specific identifiers used for security, operation, and measurement.
Website information: server logs, pages visited, referral URL, and cookie or similar technology data used to keep the site working, remember choices, prevent abuse, and understand performance.
General location: country or approximate region inferred from IP address or selected by you. Modava does not request or collect precise GPS location for its current core features.

3.3 Affiliate referral and conversion information

Outbound product links may contain an affiliate or campaign identifier. When you select a link, the retailer and its affiliate network may receive the destination URL, referral source, click time, campaign or product identifier, and technical information normally sent by a browser or app. The retailer or affiliate network may place its own cookie or use a similar identifier after you leave Modava, subject to its own policy and consent requirements.

If a referral results in a transaction, Modava may receive a conversion report such as a click or transaction identifier, retailer, product or category identifier, transaction date, order value, status (for example, completed, cancelled, or returned), and commission amount. Modava does not receive your full payment-card number, banking credentials, retailer password, or complete shipping address from this process.

3.4 Information we do not intentionally collect

Through its current core features, Modava does not intentionally collect payment-card or banking information, government identifiers, precise geolocation, contact lists, photo libraries, microphone or camera recordings, health or fitness information, biometric identifiers, or information about race, religion, sexual orientation, or political opinions. Do not send sensitive information in a support message. If Modava later introduces a feature requiring a new data type, this Policy and any required in-app notice or permission prompt will be updated before collection.

4. How we use information

Provide and secure accounts, authenticate users, maintain sessions, and respond to account requests.
Deliver core functions such as product discovery, filters, swipe history, favourites, saved items, and personalized ordering or recommendations.
Open retailer links, attribute referrals, reconcile affiliate reporting, detect invalid traffic, and calculate commissions owed to Modava.
Operate, troubleshoot, test, protect, and improve the Services, including analysing feature use, reliability, crashes, and performance.
Send requested service messages, legal notices, security alerts, and support responses.
Send promotional or launch communications only where permitted and with the applicable consent; every marketing email will include an unsubscribe method.
Prevent fraud, misuse, security incidents, and violations of the Terms; enforce legal rights and comply with lawful obligations.

Modava does not use sensitive personal information for advertising and does not currently serve third-party behavioural advertisements inside the App. Modava does use affiliate links and may earn a commission when users purchase from a retailer.

5. Consent and legal grounds

Depending on the law that applies, Modava relies on your consent; the need to perform a contract with you, such as providing an account and saved items; legitimate interests in operating, securing, measuring, and improving the Services; and compliance with legal obligations. Where processing is based on consent, you may withdraw consent subject to reasonable notice and legal or contractual restrictions. Withdrawal does not affect prior lawful processing, and some information is required to provide an account or requested feature.

You can withdraw marketing consent by using the unsubscribe link. You can change optional device permissions in device settings. Where optional analytics or notification controls are offered in the App, you can change them in the App’s privacy or notification settings. You may also contact us.

6. How we disclose information

We do not rent or sell personal information for money. We disclose only what is reasonably needed for the following purposes:

Infrastructure and service providers: providers that support authentication, database hosting, website hosting, security, diagnostics, analytics, communications, and support. Supabase currently supports core authentication and database functions. Providers act under contractual or other obligations to protect information and may use it only for authorized services, subject to applicable law.
Affiliate networks and retailers: retailers and networks such as Impact.com and Rakuten Advertising, where applicable, receive referral information needed to open, attribute, validate, and report product clicks and conversions.
Legal and safety disclosures: courts, regulators, law enforcement, advisers, or affected parties when reasonably necessary to comply with law, respond to valid process, investigate fraud or security incidents, enforce agreements, or protect rights, safety, and property.
Business change: a prospective or completed purchaser, successor, or adviser in connection with financing, reorganization, sale, or transfer of all or part of Modava, subject to appropriate confidentiality and continued protection.
At your direction: another party when you expressly request or authorize the disclosure.

We require service providers that receive personal information from Modava to provide protections consistent with this Policy and applicable law. Retailers and affiliate networks may also act as independent organizations for information they collect directly when you leave Modava; their policies apply to that separate handling.

7. Cookies, similar technologies, and tracking choices

The website may use essential cookies or local storage for security, form operation, consent preferences, and basic functionality, and limited analytics technologies to understand traffic and performance. The App may use local storage, authentication tokens, and app or installation identifiers for equivalent purposes. Modava does not use Apple’s advertising identifier or share a user’s email address with retailers for cross-app behavioural advertising through its current core features.

