Privacy Policy
Effective 12 October 2026
Wardify is a digital wardrobe and AI styling app. This policy explains what data we collect when you use the Wardify app and its services, why we collect it, who receives it, and the choices you have. Questions go to privacy@wardify.app.
1. Who is responsible
Wardify ("we", "us") is the controller of the personal data described here. You can reach us about anything in this policy at privacy@wardify.app.
Wardify is run by Berk Civelek, an individual developer in Türkiye, who is the data controller. Contact: privacy@wardify.app.
2. What we collect
- Account data. When you sign in with Google or Apple we receive your name, email address, profile photo (Google only) and an account identifier. We never see your Google or Apple password. If you choose Apple's "Hide My Email", we only receive the relay address. If you sign up with an email address and a password instead, we store the email address and a one-way hash of the password, never the password itself; we send a code to that address to confirm it is yours, and another if you ask to reset the password.
- Profile. The name and profile photo you set in the app, your home city, and the style answers you give during onboarding: style interest, preferred aesthetics, body shape, lifestyle and fit preferences.
- Wardrobe photos. Photos of clothing you take or pick from your library. While an upload is in progress our server holds its photos in memory until that upload is finished; it does not write them to storage. We keep the cut-out picture made from each photo, a thumbnail, and the details we derive (category, colour, material, season and similar). For garments added since September 2026 we do not keep the original photo.
- Selfie for colour analysis (optional). If you use it, the app sends one selfie to our server, and our server sends it to Google once, to read your colouring (see section 3). Before your first selfie the app asks you, at the camera, with a sentence that says the selfie goes to Google for the colour analysis and what is kept from it. On your phone, the app deletes the camera file when you leave the step, when a retake replaces it, or when the analysis fails. We never store your selfie on our servers. We do not make a face template and we do not use the selfie to recognise or identify anyone. From it we keep only these facial features: skin undertone, contrast, depth of colouring, hair colour and eye colour, and the colour season and palette worked out from them. Skin undertone, hair colour and eye colour are sent to Google with your stylist requests so that colour advice suits you. You can delete all of this in Profile → Remove colour analysis.
- What you create. Outfits, outfit cover images, planned days, calendar events you add (title, time, place and notes), what you wore, likes and dislikes of suggestions, and your conversations with the AI stylist.
- Reports of AI output. When you report an outfit, a garment or a stylist reply in the app, we store the reason you chose, your optional note and a short excerpt of the reported answer with your account, so that we can review the report. They are deleted when you delete your account.
- Purchases and credits. Your plan, credit balance and credit history. Payments are handled by the Apple App Store or Google Play; we never receive your card details.
- Notifications (optional). If you turn them on: the address your phone uses for notifications (a push token), the morning time you chose, your time zone, language and temperature unit. The morning notification is not yet available on Android.
- Your choices. Whether the AI features and usage data are switched on for your account.
- Technical data. IP address and request logs on our servers, including any errors our servers run into while handling your requests. Some log lines also contain your account email address and the names of your garments.
- Usage data. Which screens you open and which features you use (for example that you finished onboarding, saw a plan screen, saved a look or had a purchase credited), and reports of errors in the app. Nothing is sent before you sign in: until then the app keeps these events on your phone, and sends them under your account id once you sign in, or drops them if usage data is switched off. The analytics library adds your device model and maker, operating system, app version, language, time zone and screen size, and we add your plan, app language, style interest, sign-up week and wardrobe size. We do not put your name, email, photos, garment names or messages in these events; an error report can occasionally contain text from the screen. Usage data is on by default. You can switch it off on the permission screen or in Settings → Share usage data; that stops the events the app sends and the events our servers send.
- Launch waitlist. If you leave your email address on wardify.app to hear when the app is out, we store that address, the date and, if the page's address said so, which link brought you there (for example an Instagram post). We do not store your IP address with it. This needs no account. The email is sent through Resend (section 5).
Your account and your garments are needed to use Wardify. The selfie, the style answers, notifications and usage data are optional. We collect this data through the app, by automated means.
The app asks for camera and photo library access only so you can add clothing photos, take the optional selfie and set a profile photo. It does not use your precise location, contacts or advertising identifier, and it does not show ads.
3. AI features and your permission
Wardify's AI features are run by Google (Gemini API): recognising garments, making cut-out pictures and covers, outfit suggestions, the colour analysis and the stylist.
Before the first AI feature, the app shows a screen that lists what is sent, names Google (Gemini API) and asks for your permission. Our servers enforce your answer: a request reaches Google only when it carries your permission, and without it the server refuses. If you choose "Not now", nothing goes to Gemini. Work our servers start by themselves (a look's cover picture, the morning look for the notification, the automatic Monday plan) runs only for an account whose stored answer is "allowed". Versions of the app that have no permission screen are refused and told to update.
You can take the permission back at any time in Settings → AI features (Google Gemini). It takes effect at once on our servers: an upload in progress stops before its next garment, and the automatic weekly plan is switched off. We keep a record of your answer with your account: the answer, which wording it was given to, when, and each change.
