Glowdrobe AI

Privacy Policy — Glowdrobe AI

Last updated: 2026-10-23
Effective date: 2026-10-23

This Privacy Policy explains how personal data is collected, used, shared and protected when you use the Glowdrobe AI mobile application for iOS (the “App”). The App is operated by Barış Seçkin, an individual developer (sole proprietor) based in the Republic of Türkiye (“we”, “us”, “our”).

This Policy is intended to meet the requirements of:

Türkiye: Personal Data Protection Law No. 6698 (“KVKK”). This Policy also serves as our information notice (aydınlatma metni) under Article 10 of the KVKK.
European Economic Area (EEA): Regulation (EU) 2016/679 (General Data Protection Regulation — “GDPR”).
California, USA: the California Consumer Privacy Act (“CCPA”), briefly addressed in Section 11.3.
Apple App Store: the App Store Review Guidelines and privacy disclosure requirements.

In short: we collect only what we need to run the App. We do not use advertising SDKs, we do not track you across other apps or websites, and we do not sell your personal data.

1. Data Controller

The data controller responsible for your personal data is:

Barış Seçkin
15 Temmuz Mahallesi, Üniversite Bulvarı No:320, 27560 Şehitkamil / Gaziantep, Türkiye
Email: barisseckin0@gmail.com

You can contact us at this address for any privacy request, including requests under the KVKK, GDPR and CCPA.

2. Information We Collect

2.1 Account data

Email address, name and username.
If you sign in with Google or Apple, the account identifier provided by that service and, if you choose to share them, your name and email. If you use Sign in with Apple and choose to hide your email, Apple provides us with a private relay email address.
If you register with email, your password is stored only in hashed form.

2.2 Profile data

Profile photo, bio and any other optional profile details you add.

2.3 User content

Photos of wardrobe items and their attributes (e.g., category, color, season).
Outfits and combinations you create.
Posts, comments, stories, polls and chat messages (including voice messages, if you use that feature).

2.4 Photos for virtual try-on and AI features

Selfies or body photos you upload to use the virtual try-on feature, and the images generated from them.
See Section 5 for how these photos are processed.

2.5 Approximate location

Approximate (city-level) location, used to provide weather-based outfit suggestions.
Location is accessed only while you are using the App and only if you grant permission. It is not used for tracking or advertising.

2.6 Device push token

A device token from Google Firebase Cloud Messaging, used to send you push notifications (e.g., new messages or comments). You can turn off notifications in your device settings.

2.7 Purchase records

Apple transaction identifiers and the status of your subscription and in-app purchases.
Payments are processed by Apple. We never see or store your card or payment details.

2.8 Technical logs

Technical and diagnostic data such as device type, operating system, app version, error reports and server logs (which may include IP address and request timestamps), used to keep the App secure and working.

2.9 Device permissions

The App asks for your permission before accessing:

Camera: to take photos of clothing, posts, stories and selfies for virtual try-on.
Photo Library: to choose photos to upload and to save images (e.g., try-on results) to your device.
Microphone: to record voice messages in chat.
Location (while using the App): for weather-based outfit suggestions.
Notifications: to send push notifications.

You can withdraw these permissions at any time in your device settings. Some features may not work without them.

2.10 What we do not do

We do not use advertising SDKs or show ads based on your data.
We do not track you across other companies’ apps or websites.
We do not sell your personal data.

3. How We Use Your Information

We use your information to:

Create and manage your account and sign you in (including with Google and Apple).
Provide the App’s features: digital wardrobe, outfit creation, AI stylist, virtual try-on, weather-based suggestions, shopping/product search, social features (posts, comments, stories, polls) and messaging.
Process subscriptions and in-app purchases and keep track of your AI credits and upload limits.
Send push notifications and transactional emails (e.g., account verification, password reset, important account notices).
Moderate content, handle reports and keep the community safe (see Section 6).
Maintain security, prevent fraud and abuse, and fix errors.
Comply with legal obligations and respond to lawful requests from authorities.
Enforce our Terms of Use.

4. Legal Bases for Processing

We process your personal data under the following legal bases (KVKK Articles 5 and 6; GDPR Article 6 and, where applicable, Article 9):

Purpose	Legal basis
Account, core App features, in-app purchases	Necessary for the performance of a contract with you (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b))
Processing your photos with AI features (AI stylist, virtual try-on)	Your explicit consent, given in the App before first use (KVKK Art. 5(1) and 6; GDPR Art. 6(1)(a) and, where applicable, Art. 9(2)(a))
Approximate location for weather suggestions	Your consent via the device permission; performance of the feature you request
Push notifications	Your consent via the device permission
Content moderation, security, fraud prevention, technical logs	Our legitimate interest in operating a safe and secure service (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f))
Purchase and tax records, responding to authorities	Compliance with legal obligations (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c))
Transfers to service providers abroad	Appropriate safeguards and, where required, your explicit consent (see Section 8)

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before it.