You can control website cookies through browser settings and any cookie control displayed on the site. Blocking essential storage may prevent sign-in or other features. Once you leave Modava, retailer and affiliate technologies are governed by their own notices and controls.

8. Retention

We retain personal information only as long as reasonably needed for the stated purposes, then delete, de-identify, or aggregate it. Normal retention periods are:

Account, profile, favourites, and preference information: while the account is active and normally deleted within 30 days after a verified account-deletion request, subject to the exceptions below.
Authentication, security, and server logs: generally up to 12 months, unless a longer period is needed to investigate abuse or a security incident.
Usage, diagnostic, click, and conversion records: generally up to 24 months; de-identified or aggregated statistics may be retained longer because they no longer identify a user.
Support and privacy correspondence: generally up to 24 months after the matter is closed.
Marketing subscription information: until you unsubscribe or the list is retired; a minimal suppression record may be kept to honour the opt-out.

Deletion from encrypted backups may take up to 90 additional days as backups rotate. We may retain limited records longer when reasonably required for legal obligations, tax or accounting, dispute resolution, fraud prevention, or enforcement. Retained information is restricted to those purposes.

9. Account and data deletion

If you created a Modava account, you may initiate account deletion inside the App through Settings > Account > Delete Account. You may also make a web-based deletion request by emailing the Privacy Lead at the address below from the email associated with your account with the subject “Delete My Modava Account.” This online Privacy Policy page is Modava’s web deletion resource and contains the current instructions.

Deletion request email: the.modava.app@gmail.com

We may take reasonable steps to verify that the requester controls the account. Once verified, Modava will delete the account and associated personal information that it is not legally required or reasonably necessary to retain. Deletion permanently removes access to favourites, preferences, and account history. It does not delete information held independently by a retailer or affiliate network; contact that organization directly for its records.

10. Your privacy rights

Subject to applicable law and limited exceptions, you may request access to personal information Modava holds about you; information about its use and disclosure; correction of inaccurate or incomplete information; deletion; withdrawal of consent; and, where applicable, a portable copy, restriction, objection, or appeal. You may also complain about our handling of personal information.

Submit a request using the contact information in Section 16. We may need to verify your identity and clarify the scope of a request. Authorized agents must provide proof of authority where required. We will respond within the period required by applicable law and will explain any lawful refusal or limitation.

10.1 Canadian residents

Canadian residents may ask for access to and correction of personal information and challenge our compliance. If you are not satisfied after contacting us, you may contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada, as applicable.

10.2 EEA, UK, and Switzerland

Where European data-protection law applies, you may have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority. Modava’s legal grounds are described in Section 5. Modava does not use solely automated decision-making that produces legal or similarly significant effects.

10.3 United States

Residents of certain U.S. states may have rights to know, access, correct, delete, and obtain a portable copy of covered personal information, and to appeal a denied request. Modava does not sell personal information for money and does not knowingly share personal information for cross-context behavioural advertising through its current core features. We will not discriminate against you for exercising an applicable privacy right.

11. International processing

Modava and its service providers may process information in Canada, the United States, and other countries where they operate. Those countries may have different privacy laws, and information may be accessible to courts, law enforcement, or national-security authorities under local law. We use contractual, organizational, and technical measures appropriate to the circumstances and applicable law for cross-border processing.

12. Security

We use safeguards appropriate to the sensitivity of the information, including encrypted network transmission, managed authentication, access controls, least-privilege practices, logging, vendor review, and reasonable administrative procedures. No system is perfectly secure. You are responsible for protecting your device and account credentials and should notify us promptly of suspected unauthorized access.

13. Children

The Services are not directed to children under 13, and Modava does not knowingly collect personal information from a child under 13. A user who is under the age of majority where they live should use the Services only with permission and supervision of a parent or legal guardian. If you believe a child provided personal information contrary to this section, contact us and we will investigate and delete it where required.

14. Third-party sites and retailers

Modava links to independent retailers and other websites. This Policy does not govern information those parties collect directly. Review the destination’s privacy policy, terms, cookie choices, and security practices before submitting information or buying a product.

15. Changes to this Policy

We may update this Policy to reflect changes in the Services, partners, law, or practices. The revised version will be posted at the online address above with a new “Last updated” date. If a change is material, we will provide additional notice in the App, by email, or as otherwise required before the change takes effect. We will obtain new consent where required.

16. Contact and complaints

Privacy Lead, Modava
British Columbia, Canada

Email: the.modava.app@gmail.com

Please use “Privacy Request” in the subject line and describe the request or concern. We will investigate privacy complaints in good faith and explain the outcome and any steps taken.

Modava Mobile App – Privacy Policy