Switching the AI features off does not delete what is already stored in your account or what Google has already logged. Deleting is separate: Profile has Remove colour analysis and Clear style answers; you can delete garments, looks and chats one by one; deleting your account removes everything.
What goes to Google for the AI features:
- photos of clothes you add, and the cut-out pictures made from them when a look's cover is drawn;
- the names and details of your garments (category, colour, material, fit and similar), with stylist requests;
- your messages to the stylist and the earlier conversation in that chat;
- your style answers, and the skin undertone, hair colour and eye colour read from a selfie;
- a summary of your wardrobe that the app works out (main style, most used colours, occasions);
- your city and its weather;
- pictures of shop products you add to a look;
- the selfie itself, once, for the colour analysis.
Not sent: your name, your email address, and the title of a calendar event (only the kind of event is used).
We use the Gemini API under Google's paid-service terms. Google states that under these terms it does not use requests or answers to improve its products. It logs them for a limited period, currently up to 55 days, to detect abuse. Content that its abuse systems flag may be reviewed by authorised Google staff. We cannot choose the country where Google processes the data.
4. Why we use it
| Purpose | Legal basis (GDPR / KVKK) |
|---|---|
| Running your account, wardrobe, outfits and planner | Performance of our contract with you |
| AI features: recognising garments, making cut-outs and covers, outfit suggestions, stylist replies | Your consent, given on the permission screen before the first AI feature (see section 3). You can withdraw it at any time in Settings → AI features (Google Gemini) |
| Selfie colour analysis | Your explicit consent, given at the camera before the first selfie. You can withdraw it in Profile → Remove colour analysis |
| Body and style answers used to personalise suggestions | Your consent, given by answering. You can withdraw it in Profile → Clear style answers |
| Weather-aware suggestions for your city | Performance of contract |
| Subscriptions, credits and purchase restoration | Performance of contract; legal obligations for transaction records |
| Security, abuse prevention, fixing crashes and errors | Our legitimate interest in a safe, working service |
| Understanding how the app is used, to improve it (usage data) | Our legitimate interest in improving the app; you can switch it off in Settings at any time |
| Telling you once, by email, that the app is available (launch waitlist) | Your consent, given by leaving your address. You can withdraw it at any time by writing to privacy@wardify.app |
We do not sell your personal data, we do not use it for advertising, and we do not use your photos to train AI models.
5. Who receives data
We use these service providers. Google works for us under its paid Gemini API terms, which include Google's data processing addendum. The other providers offer their services under their own published terms.
| Provider | What for | Data |
|---|---|---|
| Supabase (United States company; our database is in Stockholm, Sweden) | Database and sign-in | Account, profile, wardrobe details, outfits, plans, chats, credits |
| Cloudflare (United States company; R2 storage and network) | Storing and delivering images; protecting our servers | Cut-out pictures, thumbnails, covers, profile photo and any clothing photos we store; request data |
| Google (Gemini API; United States company) | AI analysis and image generation | What section 3 lists |
| Google and Apple sign-in | Signing you in | Account identifiers |
| Resend | Sending the confirmation and password reset codes by email, for Supabase's sign-in service, and the launch email to the waitlist | Your email address and the code |
| Cloudflare Turnstile | Checking, without showing anything, that email sign-up and sign-in come from a person and not a bot | Device and network signals such as IP address and browser details, as set out in Cloudflare's Turnstile Privacy Addendum |
| Apple App Store, Google Play and RevenueCat (United States company) | Purchases and subscription status | An account identifier and purchase history |
| OpenWeather (United Kingdom company) | Weather forecast | Your city name only. We keep the city's coordinates so that we do not have to look them up again |
| Serper, with SerpApi as a fallback (United States companies) | Shopping search | Search text only: the stylist's description of a missing piece (for example "navy wool coat"), or what you type in the product search. No picture and no account identifier |
| PostHog (servers in the EU) | Usage analytics: which screens and features are used. Error reports from the app | Your account id and app events and, when the app hits an error, what went wrong and where in the code. We do not put your name, email, photos or messages in them; an error report can occasionally contain text from the screen |
| Expo (push service; United States company) and Apple | Delivering notifications, if you turn them on | Your device's notification address (a push token) and the text of the notification: for the morning notification, the day's weather and the names of the pieces in your look; and a "your pieces are ready" notification when an upload finishes |
| Sentry (servers in the EU) | Error reports from our servers | What went wrong and where in the code, and the first characters of your account id; no photos, messages, email address or IP address |
| Hetzner (German company; our server is in Helsinki, Finland) | Running the Wardify servers | All of the above while in transit |
Apple and Google when they sign you in, and the Apple App Store and Google Play when they take your payment, do not act on our instructions: they are independent controllers of that data under their own privacy policies. RevenueCat processes purchase data for us.
6. Where your data is processed
We are based in Türkiye. Our database is in Stockholm, Sweden. PostHog keeps our data on servers in the EU. Sentry keeps the error reports on servers in the EU. Supabase, Google, Cloudflare, RevenueCat, Expo, Serper and SerpApi are United States companies, and OpenWeather is a United Kingdom company; they may process data there or in other countries where they have facilities. For the AI features Google decides where it processes the data, and we cannot choose the country. Our server is in Helsinki, Finland, at Hetzner. Your images are stored in Cloudflare's Eastern Europe storage region, and Cloudflare's network delivers them from a point near you. Resend sends our emails from Ireland.
So your data is processed outside the country you live in: abroad if you live in Türkiye, and partly outside the EU if you live in the EU.
7. How long we keep it
- Your account data, pictures and content are kept for as long as your account exists. We do not delete an account because it is unused.
- Chats with the stylist are kept until you delete the chat or your account. Reports you send about AI output are kept until you delete your account.
- When you delete your account, we delete your profile, wardrobe, outfits, plans, chats, credits and the images we store for you, and your usage data. Any backup copies are deleted within 30 days. Images can stay reachable at their address in Cloudflare's network cache for a while after deletion, until that cache expires.
- When you delete your account we keep, for 12 months, a one-way code (a keyed hash) made from your sign-in identity and verified email address, and from any subscription that earned a sign-up bonus. It cannot be turned back into your email or identity; we use it only to see whether a new account belongs to someone who deleted one, so that the welcome credits, the bonus and the free pieces are not given twice; with it we keep one number, how many free pieces the deleted account had used. This is in our legitimate interest in preventing abuse.
- Your phone's notification address (push token) is kept until you sign out on that phone or delete your account, or until the notification service reports that it is no longer valid.
- We never store selfies on our servers. Google keeps its abuse-detection log of AI requests for a limited period, currently up to 55 days (see section 3). We cannot delete that log.
- Server logs are kept only as long as needed for security and debugging, normally no more than 90 days.
- Apple, Google and RevenueCat keep purchase records under their own legal obligations.
- A launch waitlist address is kept until we have sent the launch email and deleted within 30 days after that, or as soon as you ask us to remove it.
8. Your rights and choices
Depending on where you live (including under the GDPR and Turkish KVKK Article 11), you have the right to:
- know whether we process your data, see it and get a copy. In the current version of the app, Settings → Download my data gives you one file with everything we store about you, once an hour. You can also write to us and we send you the file;
- correct it (you can edit your name, photo and answers in the app);
- delete it: Profile → Settings → Delete Account deletes your account and data immediately (see Deleting your Wardify account). Remove colour analysis and Clear style answers in Profile delete only those parts, and you can delete garments, looks and chats one by one;
- take back a permission as easily as you gave it: the AI features and usage data in Settings, the colour analysis and the style answers in Profile;
- object to processing based on our legitimate interests, ask us to restrict processing, and receive your data in a portable format;
- complain to your data protection authority (in Türkiye, the Personal Data Protection Board; in the EU, your local authority).
To use a right you cannot use in the app, email privacy@wardify.app from the address linked to your account. It is free. We answer within 30 days.
Deleting your Wardify account
You can delete your Wardify account and its data yourself, at any time, in the Wardify app:
- Open Wardify and go to Profile → Settings.
- Tap Delete Account and confirm.
Without opening the app: send a message to privacy@wardify.app from your account's email address and ask us to delete your Wardify account. If you cannot write from that address, tell us whether you sign in with Apple, Google or email and the email address shown under Profile in the app. If you used Apple's "Hide My Email", that is the relay address. We reply to that address to confirm before we delete anything.
Deleting removes your profile, wardrobe pictures and details, outfits and covers, plans and calendar events, chats, style answers and colour analysis, reports, notification settings, credits (unused ones included), the daily AI usage counters and your usage data. What stays behind:
- Apple and Google keep purchase records under their own obligations, and RevenueCat keeps its own purchase record under the account identifier;
- backup copies are deleted within 30 days;
- images can stay in Cloudflare's cache until it expires;
- server logs are kept for up to 90 days;
- a one-way code of your sign-in identity is kept for 12 months (see section 7);
- Google's abuse-detection log of earlier AI requests runs out on its own (currently up to 55 days).
Deleting your account does not cancel a subscription. Cancel it first in the App Store or in Google Play.
9. Security
Data travels over encrypted connections (HTTPS). Access to your data in our database is limited to your own account, and our service keys are held only on our servers. Your images are stored at web addresses that cannot be guessed, but they are not behind a sign-in: anyone who has an image's address can open it. We do not publish these addresses. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
10. Automated decisions and AI
Outfit suggestions, garment details, the colour analysis and stylist replies are produced automatically by AI. The stylist is labelled as AI: it is not a person. Cut-out pictures and covers are made by AI, and the current version of the app says so in garment and look detail. We make no automated decision about you that has a legal or similarly significant effect. You can report an answer, a look or a garment in the app.
11. Minimum age
Wardify is only for people aged 18 or over, and we do not knowingly collect data from anyone younger. You confirm your age yourself when you sign in. If you believe someone under 18 has given us data, write to us and we will delete it.
12. Changes
If we change this policy, we post the new version here with a new date. If a change affects what is sent for the AI features or to whom, the app asks for your permission again.