5. AI Features and Your Photos

Consent first: before you use an AI feature that processes your photos for the first time, the App asks for your explicit consent.
What is sent: to produce the result you request, the relevant photos and wardrobe data are sent to our AI providers:
- OpenAI — AI stylist text and image generation, and content moderation.
- NanoBanana — virtual try-on image generation.
No model training: data is sent only to produce the result you requested. Under OpenAI’s API terms, data submitted through the API is not used to train OpenAI’s models.
Withdrawing consent: you can withdraw your consent at any time by contacting us at barisseckin0@gmail.com, or by deleting the relevant content or your account. After withdrawal, AI features that process your photos will no longer be available to you.

6. Content Moderation and Safety

Text and images posted publicly or sent in chat are automatically screened by an AI moderation service (OpenAI) to detect objectionable content.
You can report posts, comments, stories, profiles and messages, and you can block other users.
We review reports within 24 hours, remove content that violates our Terms of Use and eject the users who posted it.
To handle a report, we may review the reported content and related account information.

We share personal data only with service providers that help us run the App, and only to the extent needed for the purposes below. They process data on our behalf under contractual obligations.

Provider	Purpose	Data involved
Amazon Web Services (S3, CloudFront, hosting)	Server hosting, file storage and delivery	Data stored by the App
OpenAI	AI stylist text and image generation; content moderation	Photos, wardrobe data, requests, and text and images submitted for moderation
NanoBanana	Virtual try-on image generation	Selfies/body photos and clothing images
Google Firebase	Push notifications	Device push token, notification content
Google and Apple	Sign-in	Sign-in identifiers, name and email (as you choose to share)
Apple	In-app purchases and subscriptions	Purchase and subscription records
MailerSend	Transactional email	Email address, name, email content
Open-Meteo	Weather data	Approximate coordinates only
SerpAPI	Shopping/product search	Search queries only (no personal data)

We may also disclose personal data:

When required by law, court order or a lawful request from a public authority, or to protect the rights, safety or property of our users, the public or ourselves.
In a business transfer (e.g., if the App is transferred to another operator), subject to this Policy.
With your consent.

We do not sell your personal data and do not share it for advertising purposes.

8. International Transfers

Our servers and several of our service providers (e.g., AWS, OpenAI, NanoBanana, Google, Apple, MailerSend) are located, or process data, outside Türkiye and the EEA, including in the United States.

Under the KVKK (Article 9): we transfer personal data abroad using the appropriate safeguards provided by law (such as standard contracts notified to the Personal Data Protection Authority) and, where required, on the basis of your explicit consent, which we ask for in the App.
Under the GDPR: transfers from the EEA rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or adequacy decisions (e.g., the EU–US Data Privacy Framework, where the provider is certified).

You can ask for more information about these safeguards at barisseckin0@gmail.com.

9. Data Retention

Account data, profile and user content: kept for as long as your account is active.
Technical logs: kept for approximately 90 days.
After account deletion: deleted as described in Section 10.
Legal retention: some records (e.g., purchase and tax records) may be kept longer where the law requires it, and only for that purpose.

10. Account Deletion

You can delete your account in the App at Settings → Delete Account.
After you request deletion, there is a 14-day grace period. After this period, your account and personal data are permanently deleted, except where retention is legally required (e.g., purchase and tax records).
If you signed in with Apple, your Sign in with Apple tokens are revoked when your account is deleted.
Deleting your account does not cancel an active App Store subscription. Please cancel it in your App Store account settings.

11. Your Rights

11.1 Rights under the KVKK (Türkiye)

Under Article 11 of the KVKK, you have the right to:

learn whether your personal data is processed and, if so, request information about it;
learn the purpose of processing and whether your data is used in line with that purpose;
know the third parties in Türkiye or abroad to whom your data is transferred;
request correction of incomplete or inaccurate data;
request deletion or destruction of your data under the conditions of Article 7 of the KVKK;
request that third parties to whom your data was transferred be notified of such correction or deletion;
object to a result against you arising exclusively from automated analysis of your data;
claim compensation for damage caused by unlawful processing.

You can send your request to barisseckin0@gmail.com or in writing to 15 Temmuz Mahallesi, Üniversite Bulvarı No:320, 27560 Şehitkamil / Gaziantep, Türkiye. We will respond free of charge within 30 days at the latest. If your request is rejected or you find our response insufficient, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

If you are in the EEA, you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. You also have the right to lodge a complaint with the data protection authority in your country. We respond within one month, as required by the GDPR.

11.3 California residents (CCPA)

California residents have the right to know, access, correct and delete their personal information, and not to be discriminated against for exercising these rights. We do not sell or “share” personal information for cross-context behavioral advertising.

11.4 How to exercise your rights

Contact us at barisseckin0@gmail.com. We may need to verify your identity before responding. You can also delete your account directly in the App (see Section 10).

12. Security

We use appropriate technical and organizational measures to protect your personal data, including encryption in transit, access controls and storage with established cloud providers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

13. Children

The App is not directed to children under 13 (or under 16 in the EEA, where applicable). We do not knowingly collect personal data from children under these ages. If you believe a child has provided us with personal data, contact us at barisseckin0@gmail.com and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes in the App and/or by email and update the “Last updated” date above. Where a change requires your consent, we will ask for it.

15. Contact Us

Email: barisseckin0@gmail.com
Postal address: Barış Seçkin, 15 Temmuz Mahallesi, Üniversite Bulvarı No:320, 27560 Şehitkamil / Gaziantep, Türkiye