Legal
Privacy Policy
In short
- We keep data about your account, the content you share and how you use the app; we use it to run the app, personalize your feed and keep things secure.
- We do not sell your data.
- Data is hosted in the EU (Ireland); some of our service providers are located outside Türkiye (listed below).
- Messages and photos you send to Stylely AI are passed to an AI provider to generate responses.
- You can delete your account from the app at any time; when you do, your profile, posts and messages are permanently deleted.
1. Data controller
Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the data controller is [COMPANY NAME / FULL NAME], [ADDRESS] (“Stylely”, “we”, “us”). You can reach us at [email protected] or in the app under Settings › Help & Support.
This policy covers the Stylely mobile app and its related services. Information for users in the European Economic Area (EEA) under the General Data Protection Regulation (GDPR) is also included below.
2. What data we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email address, username, full name, password (stored only in hashed form); when you sign in with Apple, Google or X, the identifier and email provided by that service | You, your sign-in provider |
| Profile | Profile and cover photo, bio, website, interests, account privacy and notification preferences, theme/language preference, verified account application details | You |
| Posts | Photos, videos, captions, category, product tags (brand, store, price, link), tagged people, location you add, comments, contest entries | You |
| Interactions | Likes, saves and collections, follows, wishlist and price alerts, blocks, reports | Your use of the app |
| Messages | Content of your direct messages, photos you send and posts you share; support requests | You |
| Usage | Which posts you view, your clicks on product links, sponsored post impressions and clicks, how many times you use AI features | Your use of the app |
| Device and technical | Push notification token, platform (iOS/Android), app language, crash reports (device model, operating system version, error log), IP address during sign-in attempts | Your device |
| Location | Your device location, only when you add a location to a post and only if you allow it; the place name you choose is stored with the post | Your device, with permission |
| Advertising | Advertising ID (IDFA/AAID) and your ad consent preferences | Your device, via the ad provider |
We access your camera, photo library and microphone only while you are taking or selecting a photo/video, and only as long as you have granted permission. We do not access your contacts.
3. Purposes and legal bases
| Purpose | Legal basis (KVKK Art. 5 / GDPR Art. 6) |
|---|---|
| Creating and managing your account, signing you in, delivering your posts, messages and notifications | Entering into and performing a contract |
| Personalizing your feed and recommendations (based on your interests, likes, saves and what you view) | Legitimate interest (showing you relevant content) |
| Detecting products in photos and generating Stylely AI responses | Performance of a contract (when you start the feature) |
| Security, preventing abuse and spam, reviewing reports, enforcing community guidelines | Legitimate interest; legal obligation |
| Debugging and improving the app (crash reports, aggregate usage statistics) | Legitimate interest |
| Showing and measuring ads; personalized ads | Legitimate interest (showing ads); explicit consent for personalization in the EEA/UK |
| Campaign and promotional notifications | Explicit consent (can be turned off in Settings) |
| Responding to requests from public authorities, protecting rights | Legal obligation; establishing, exercising or defending a right |
In line with KVKK Art. 10, data is collected electronically and by automated means through the app, after you are informed by this notice. We do not aim to collect sensitive personal data (health, religion, biometrics, etc.); we recommend that you do not include such information in your posts.
4. AI features
- Product detection: When you add a post, your photo is processed on a detection server we operate to automatically find the clothing and accessories in it; if that server is unavailable, it is sent to the Google Gemini API instead. The photo is used only for detection and is not stored in these systems.
- Stylely AI: The messages you write to the style assistant, your conversation history and any photos you attach are sent to the Google Gemini API to generate responses. The assistant’s responses are for guidance only.
- No automated decision that affects you (e.g. closing your account) is made based solely on AI output.
5. Ads, sponsored posts and product links
- Ads: No ads are shown in the app during the beta. Once ads are switched on, Google AdMob ads are shown in the feed. AdMob may process your advertising ID, IP address and device information to serve and measure ads. In the EEA, the United Kingdom and Switzerland, personalized ads are shown only if you consent, and you can change your choice in Settings › Ad preferences. Everywhere, you can turn off ad personalization in your device settings (Android: Google › Ads; on iOS the app does not request tracking permission, so your advertising ID is not used). Learn more: Google advertising policies.
