STYLISTAILLC
Back to home
CLEAR BY DESIGN

Privacy
Policy.

Welcome to StylistAI. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web service (collectively, the "Service").

By using StylistAI, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

Last Updated: November 16, 2025 · Effective Date: November 16, 2025

1. Information We Collect

Personal Information You Provide

  • Account Information: email address (required for account creation and authentication), automatically generated user ID, and your password (encrypted and securely stored).
  • Photos & Content: photos you upload for outfit generation, preferences you specify (budget, season, style preferences), and outfit history and saved outfits.

Automatically Collected Information

  • Usage Data: number of outfits generated, features accessed within the app, session duration and frequency, and subscription tier and status.
  • Device Information: device type and model (iOS, Android, or web browser), operating system version, app version, device identifiers (for analytics and troubleshooting), and IP address (temporarily for security purposes).
  • Transaction Data: purchase history, receipt validation data (encrypted), and payment provider information (processed by Apple or Google; we do not store credit card details).

Information from Third Parties

We receive verification data from the Apple App Store and Google Play Store to validate your subscription purchases. This data includes purchase receipts and subscription status but NOT your payment card details.

2. How We Use Your Information

Face Data Usage: Our app allows users to upload photos that may contain their face in order to generate personalized outfit recommendations. The app does not collect, store, analyze, or extract biometric identifiers or any form of face geometry. The only face-related data we handle is the photo the user chooses to upload, and this image is processed solely for generating outfit suggestions.

The uploaded photo is sent securely to our image-processing server and is never used for facial recognition, identity verification, or training AI models. The image is not shared with third parties, and is not retained after the outfit generation process is complete. Photos are automatically deleted from our servers within 24 hours, and users may delete their image at any time within the app.

All processing is done only to generate the requested outfit recommendations, and the image is never repurposed. We do not use, store, or retain any biometric facial data, nor do we perform facial detection beyond simple object identification required to position clothing items. The image itself is the only data handled, and it is deleted shortly after processing.

Core Service Delivery

  • Outfit Generation: process your photos to generate AI-powered outfit recommendations.
  • Account Management: create and maintain your account, authenticate logins.
  • Subscription Management: track your subscription status, usage limits, and renewal dates.
  • Content Delivery: provide personalized outfit recommendations based on your preferences.

Service Improvement

We analyze usage patterns to improve AI accuracy and user experience, debug technical issues, optimize app performance, and develop new features based on user behavior insights.

Communication

We send important service updates and security notifications, respond to your support requests and inquiries, and provide subscription renewal reminders (if opted in).

Legal & Security

We use information to prevent fraud, abuse, and unauthorized access; comply with legal obligations and enforce our Terms of Service; and protect the rights and safety of our users and the public.

3. How We Share Your Information

We do NOT sell, rent, or trade your personal information to third parties. We only share your data in the following limited circumstances:

Service Providers

  • AI Processing Partners: we use Perplexity AI to generate outfit recommendations. Only anonymized or pseudonymized data is shared when possible. Photos are processed securely and temporarily; they are not stored by third-party AI providers.
  • Cloud Infrastructure (Supabase): we use Supabase for secure data storage, authentication, and backend services. All data is encrypted in transit (TLS 1.3) and at rest, and servers are located in secure, SOC 2 certified data centers.
  • Payment Processors: Apple App Store and Google Play Store process all in-app purchases. We do not have access to your payment card details; we only receive confirmation of successful transactions.

Affiliate Partners

When you click on product links in generated outfits, we may earn a small commission from Amazon through the Amazon Associates Program (affiliate tag: tag=stylistaillc-20). Amazon may collect browsing data per their own privacy policy; we have no control over this. We do NOT share your personal information with Amazon.

Legal Requirements & Business Transfers

We may disclose your information if required by law or in response to valid legal processes, government or law enforcement requests, or emergency situations involving threats to safety or security. If StylistAI is involved in a merger, acquisition, or asset sale, your information may be transferred; we will provide notice before your data becomes subject to a different privacy policy.

4. Data Retention

  • Active Accounts: we retain your account data, photos, and outfit history for as long as your account remains active. Uploaded photos are stored securely until you delete them or close your account.
  • Inactive Accounts: accounts inactive for 24 months may be anonymized or deleted. We will send email notifications before taking action on inactive accounts.
  • Legal & Compliance: transaction records are retained for 7 years to comply with tax and financial regulations. Audit logs for security incidents are retained for 2 years.

5. Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access & Portability (GDPR Article 15, CCPA §1798.100): request a copy of all personal data we hold about you, in a machine-readable format (JSON). Email support@stylistaillc.com with subject "Data Access Request".
  • Correction (GDPR Article 16, CCPA §1798.106): update or correct inaccurate personal information, or edit your account details directly in the app settings.
  • Deletion (GDPR Article 17, CCPA §1798.105): request permanent deletion of your account and all associated data, including photos, outfit history, and usage records. Email support@stylistaillc.com with subject "Data Deletion Request" or use the in-app data deletion feature. We will complete your request within 30 days and send confirmation. Some data may be retained for legal compliance (e.g., transaction records).
  • Opt-Out of Marketing (CCPA §1798.120): unsubscribe from promotional emails; all service-related communications will continue.
  • Do Not Sell (CCPA): we do NOT sell your personal information to third parties, and we do NOT share data for cross-context behavioral advertising.
  • Authorized Agent: you may designate an authorized agent to make privacy requests on your behalf; we require written proof of authorization.

6. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards

  • Encryption: all data is encrypted in transit using TLS 1.3 and at rest using AES-256.
  • Authentication: secure password hashing (bcrypt) and JWT token-based sessions.
  • Access Controls: role-based access control (RBAC) with principle of least privilege.
  • Rate Limiting: protection against brute-force attacks and API abuse.
  • PII Redaction: automatic removal of sensitive data from error logs.

Organizational Safeguards

We conduct regular security audits and vulnerability assessments, train employees on data protection best practices, maintain an incident response plan for data breaches, and rely on third-party security certifications (SOC 2 via Supabase).

Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours via email and report breaches to relevant authorities as required by law. Note: no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Children's Privacy

StylistAI is NOT intended for users under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@stylistaillc.com. We will delete such information within 72 hours.

8. International Data Transfers

  • Data Processing Locations: our servers are primarily located in the United States. Data may be processed in countries where our service providers operate.
  • EU Users (GDPR Compliance): we rely on Standard Contractual Clauses (SCCs) approved by the European Commission for data transfers. Supabase is GDPR-compliant and provides appropriate safeguards.
  • California Residents (CCPA): you have specific rights under the California Consumer Privacy Act (see Your Privacy Rights). We comply with the CCPA's requirements for businesses collecting California residents' data.

9. Cookies & Tracking Technologies

  • Essential Cookies: authentication cookies keep you logged in to your account, and session management stores temporary data during your session.
  • Analytics: we use anonymized analytics to understand app usage patterns. You cannot opt out of essential cookies, but you can clear them by logging out.
  • Third-Party Cookies: Amazon may place cookies when you click affiliate links (governed by Amazon's privacy policy). We do not use advertising or tracking cookies.

10. Third-Party Links

Our Service may contain links to third-party websites and services (e.g., Amazon, retailer websites). We are NOT responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

11. California Shine the Light Law

California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do NOT share your personal information with third parties for their direct marketing purposes.

12. Nevada Residents

Nevada residents have the right to opt out of the sale of their personal information. We do NOT sell personal information as defined under Nevada law. If you still wish to submit an opt-out request, email support@stylistaillc.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting a prominent notice in the app, sending an email to your registered email address, and updating the "Last Updated" date at the top of this policy. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: support@stylistaillc.com
  • Subject Line: "Privacy Policy Inquiry"
  • Response Time: within 48 business hours