Nykaaman
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- The policy allows data sales or sharing; it does not describe an opt-out.
- The documents do not say who can read your content.
Nykaa Man collects location, device and payment data, uses it for ads, and can close accounts and change rules without notice.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Sells or shares your data with no opt-out
Collected
They collect account details, payments, location, device IDs, cookies, usage, and data from other sources.
Read the exact line
Privacy policy
“We may also receive/store information about your location and your mobile device, including a unique identifier for your device.”
Training
They use your data to sell products, personalize the shop, and show interest-based ads.
Read the exact line
Privacy policy
“We use your personal information to display interest-based ads for features, products, and services that might be of interest to you.”
Sharing
Group companies, payment and ad SDKs, delivery firms, and authorities can get your data.
Read the exact line
Privacy policy
“Nykaa Man app contains third party SDKs that collect personally identifiable information (PII). They use this information to better target users”
Kept
They keep data as long as they need it for those purposes or for legal reasons.
Read the exact line
Privacy policy
“We keep the Personal Information we collect about you on our systems or with third parties for as long as it is required for the purposes set out in this Privacy Policy and for legal or regulatory reasons.”
Controls
You can email privacy or support; posted content deletion may take up to 30 business days.
Read the exact line
Privacy policy
“you can get in touch with us to resolve the issue by means of privacy@nykaa.com.”
Fine print
They can change terms or close your account without notice; you them.
Read the exact line
Terms of service
“NYKAA may terminate the Terms of Use at any time and may do so without notice, and accordingly deny you access to the Site, such termination will be without any to the Site.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Email privacy questions or complaints
privacy@nykaa.com or support@nykaaman.com
Ask to delete posted user content
Email support@nykaaman.com with name, username, email, reason, and post dates; allow up to 30 business days
Limit cookies in your browser
Browser cookie settings; they also point to http://www.allaboutcookies.org
Contact the grievance officer
grievanceofficercs@nykaa.com or 1800-267-4444
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If someone sues them because of how you used the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to and NYKAA, its employees, directors, officers, agents and their successors and assigns”
For example, if a review you posted leads to a lawsuit, they can ask you to cover their lawyer costs.
They can shut your account whenever they want and do not have to warn you first.
Read the exact line
Terms of service
“NYKAA may terminate the Terms of Use at any time and may do so without notice, and accordingly deny you access to the Site, such termination will be without any to the Site.”
For example, you could lose access to your order history overnight with no email.
They build interest profiles to show you ads based on what they know about you.
Read the exact line
Privacy policy
“We use your personal information to display interest-based ads for features, products, and services that might be of interest to you.”
For example, browsing hair products can lead to more hair-care ads in the app.
Outside ad and analytics companies inside the app collect personal data to target you.
Read the exact line
Privacy policy
“Nykaa Man app contains third party SDKs that collect personally identifiable information (PII). They use this information to better target users”
For example, Appsflyer or Clevertap can get identifiers used to send you ads and push messages.
The app can store where you are and a unique ID for your phone.
Read the exact line
Privacy policy
“We may also receive/store information about your location and your mobile device, including a unique identifier for your device.”
For example, they may use location to show local ads or personalized content.
They can change prices without telling you in advance.
Read the exact line
Terms of service
“PRICES AND AVAILABILITY OF THE PRODUCTS AND SERVICES PROVIDED OR OFFERRED ON THE SITE ARE SUBJECT TO CHANGE WITHOUT PRIOR NOTICE”
For example, an item in your cart can cost more by the time you check out.
If they change the rules and you keep using the site, they treat that as you agreeing.
Read the exact line
Terms of service
“Your continued use of the Site following the modifications to the Terms of Use and Policies constitutes your acceptance of the modified Terms of Use and Policies”
For example, a new sharing rule can apply even if you never opened an email about it.
They do not promise the site or product info is correct or that it will work.
Read the exact line
Terms of service
“This Site is provided to you "AS IS". We make no representations regarding the use of or the result of the use/depiction of the Contents on the Site”
For example, if a product photo or price is wrong, they say they are not .
They say they use basic security measures, but they do not name audits or certifications.
Read the exact line
Privacy policy
“We take reasonable steps to ensure appropriate physical, technical and managerial safeguards are in place to protect your Personal Information”
For example, they claim staff and systems protect data, without describing encryption details.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- tracking pixels
- Tiny invisible images or bits of code in a page, app or email that report back when and where you opened it. For example, a pixel in a marketing email tells the sender the moment you read it.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
How we got here · grade F · score 27/100 · 15 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect more than account and orders: location, device IDs, cookies, usage, profile pictures, date of birth, and data from other sources.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They run interest-based ads and use third-party SDKs that collect PII to target users and serve digital ads.
Do they sell or share your data, and can you opt out?
They share personal data with group companies, ad/analytics SDKs, and other third parties, and the policy does not describe an opt-out of that sharing.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as needed for stated purposes. Deleting posted content requires an email and can take up to 30 business days.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use physical, technical and managerial safeguards, with no independent audit named.
Is there a real age gate, and are teens protected?
The site is for adults only and they say they do not knowingly collect from minors, with no age-check described.
Will they tell you when the rules change, and is the policy specific?
They post changes on the site, sometimes without notice, and continued use counts as acceptance. The privacy policy has no date.
Can they close your account without warning, and can you get your data out first?
They can refuse service and terminate accounts without prior notice, in their sole discretion.
If something goes wrong, who pays?
The site is “as is,” liability is heavily limited, and you must indemnify Nykaa for claims arising from your use.
Do subscriptions renew on their own, and can you get a refund?
Prices and availability can change without prior notice. Detailed refunds are pointed to another policy not in these documents.
The privacy policy is 3,143 words at a college level (Flesch reading ease 40.4); the terms are 5,426 words at a college graduate level.