- Sponsored posts: These are shown with a “Sponsored” label. Campaign owners receive only aggregate impression and click counts; no information that identifies you is shared with them.
- Product links: When you tap a product link, the click is recorded, and an affiliate code may be added to some store links; in that case the price does not change for you, and we may earn a commission. Once you move to the store’s website, that site’s own privacy policy applies. Links open in Stylely's in-app browser; sites you visit there may store their own cookies and site data on your device (governed by their policies). This data is removed from your device when you sign out or delete your account.
6. Who sees what
- Your username, name, profile photo and bio are public.
- If your account is public, your posts, comments and any location you add are visible to all users; if your account is private, only followers you approve can see your posts.
- Your messages are visible only to the people in the conversation. We do not read message content except where necessary, such as a security review.
- If you share a post to other apps using the in-app share feature, the content becomes subject to that app’s terms.
7. Service providers and international transfers
We do not sell your data. We share it with the following service providers only to the extent needed to provide the service, and on a contractual basis:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, file storage, authentication, server functions | EU (Ireland) |
| Google Firebase (Cloud Messaging, Crashlytics) | Notifications, crash reports | USA / global |
| Google Gemini API | Stylely AI and fallback product detection | USA / global |
| Google AdMob | Ad serving and measurement | USA / global |
| Apple, Google, X | Authentication, if you choose to sign in with these accounts | USA |
| OpenFreeMap, Photon (komoot) | Map display and place search; the place name you search for and the coordinates you pick on the map are sent | EU |
International transfers are carried out under KVKK Art. 9, based on standard contracts signed with the relevant service providers and other applicable safeguards; where these are not possible, they rely on your explicit consent.
Where required by law, we may also share data with competent public authorities and institutions.
8. Retention periods
- Account, profile, post and message data is kept for as long as your account is open.
- When you delete your account (Settings › Account Settings › Permanently Delete My Account), your profile, posts, photos and videos, comments, likes, messages and notifications are deleted immediately and permanently. They may remain in database backups for up to 7 days, then they are deleted; cached (CDN) copies of deleted images may stay visible for a short time. If you can't access the app, or for details, see Account and Data Deletion.
- You can delete your individual posts and comments at any time.
- Sign-in attempt records (including IP address) are kept for no more than 1 hour and deleted automatically.
- Report records are kept for no more than 1 year and deleted automatically.
- Crash reports are kept by the provider for no more than 90 days.
- Records subject to a legal retention obligation are kept for the required period.
9. Security
Data is transmitted over an encrypted connection (TLS). In the database, every table is protected by row-level access rules so that users can access only the records they are authorized to see. Passwords are not stored in plain text, and secret keys are kept in a separate vault. No system is completely risk-free; if a breach occurs, we will notify the Personal Data Protection Board and you as required by KVKK.
10. Your rights
Under KVKK Art. 11, you have the right to: learn whether your data is processed and, if so, request information about it; learn the purpose of processing and whether it is used in line with that purpose; know the third parties to whom it is transferred; request correction if it is incomplete or inaccurate; request its deletion or destruction under KVKK Art. 7 and request that these actions be notified to third parties to whom it was transferred; object to an outcome against you that results from analysis exclusively by automated systems; and claim compensation if you suffer damage due to unlawful processing.
If you are in the EEA, you also have the rights to data portability, to restrict processing and to object to processing based on legitimate interest, and you may lodge a complaint with your local data protection authority.
You can exercise many of these rights directly in the app: you can edit your profile, delete your content and your account, and change your notification and ad preferences. For other requests, you can write to [email protected]; your request will be resolved free of charge within 30 days at the latest. We may ask for additional information to verify your identity.
11. Age limit
Stylely is not intended for children under 13 (in the EEA, if your country sets a higher age of digital consent, that age applies). If we learn that a user under this age has an account, we will delete the account.
12. Changes
We may update this policy. For significant changes, we will notify you in the app before they take effect. The current version is always available on this page.
13. Contact
[COMPANY NAME / FULL NAME] · [ADDRESS] · [email protected]
You can submit your request in writing, or via registered electronic mail (KEP) or the email address registered in our system, in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller.