Privacy Policy

Data controller

Clomuse is the data controller for the personal data described in this policy. Contact details are in the Contact section at the end of this page.

Data we process

• Account details: your name, email address, email verification status and an irreversible hash of your password. If you sign in with Apple or Google, the account identifier and email address that provider shares. If you use the app without creating an account, a guest account is created without a name, email or password.
• Style profile: the style, color and similar preferences you give during onboarding and in settings.
• Wardrobe data: the clothing photos you upload, the analysis drafts prepared from them and the item details you confirm (such as category, color, brand, size, price and notes).
• Outfit data: the outfit suggestions created for you and the outfits you like, plan and wear.
• Ask before you buy: the product photos you add for evaluation, their details and the comparison with your wardrobe. These records are kept separate from your wardrobe.
• Style assistant: the messages you send, the assistant’s replies and the details the assistant remembers (memories). You can view, correct and delete memories in the app.
• Location: only if you allow it, your device location for weather-aware suggestions.
• Subscription: if you make a purchase, your subscription status and purchase records. Your payment card details never reach us.
• Technical data: IP address, a device name used to recognize your session, app language, request and error logs, and when you last used the app.
• Device identifier: an app-specific identifier of your device, used to link your data to your device while you use the app without an account and to stop the free trial from being opened again on the same device. We store a keyed hash of it, not the identifier itself. This hash is not anonymous; it lets us recognize the same device again. We do not use it for advertising or tracking, and it cannot sign you in to your account by itself.

Why we process it and legal bases

• Creating your account, keeping you signed in and providing the service: performance of a contract.
• Analyzing your photos, generating outfit and style suggestions and running assistant chats: performance of a contract.
• Providing weather for your location: the permission you give on your device, which you can withdraw at any time in your device settings.
• Keeping the service secure and detecting abuse and errors: legitimate interests.
• Meeting legal obligations: legal obligation.
• Measuring visits to this website: your consent.

We do not sell your personal data or share it with third parties for advertising.

Processing with AI

Clothing analysis, outfit suggestions and assistant replies are produced with an AI service provided by OpenAI. For this, the relevant photos, item details, preferences and messages are sent to OpenAI. The assistant receives only what a reply needs, not your whole history.

Before you first use AI features, we ask for your explicit permission for this sharing. If you do not allow it, your photos and messages are not sent to OpenAI and you can keep using the features that do not need AI. You can withdraw your permission at any time in Profile > AI and data sharing.

If you find an assistant reply, an outfit or a product evaluation offensive, harmful or wrong, you can report it in the app. We keep the reason you chose, the note you wrote and the text of the reported AI output for review; this record is deleted when you delete your account.

AI output can be wrong. Analysis results are not added to your wardrobe until you confirm them, and later AI results never overwrite your corrections. AI inferences are not written to your style profile.

Suggestions are not automated decisions that produce legal effects for you or similarly significantly affect you.

Who we share it with

We share your data only as far as needed to provide the service, with providers that process it on our behalf:

• OpenAI: photo analysis, outfit suggestions and assistant replies.
• Apple WeatherKit: weather for your approximate location. Coordinates are rounded to roughly 1 km for weather requests.
• Apple and Google: authentication if you sign in with those accounts.
• Apple App Store, Google Play and RevenueCat: subscription purchases and verification.
• Hosting and email delivery services: storing data and sending verification and password reset emails.
• Google Analytics: only on this website and only with your consent.

We may also share data with competent public authorities where the law requires it.

International transfers

Some of these providers are located outside Turkey and the European Economic Area, in particular in the United States. We transfer data to these countries in line with the safeguards set out in Article 9 of the KVKK and in the GDPR.

How long we keep it

• We keep account, profile, wardrobe and outfit data for as long as your account is open.
• A guest account (using the app without an account) is permanently deleted with all its data 30 days after the last day you used the app. A guest account with a purchase is not deleted. If you open the app again after deletion, a new, empty guest account is created.
• If you choose to move the data you created as a guest into the account you sign in to, we move it there and delete the guest account.
• Analysis drafts you do not confirm and unfinished uploads are deleted automatically. For analysis drafts this is 7 days by default.
• Expired session tokens and password reset links are cleared regularly.
• Records you delete in the app are no longer used in the service and are removed from backups within a reasonable time.
• You can delete your account at any time in the app under Profile > Delete account. Deletion happens immediately and permanently after you confirm; your data is deleted except for records the law requires us to keep and the trial record below. If you have a subscription, cancel it separately in the App Store or Google Play.
• We keep how much of the free trial a device has used, with the device hash and without linking it to your account, indefinitely. This record stays even if you delete your account and is used only to stop the free trial from being opened again on the same device.

Security

• Your photos are kept in non-public storage and shown only to your signed-in account.
• Passwords are stored irreversibly and connections are encrypted with HTTPS.
• Your session token is kept in your device’s secure storage.
• Sensitive content and location are not written to system logs.

Your rights

Under Article 11 of the KVKK and the GDPR, you can ask us to:

• Tell you whether your personal data is processed and give you information about it.
• Tell you the purpose of processing and whether data is used for that purpose.
• Tell you the third parties your data is shared with.
• Correct incomplete or inaccurate data.
• Delete or destroy your data and notify the third parties it was shared with.
• Reconsider a result against you that comes solely from automated analysis.
• Compensate damage caused by unlawful processing.
• Give you your data in a portable format, restrict processing, or stop processing when you object.
• Stop processing based on consent once you withdraw it.

Send your request to the address in the Contact section. We reply within 30 days at the latest. You can also complain to the Turkish Personal Data Protection Authority or the data protection authority in your country.

Website and cookies

This website does not use cookies unless you give consent.

If you consent, Google Analytics sets analytics cookies to measure which parts of the site are used. No advertising cookies are used. Your choice is stored in your browser and can be changed at any time with the Cookie settings link at the bottom of the page.

Our servers keep technical logs such as IP address, browser details and the page requested, for security and troubleshooting.

Children

The app is not designed for people under 16. If we learn that we process data belonging to someone under 16, we delete it.

Changes

We may update this policy from time to time. We announce important changes in the app or by email. The last updated date is at the top of this page.

Contact

For questions about this document or requests about your personal data, you can reach us using the details below.

Data controller

Clomuse

Email

support@clomuse.app