Your privacy matters to us when you use Stylist (the “App”). This policy explains what data we collect, why and how we process it, who we share it with, and your rights under the GDPR and Turkey’s KVKK (Law No. 6698). By using the App you agree to this policy.
1.Data We Collect
- Account details: your email address and an encrypted password (to create your account and sign you in).
- Profile details: username, profile photo, gender preference, region, and language setting.
- Wardrobe images: photos of clothing you upload and the attributes our AI extracts from them (category, color, fabric, etc.).
- Try-on photos: if you choose to use virtual try-on, the photos of yourself you upload and the images generated from them.
- Content & interactions: outfits you share, captions, likes, super-likes, comments, and shopping links you add.
- Subscription details: subscription status and purchase history. Payments are handled by the App Store / Google Play; your card details never reach us.
- Device & usage data: push notification token, app version, crash/error logs, and basic usage statistics.
2.How We Use Your Data
- To create your account, manage your session, and operate the App.
- To generate AI outfit suggestions, auto-tag your clothes, and create virtual try-on images.
- To show content relevant to your region and language, and to run the feed and leaderboards.
- To manage your subscription and free trial.
- To send notifications if you have allowed them (you can turn them off in device settings).
- To detect errors, keep the service secure, and improve it.
3.AI Processing
To provide outfit generation, garment recognition, and virtual try-on, your images and wardrobe data are sent to AI service providers. The providers we use are: Google Cloud (Vertex AI — Gemini, Veo), Replicate, fal.ai, Clarifai, OpenAI. Processing happens on their servers in the US and the EU. They act as processors on our behalf and are contractually barred from using your photos to train their own models.
Explicit consent. Before any photo of yours is sent to an AI provider we ask for your explicit consent in the app; that screen lists what data is sent, who receives it and why. You can withdraw consent at any time from Profile → AI Data Processing, after which AI features stop working.
Face data
If you upload body or face photos for virtual try-on, those images are sent to the providers above so your face can be placed onto the generated outfit image. We do not build a face template or faceprint, do not use face data to identify you, and do not share it with anyone beyond these processors. Face photos are stored in your account until you delete them, and are erased permanently when you delete your account. The providers process the image only transiently for the duration of the request and keep no copy afterwards.
4.Sharing Your Data
We do not sell your data and we do not share it for advertising. We share it only with the providers we rely on to run the service, and only to the extent necessary:
- Supabase — database, authentication, and file storage (servers in the EU, Paris region).
- Google Cloud (Vertex AI — Gemini, Veo), Replicate, fal.ai, Clarifai, OpenAI — AI features (garment tagging, outfit generation, virtual try-on).
- RevenueCat — subscription management.
- Google Firebase (FCM) / Apple APNs — push notifications.
- Sentry — crash and error monitoring.
When you share an outfit, your post, username, and any links you add are visible to other users in your region. We may disclose data to authorities where legally required.
5.International Transfers
Your primary data is stored on EU servers (France). Some providers, such as AI services, may be located in the United States; in those cases data is transferred with appropriate safeguards such as standard contractual clauses.
6.Data Retention
We keep your data for as long as your account is active. When you delete your account, your personal data is deleted or anonymized within 30 days, subject to legal retention obligations.
7.Your Rights
Under the GDPR and KVKK you have the right to access, correct, and delete your data, to object to processing, to data portability, and to withdraw consent. You can delete your account in the App’s settings or contact us by email. We respond to requests within 30 days at the latest. You also have the right to lodge a complaint with your local data protection authority.
8.Security
Your data is encrypted in transit (HTTPS/TLS). Database access is restricted with row-level security (RLS) rules, and your images are served through signed, time-limited links.
9.Children’s Privacy
The App is not designed for children under 13. If we learn that we have collected data from a user under 13, we will delete it.
10.Changes
We may update this policy from time to time. For material changes we will notify you in the App or by email. The current version is always published on this page.
Data controller: Stylist · stylistapp.net