Privacy Policy
Ovylo is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.
By using Ovylo you agree to this policy. If you do not agree, please do not use the app.
1. Who We Are
Ovylo is a personal wardrobe management application. We are an independent developer. If you have any questions about this policy, contact us at: info@ovylo.app
2. What Data We Collect
2.1 Account information
When you create an account we collect:
- Your email address
- Your name (optional)
- Encrypted password (we never store plain-text passwords)
2.2 Wardrobe data
When you use the app we collect:
- Photos of clothing items you upload
- AI-generated tags and descriptions of those items (name, category, color, style, brand)
- Outfit combinations you save
- Wear logs (when you mark an item as worn)
- Item prices you optionally enter for cost-per-wear tracking
2.3 Location data
If you use the weather outfit suggestion feature, we request your approximate location to fetch local weather conditions. We do not store your location permanently. It is used only in the moment of the request and discarded immediately after.
2.4 Payment data
We use Stripe to process subscription payments. We never see, store, or have access to your credit card number, CVV, or full payment details. Stripe handles all payment processing under their own privacy policy (stripe.com/privacy).
We store only: your subscription plan (Free, Style, or Atelier) and subscription status.
2.5 Usage data
We may collect basic technical information such as app version, device type, and crash reports to improve the app. This data contains no personally identifiable information.
2.6 Calendar data (optional)
If you connect Calendar Outfits, we access your Google Calendar with read-only permission to see your upcoming events. This is used only to suggest appropriate outfits for those events and is not stored beyond what's needed to generate suggestions.
2.7 Friends and chat data
If you use Friends & Chat we collect and store:
- your chosen username;
- your friend list, friend requests and the users you have blocked;
- the messages you send and receive, including the items and outfits you share in them (names, details and photos);
- read status of conversations (so we can show unread messages);
- reports you make or that are made about you (who, what message, the reason you gave);
- your device push-notification token, so we can notify you of new messages.
Other users can see your username (and only that) when they search for it exactly. We do not offer a public directory of users.
3. How We Use Your Data
We use your data exclusively to:
- Provide and operate the Ovylo service
- Analyze your wardrobe photos using AI to generate tags and outfit suggestions
- Sync your wardrobe across your devices
- Send you weather-appropriate outfit suggestions (only when you request them)
- Process your subscription payment and manage your plan
- Send essential account emails (account confirmation, password reset)
- Fix bugs and improve the app
- Let you find friends, chat and share items and outfits
- Send you push notifications about new messages and friend requests (you can turn them off in your phone settings)
- Review reports, keep chat safe and enforce our Terms (block, remove, suspend accounts)
- Create small preview images (thumbnails) of your items so shared outfits load fast
We do NOT use your data to:
- Sell your data to third parties
- Show you advertising based on your personal data
- Build profiles for advertising networks
- Train AI models on your personal photos without your explicit consent
4. Who We Share Data With
We share data only with the following service providers, strictly to operate the app:
- Supabase (supabase.com) — database and file storage. Your wardrobe data and photos are stored on their servers in the EU.
- Anthropic (anthropic.com) — AI analysis. Your clothing photos are sent to Anthropic's Claude API to generate tags and outfit suggestions. Anthropic does not retain your images beyond the duration of the API request.
- Stripe (stripe.com) — payment processing. They handle all subscription billing.
- Open-Meteo (open-meteo.com) — weather data. We send your approximate coordinates to retrieve weather conditions. No personal data is shared.
- Firebase (firebase.google.com) — push notifications. We use Google Firebase Cloud Messaging to deliver push notifications to your device, such as price drop alerts and outfit suggestions. Your device's push notification token is stored securely and used only to send notifications you have opted into. Google's privacy policy applies: policies.google.com/privacy
- PhotoRoom (photoroom.com) — background removal (Style and Atelier plans). Your clothing photo is sent to their API and returned with the background removed. Per PhotoRoom's policy, images processed through their API are not used to train their AI models.
- SearchAPI (searchapi.io) — product search. When you use Shop Check or Brand Catalog, we send search terms (such as item names, barcodes, or brand names) to SearchAPI to find matching products and pricing.
- UPCitemdb (upcitemdb.com) — barcode lookup. When you scan a barcode in Shop Check, we send the barcode number to UPCitemdb to identify the product.
- Google (google.com) — two separate uses: (1) if you connect Calendar Outfits, we access your Google Calendar (read-only) to suggest weather- and event-appropriate outfits for upcoming events; (2) we use Google's public favicon service to display brand logos in the Brand Catalog.
- RevenueCat (revenuecat.com) — subscription management. RevenueCat processes your subscription and purchase data to keep your plan status in sync across your devices.
- Expo (expo.dev) — push notifications. To deliver push notifications (such as price drop alerts and outfit suggestions), we use Expo's push notification service, which relies on Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS) to complete delivery to your device. Your device's push token and the notification text are used only to send notifications you've opted into.
- wttr.in — weather data (fallback). If our primary weather provider is unavailable, we use wttr.in as a backup, sending your approximate coordinates the same way as with Open-Meteo.
- Other Ovylo users: only your username, and the messages, items and outfits you choose to send to a friend.
- Apple and Google: push-notification delivery on iPhone and Android.
We do not share your data with any other third parties.
5. Data Storage and Security
Your data is stored on Supabase servers located in the European Union. We implement the following security measures:
- All data is encrypted in transit using HTTPS/TLS
- Your password is hashed using industry-standard algorithms — we cannot read it
- Each user's data is isolated using Row Level Security — no user can access another user's data
- Your photos are stored in a private storage bucket accessible only to your account
No system is 100% secure. While we take security seriously, we cannot guarantee absolute security.
6. Your Rights
You have the following rights regarding your personal data:
- Access — you can view all your data inside the app at any time
- Correction — you can edit or update any of your wardrobe items, outfit data, or account information
- Deletion — you can delete individual items, outfits, or your entire account from the Settings screen. Account deletion permanently removes all your data within 30 days. Deleting your account also deletes your username, friendships, block list, conversations and the messages in them. Reports about abuse may be kept (without a link to your account once it is deleted) for up to 12 months so we can protect other users.
- Export — contact us at info@ovylo.app and we will provide a copy of your data in JSON format within 14 days
- Objection — you can object to certain types of processing by contacting us
If you are in the European Union, you also have the right to lodge a complaint with your local data protection authority.
7. Data Retention
We retain your data for as long as your account is active. If you delete your account:
- Your profile, wardrobe items, and outfits are permanently deleted within 30 days
- Your photos are deleted from storage within 30 days
- Payment records are retained for 7 years as required by financial regulations
Wear logs and usage data may be retained in anonymized, aggregated form that cannot be linked back to you.
Messages are kept while both accounts exist, or until you delete your account. Reports are kept for up to 12 months.
8. Children's Privacy
Ovylo is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or by email at least 14 days before the changes take effect. Your continued use of Ovylo after that date means you accept the updated policy.
10. Contact Us
If you have any questions, requests, or concerns about this Privacy Policy or your personal data, please contact us:
Email: info@ovylo.app
We aim to respond to all privacy requests within 7 business days.