Privacy Policy

Mystajl (“we”, “our”, “us”) operates the Mystajl mobile apps (iOS and Android) and the Mystajl website. We provide a virtual try-on service: you upload a photo of yourself and photos of garments, and we generate previews of how the garments look on you.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it.

Controller. Mystajl is operated by Weice IT AB. For any privacy questions, contact us at privacy@mystajl.com.

In short: we use your data to run the service you asked for. We do not sell your personal data. We keep your photos for as long as you keep them on the service, and you can delete them (or your entire account) at any time.

1. What we collect

Information you give us directly

• Account details — your email address and the name you sign in with, when you create an account or sign in (including via Sign in with Apple, Google, or Facebook).
• Reference photo — the photo of yourself you upload for virtual try-on.
• Garment content — photos of garments, and garment details you import from a listing link (for example from Vinted, Sellpy, or Tradera) or upload yourself.
• Collections — the collections and saved try-on results you create.
• Optional profile info — your display name and a profile/avatar photo.

Information collected automatically

• Usage and technical data — your device type, operating system, app version, network information, and basic usage events, used to operate, secure, and improve the service.
• Website analytics — when you visit our website, we may collect basic analytics such as your device type and pages visited. We use Vercel Insights on the website for aggregated, privacy-friendly usage statistics.

Information from third parties

When you sign in with Apple, Google, or Facebook, we receive the limited information that provider shares with us for authentication — typically your email address and public profile name. We use this only to create and secure your account.

2. Why we process your data (legal basis)

Under GDPR (Regulation (EU) 2016/679), we process your data on the following grounds:

Where we rely on consent (for example, optional analytics where required), you can withdraw it at any time without affecting the service.

3. How we use your data

We use your personal data to:

• Provide, operate, and maintain the virtual try-on service;
• Create and manage your account and let you sign in;
• Generate virtual try-on previews from your reference photo and garments;
• Store your collections and saved results;
• Provide customer support;
• Protect the security and integrity of the service;
• Comply with legal obligations;
• Improve the service through aggregated, non-identifying statistics.

We do not use your photos or try-on results for advertising or to train or improve third-party models, and we do not sell or rent your personal data to anyone.

4. What we don't do with your data

• No selling or renting — we never sell or rent your personal data.
• No advertising use — your photos, garments, and try-on results are not used for advertising or profiling.
• No public sharing — your reference photo and try-ons are private to your account.

5. Where data is stored and who we share it with

Your data is stored on secure servers we operate through our backend provider (Supabase). Your reference photo, garment images, and try-on results are stored so the service works across your devices.

We share personal data only with service providers that help us run the service, under contracts that require them to protect your data. These include:

• Cloud hosting and backend providers (e.g., Supabase) that store account data and media;
• Authentication providers (Apple, Google, Facebook) that process your sign-in;
• Analytics providers for website statistics.

We do not share your data with any other third parties without your consent, except where required by law or to protect the rights and safety of ourselves or others.

We may transfer data across borders to provide the service, and we take steps to ensure transfers comply with applicable law.

6. How long we keep your data

• We keep your data for as long as your account is active and as needed to provide the service to you.
• You can delete individual photos, garments, and collection items at any time.
• If you delete your account, we permanently delete (or anonymise) your personal data, including your reference photo, garments, collections, and try-on results, unless we are required by law to keep any of it for a longer period. See how to delete your data.

7. Your rights

Under GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you;
• Rectification — correct inaccurate data (you can also edit your profile and garment details in the app);
• Erasure — ask us to delete your personal data (you can delete items yourself, or delete your whole account in Profile);
• Restrict processing — ask us to limit how we process your data in certain circumstances;
• Data portability — receive your data in a structured, machine-readable format;
• Object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at privacy@mystajl.com. We may ask you to verify your identity before acting on your request, and we respond within the timeframes required by law (usually within one month).

You also have the right to lodge a complaint with your local data protection authority if you believe we are not handling your data lawfully.

8. Children's privacy

The virtual try-on service is intended for adults (18+). We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Security

We take reasonable technical and organisational measures to protect your personal data, including encryption of data in transit, secure storage in our backend provider's systems, and limited access to your data by our staff. You are responsible for keeping your sign-in credentials and device secure. No method of transmission is 100% secure, but we aim to use commercially acceptable means to protect your data.

10. Cookies and website tracking

The Mystajl website uses minimal tracking. We use Vercel Insights, which collects aggregated, privacy-friendly usage statistics (such as device type and page views) without identifying individual visitors. We do not use advertising cookies.

The mobile apps themselves do not use cookies.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our service or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you within the service. We encourage you to review this page periodically.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us at:

Mystajl
Email: privacy@mystajl.com