Privacy Policy
We only collect the data needed to run Wardrova. We do not sell your data, use it for advertising or share it with third parties to track you. Your photos are sent to our AI provider abroad only when you use an AI feature, and only with your explicit consent. You can delete your account and all your data from inside the App.
1. Data controller
Data controller: Ali Mert Güleç
Contact: kvkk@wardrova.app
Users in Türkiye can find more detail in the KVKK Information Notice. This policy also applies to users covered by the EU General Data Protection Regulation (GDPR).
2. What we collect
- Account data: your anonymous user ID (uid), device identifier, language and time zone.
- E-mail address and name: only if you link your account with Apple or e-mail. With Sign in with Apple you can choose to hide your e-mail.
- Profile data: username, display name, bio and profile photo (only if you create a community profile).
- Clothing photos and the cut-outs generated from them, tags (category, colour, season, etc.) and the notes, brand and price you add.
- Body photo: the full-length photo you upload, only if you use virtual try-on.
- AI-generated images (try-on results) and your conversations with the style assistant.
- Your outfits, calendar plans, wear logs and style preferences.
- Community content: your posts, comments, likes, follows, blocks and reports.
- Usage data: in-app events about which screens and features you use (Firebase Analytics).
- Crash and error data: device model, OS version and error logs (Firebase Crashlytics).
- Purchase status: your plan and its start and end dates (we never see your card details; Apple/Google take the payment).
- Push token: only if you allow notifications.
- Approximate location: only for the weather and only if you allow it. It is used for a single weather lookup and not stored; only the weather summary (temperature, city name) is kept with your daily suggestion.
We do not access your contacts, microphone or precise location. We do not collect the advertising identifier (IDFA/AAID) and do not track you across other apps.
3. Why we use it
- To provide the core App: store your wardrobe, outfits and calendar and sync them across devices.
- To run AI features (with your explicit consent): background removal and tagging, virtual try-on, the style assistant.
- To create the daily outfit suggestion and send notifications at the time you choose.
- To provide community features and keep the community safe: content moderation, handling reports, preventing abuse.
- To manage subscriptions and AI credits and prevent abuse of free credits.
- To find and fix bugs and improve the App.
- To comply with legal obligations and protect our rights.
- To send marketing messages: only if you separately opt in.
Automated decisions: AI tags your clothes and generates suggestions. These are not decisions with legal effects on you. You can appeal community content hidden by automated filters; appeals are reviewed by a human.
4. Who we share it with
We do not sell your data. We share it only as needed with the service providers that help us run the service:
- Google Ireland Ltd. / Google LLC (Firebase): authentication, database (Firestore), file storage, cloud functions, notifications (FCM), analytics and crash reporting. Our cloud functions, database and files are located in the USA (Google Cloud nam5 multi-region / us-central1). Analytics and crash data may also be processed in the USA.
- fal.ai Inc. (USA) and the AI model providers accessed through fal.ai’s infrastructure: your clothing and body photos, for image processing during AI actions (background removal, tagging, virtual try-on) and style-assistant replies. We instruct the provider not to retain inputs and outputs after processing; results are copied only into our Firebase storage.
- RevenueCat Inc. (USA): your anonymous user ID and purchase information, to manage subscription status and purchase records.
- Apple Inc. and Google LLC: app stores, payments and (if you choose it) Sign in with Apple.
- Open-Meteo (Switzerland): approximate coordinates are sent by our server for the weather forecast and are not linked to your identity.
We may also share data with competent authorities where legally required. Content you share publicly in the community (posts, comments, profile) is visible to other users.
5. International transfers
Some of the providers above are located outside Türkiye and the EU (mainly in the USA). For these transfers we rely on the safeguards provided by KVKK art. 9 and GDPR Chapter V (standard contractual clauses, the EU–US Data Privacy Framework). For AI processing we additionally ask for your explicit consent to transfer your photos abroad; you can withdraw it at any time.
6. How long we keep it
- Account, wardrobe, outfit, calendar and profile data: while your account exists. If you delete your account it is fully deleted, including backups, within 30 days.
- Temporary photos uploaded for an AI action: deleted within 24 hours after processing.
- Body photo: until you delete it, withdraw your AI consent or delete your account.
- Try-on results and style-assistant conversations: until you delete them or your account; conversations for at most 12 months.
- Deleted posts: permanently deleted within 30 days.
- Report and moderation records: 12 months after resolution.
- Analytics data: 14 months; crash reports: 90 days.
- Consent and purchase records: for the limitation periods required by law (e.g. 10 years).
- Approximate location: not stored.
- Anonymous accounts unused for 24 months may be deleted.
7. Your rights
You have the right to know whether your data is processed, to access it, to have it corrected or deleted, to object to processing, to receive a copy (portability) and to withdraw your consents. You can exercise most of these directly in the App:
- Download your data: Settings › Privacy & data › Export my data
- Manage consents: Settings › Privacy & data
- Delete your body photo: Settings › Privacy & data
- Delete your account and all data: Settings › Account › Delete account
- If you cannot access the App you can request deletion at https://amgsoftwarestudio.com/wardrova/delete-account.
For anything else, write to kvkk@wardrova.app. We answer within 30 days. You may also complain to the Turkish Personal Data Protection Authority or the data protection authority in your country.
8. Security
Data is encrypted in transit. Database and file access is restricted by rules so that only the owner can access their data. The on-device cache is stored encrypted. Our AI provider’s keys are kept only on our server. No system is risk-free; if a breach occurs we will notify you and the authorities within the legal deadlines.
9. Children
Wardrova is not designed for people under 16. Body photo try-on is for users aged 18 and over only. If we learn that we have collected data from someone under 16 we will delete it.
10. Changes
We may update this policy. We will notify you in the App about material changes and ask for your consent again where needed. The effective date is shown at the top of this text.