Privacy policy
What Styloo collects when you use the app and this website, why, who else handles it, how long we keep it, and how to see, take or delete it.
- We collect what the app needs to work: your account, what you tell us about your style, and what you swipe, save and compose.
- Usage analytics run only if you say yes, and only if you are 16 or over. You can change your answer in Settings at any time.
- We do not sell your data, show you ads, or track you across other companies' apps and websites.
- You can download your data and delete your account in the app, under Settings.
1. Who we are
The controller of your personal data is Piotr Rybiec, Warsaw, Poland ("Styloo", "we", "us").
For anything about your data, write to support@stylooapp.com. We answer within one month, as the GDPR requires. We have not appointed a data protection officer, as the law does not require one for a service of our size and kind.
This policy covers the Styloo iPhone app and the website stylooapp.com, including its waitlist.
2. What we collect and why
The legal bases below are those of the EU General Data Protection Regulation (GDPR) Art. 6(1): contract (b) — we need it to give you the service you signed up for; consent (a) — only if you agree, and you can withdraw it; legitimate interest (f) — our interest in keeping Styloo secure and working, weighed against yours, which you can object to.
Your account
| What | Why | Basis |
|---|---|---|
| An account ID we create (a random identifier), whether the account is a guest account, and when it was made and last used | To give you an account, keep your things in it and sign you in | Contract |
| Your e-mail address, if you sign up or sign in with e-mail, Apple or Google. With Apple you may choose to share a private relay address instead | To sign you in (we send a one-time code to e-mail sign-ins) and to contact you about your account | Contract |
| Your name, if Sign in with Apple or Google shares it, or if you type it into your profile | To show it in your profile | Contract |
| The username you pick when you create an account | To identify your account in the app | Contract |
You can also use Styloo as a guest, without an e-mail address. A guest account gets the same random ID; if you later sign in with Apple, Google or e-mail, the account and everything in it carries over.
What you tell us about your style
| What | Why | Basis |
|---|---|---|
| Gender, age range (for example 25–34 — your exact age stays on your phone), styles, favourite brands, colour palette, fit, clothing sizes, language, region, the categories you hide, whether the feed is personalised, and an optional phone number in your profile | To choose what Discover shows you, in your sizes, and to set the app up the way you asked | Contract |
What you do in the app
| What | Why | Basis |
|---|---|---|
| Your swipes (pass, like, love), how long you looked at a card, whether you opened its details, how many of its photos you viewed and whether you opened the shop; the products we showed you and in which order | To build your feed, learn your taste and not show you the same things again | Contract |
| Your loved products, closet folders and looks (their names, captions and the pieces in them) | To keep them in your account and on every phone you sign in on | Contract |
| The same activity, without your name or e-mail | To improve how Styloo recommends clothes for everyone | Legitimate interest |
Choosing what to show you from your swipes is profiling in the GDPR's sense. It decides only which clothes you see next; it has no legal or similarly significant effect on you, and you can turn it off with Settings → Personalised feed or clear it with Settings → Clear swipe history.
Problem reports
| What | Why | Basis |
|---|---|---|
| When you report a problem: what kind of problem it is, the words you type, the product and screen it is about, your account ID, and a snapshot of the app and phone (app version, iPhone model, iOS version, language, region, time zone, appearance and accessibility settings, Low Power Mode, connection type) | To find and fix the problem | Legitimate interest |
| If you choose to add photos or videos, they go in an e-mail to support@stylooapp.com that you see in full and send yourself, together with your e-mail address | To answer you and see the problem | Legitimate interest |
Your profile photo
If you add a profile photo, you pick it with the iOS photo picker, so Styloo sees only the photo you choose, not the rest of your library. It is stored on your phone and is never uploaded to Styloo.
Security and technical data
When the app or the website talks to our servers, your IP address and the technical details of the request (time, address requested, response) pass through our hosting providers and are briefly kept in their logs. We use them to keep the service running, limit abuse (for example too many sign-in attempts) and investigate faults. Basis: legitimate interest.
3. Usage analytics (only with your consent)
Styloo records how you use the app only if you agree. We ask once, with two equally weighted answers, and only people aged 16 or over. Before you answer, if you say no, or if you are under 16 or have not told us your age, nothing is recorded or stored on your phone for analytics.
If you agree, we record:
- How you use the main screens: Discover (cards seen, passed, liked and loved, time per card, rewinds, decks, the swipe limit), product details, the shop links you open, the Closet, Compose and My Looks, problem reports (where you opened one, its kind, whether you sent it — not its words), and time on each screen.
- How you get through setting up the app: the tour steps you reach, how long each takes and the step you leave from. Your gender, age, styles and brands are not part of it.
- What you search for: the text you type into search, up to 100 characters, with anything that looks like an e-mail address or phone number removed on your phone first; the filters you choose and the number of results.
- App and device context: app opens and session length, app version, iPhone model, iOS version, language, time zone, screen size, Wi-Fi or mobile data, guest or registered account.
- Errors and speed: error messages the app showed you and how long Discover took to show its first card.
- Identifiers: your Styloo account ID and a random install ID created by our analytics provider. We do not use Apple's advertising identifier (IDFA).
- Your answer: when you said yes and the version of the wording you saw.
We never send to analytics your e-mail, name or phone number, the text or attachments of a problem report, your profile photo, or any recording of your screen, and we do not use your IP address to work out where you are.
Why: to understand how people use Styloo and improve it. Not for advertising. Basis: your consent (GDPR Art. 6(1)(a)), and for storing and reading information on your phone, Art. 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej). Provider: PostHog, in its EU region (Frankfurt, Germany). Kept: 1 year, then deleted automatically.
If you agree during setup, before you have an account, what is recorded is linked only to that random install ID until you create, sign in to or browse with an account; from then on it is linked to that account.
Changing your mind: Settings → Privacy & data → Share usage data. Turning it off stops recording at once; turning it on again records only from that moment. Withdrawing consent does not affect what was recorded before.
Deleting it: deleting your account also asks PostHog to delete the usage data linked to it; data a phone sends while offline may arrive after that and is then kept until it expires. Usage data is not part of Download my data; to get a copy of it or have it deleted, write to support@stylooapp.com from your account's e-mail address, or tell us your account ID. Data linked only to an install ID cannot be connected to you, so it cannot be found on request; it expires after 1 year.
4. The website and waitlist
stylooapp.com sets no advertising or analytics cookies and runs no tracking scripts.
- Waitlist. If you join it, we store your e-mail address, where you signed up from, the country derived from your IP address, and — as proof of your consent — your IP address, the time and the version of the consent wording. We send a confirmation e-mail first (double opt-in) and then a single reminder if you have not confirmed. We use your address to tell you about Styloo's launch and progress. Basis: consent. Unconfirmed sign-ups are deleted after 30 days. You can leave at any time with the unsubscribe link in every e-mail.
- Bot protection. The sign-up form uses Cloudflare Turnstile, which checks your browser for signs of automation. Basis: legitimate interest in keeping the list free of spam.
- Link clicks in our e-mails are counted per e-mail and per link only, never per person.
5. What is stored on your phone
The app stores on your phone what it needs to work: your sign-in session (in the iOS Keychain), your settings, your profile photo, drafts and a cache of what you have seen. This is strictly necessary for the service you asked for, so it needs no consent. Analytics storage happens only after you agree (section 3). Deleting the app removes all of it.
Reminders are local notifications scheduled by the app on your phone, only if you allow notifications. We do not use push notification tokens.
6. Links to shops
Styloo shows clothes from online shops. When you tap through to a shop, you leave Styloo, and that shop's own privacy policy applies. The link tells the shop the visit came from Styloo (utm_source=styloo). We do not receive what you buy or any payment details.
7. Who handles your data
We do not sell your personal data or share it for advertising. We use these providers, who process it on our behalf under data processing agreements and only on our instructions:
| Provider | What for | Where the data is |
|---|---|---|
| Supabase Inc. | Sign-in and the database that holds your account | EU (Frankfurt, Germany) |
| Fly.io Inc. | Running Styloo's API servers | EU (Frankfurt, Germany) |
| PostHog Inc. | Usage analytics, only with your consent | EU (Frankfurt, Germany) |
| Cloudflare Inc. | Hosting stylooapp.com, bot protection on the waitlist, sending e-mails (sign-in codes and the waitlist) | Global network |
If you choose Sign in with Apple or Sign in with Google, Apple or Google confirms who you are and shares your e-mail address (and your name, if you allow it) with us. They act under their own privacy policies.
We may also disclose data when the law requires it, for example to a court or public authority with a lawful request.
8. Transfers outside the EEA
We keep your data in the European Economic Area wherever our providers allow it. Some of them are US companies, and some processing (for example their support or security teams, or Cloudflare's global network) may involve the United States. Such transfers are protected by the EU–US Data Privacy Framework where the provider is certified, and otherwise by the European Commission's Standard Contractual Clauses (GDPR Art. 46). You can ask us for a copy of the safeguards at support@stylooapp.com.
9. How long we keep it
| Data | Kept until |
|---|---|
| Your account, profile, swipes, loved products, folders and looks | You delete your account. Guest accounts unused for 30 days are deleted automatically. |
| Swipe history | You clear it in Settings, or delete your account |
| Problem reports | 24 months from when you sent it. When you delete your account, your account ID is removed from them. |
| Usage analytics | 1 year from when it was recorded |
| Server logs | A short period set by each hosting provider, typically up to 30 days |
| Waitlist | Unconfirmed: 30 days. Confirmed: until you unsubscribe, or 12 months after launch at most. |
When you delete your account we keep one record without any personal data: when the account was created and deleted, whether it was a guest, how many products it swiped, and the reason for leaving if you chose one. We use it to understand why people leave.
10. Your rights
Under the GDPR you have the right to:
- access your data and get a copy — in the app: Settings → Download my data;
- take it with you (portability) — the same download, in a machine-readable format (JSON);
- correct it — in your profile in the app, or by writing to us;
- delete it — in the app: Settings → Delete account, which deletes your account and data from our systems at once. A guest account is deleted automatically after 30 days without use, or sooner if you write to us with its account ID;
- restrict how we use it, and object to uses based on legitimate interest;
- withdraw consent at any time, without affecting what happened before — for analytics in Settings, for the waitlist with the unsubscribe link;
- complain to the supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority where you live or work.
For anything not available in the app, write to support@stylooapp.com from the address on your account, so we can confirm it is you.
Giving us your data is voluntary, but without an account and the profile questions Styloo cannot work for you. You can always use it as a guest.
11. Age
Styloo is for people aged 13 and over. We do not knowingly collect data from children under 13; if you believe a child has given us data, write to us and we will delete it. People under 16 are never asked for analytics consent and are never measured.
12. Security
All traffic between the app, the website and our servers is encrypted (HTTPS/TLS). Access to your account data requires your sign-in token, our databases are not publicly reachable, and only the people who run Styloo can access them, when they need to. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the supervisory authority as the law requires.
13. Changes to this policy
When we change this policy we publish the new version here with a new date. If a change matters to how we use your data, we tell you in the app before it takes effect; where the change needs your consent, we ask for it again.