This policy explains how your personal data is processed when you use the Sestina mobile app (the “App”). The KVKK privacy notice is on the separate Privacy Notice page; to exercise your rights, see the Requests page.
The data controller is Hasan Can Demircan, the individual developer of the App. Contact: support@sestinaapp.com.
The App contains no analytics, advertising or tracking SDKs. The data below is processed only to make the App work.
| Category | Data | Required? |
|---|---|---|
| Account | Email address, name. For email sign-up, a password (stored by Supabase Auth, not in our own tables). With Sign in with Apple or Google, the identity token issued by that provider to verify your account; your name if Apple shares it on first sign-in; with Google, the name and profile picture link that Google shares. The time you confirmed you are over 18. | Yes (for an account) |
| Style profile | The styles and weights you pick during onboarding (e.g. 60% Minimalist, 40% Old Money). | Part of onboarding |
| Clothing photos | The image and a small thumbnail of each item you add. If you gave AI permission, the background-removed image is stored; the original photo you take is only processed for background removal. If you didn’t, the photo is stored as it is. | For the wardrobe feature |
| Wardrobe details | Category, subcategory, colors, pattern, season, fabric, item name, fit, neckline, sleeve length, details. Extracted from the photo if you gave AI permission; otherwise you choose them. | For the wardrobe feature |
| Profile photo | A photo you pick from your gallery (ideally full-length) for virtual try-on. | No. Your explicit consent is asked before uploading (section 4). |
| Physical profile | Height, weight, age, body type, skin tone, hair color, hair length, hair type. Only the fields you choose are saved. | No. It can be skipped entirely; your explicit consent is asked before saving (section 4). |
| Virtual try-on | The AI mannequin image generated from your physical profile; virtual try-on result images. | Only if you use virtual try-on |
| Outfits and calendar | Outfits you mark as worn and the date, outfits you plan for a specific day, outfit match score, your favorite outfits. | As you use them |
| “Match?” scans | A product photo you take or pick on the Scan screen. Works only if you gave AI permission; analyzed, not stored on our servers. | As you use it |
| Location | Approximate location, only while the App is open and only if you allow it. Coordinates are rounded on your device to about 1 km and sent directly from your device to OpenWeather; never sent to our servers. Without permission, weather is shown for Istanbul. | No |
| Consent and permission records | Each consent and permission choice you make: its type, given/not given, the version of the text you accepted, and the time. Records are only added; they cannot be changed afterwards. | Yes (if you give consent or permission) |
| Subscription | Product, store, period type, expiry date, auto-renewal. | If you buy Premium |
| Operational | Virtual try-on quota records (time of each try-on, number of calls used, FASHN job IDs and result links), daily usage counters (calls per day for AI analysis, background removal, “Match?” scans and data downloads), and your user ID in server logs for debugging; sign-in, sign-out and session refresh events (including IP address). Operations records about service outages contain no user ID. For the account deletion record, see section 9. | Yes (to prevent abuse) |
| On your device | Session data, language preference, wardrobe view preference. Stored only on your device. | — |
All photos are stored in private storage. Only you can view them, through signed links valid for 1 hour. If you share a virtual try-on result, the shared link stops working after 1 hour; if the result could not be saved to our storage, the shared link is FASHN’s own link; according to FASHN, these images are deleted after three days. Image links sent to FASHN are valid for 10 minutes.
| Feature | Provider | Data sent | Permission needed |
|---|---|---|---|
| Adding clothes: background removal | Poof (Germany) | Clothing photo | AI permission |
| Adding clothes: recognizing category, color, pattern, season | Anthropic (USA) | Background-removed clothing photo | AI permission |
| “Match?” scans | Poof, Anthropic | Product photo | AI permission |
| Style DNA name | Anthropic | The style names and weights you picked | AI permission |
| Virtual try-on | FASHN | Profile photo or AI mannequin, clothing images; physical profile description for the mannequin | Two separate explicit consents (section 4) |
Before your first clothing item and your first “Match?” scan, the App asks for AI permission. Without it, our server does not pass the photo to Poof or Anthropic. You can use the App without giving permission: clothing photos are saved as they are and you choose the category, color and season; the Style DNA name is set locally; “Match?” scans stay off. You can change your choice at any time in Profile → Privacy & permissions; withdrawing permission does not delete your existing clothes. Full permission text: Consent and Permission Texts.
Nature of the AI permission: The AI permission is an in-app preference; it is not a processing condition under the KVKK. The legal basis for this processing is KVKK Art. 5/2-c (establishing and performing a contract). The permission leaves it to you whether this processing takes place.
Model training: According to the providers’ statements, your photos and other data are not used to train their AI models: Anthropic states that it does not use data received through its commercial API for model training by default; Poof states that it does not use images for training; FASHN states that it does not use customer content for training unless expressly agreed in a separate agreement (sources in section 6).
Virtual try-on relies on two separate explicit consents: your photo (your profile photo being sent to FASHN) and your physical details (being sent to FASHN to generate an AI mannequin). Before you upload a profile photo or save your physical profile for the first time, or start a virtual try-on without the consent it needs, the App shows the notice; consent cannot be given before you tap “I've read this”. The consents are independent; you can agree to just one. If you don’t consent, the related data is not saved and you can keep using the rest of the App. Our server rejects virtual try-on requests made without the required consent.
May be special category data: Depending on their content and how they are used, your profile photo and virtual try-on images may count as special category personal data under KVKK Art. 6 (e.g. clothing and attire); the skin tone in your physical profile may also count as special category data in terms of race or ethnic origin. For this reason we base virtual try-on on your explicit consent and apply additional security measures to this data: private storage; signed links valid for 1 hour that only you can create; sending to FASHN only via links valid for 10 minutes; rejecting requests without consent on the server; and deleting the related images when you withdraw consent.
You can withdraw each consent separately in Profile → Privacy & permissions:
Users who saved this data before the consents were split are asked once again for the consents needed; data tied to a consent that isn’t given is deleted. Full consent texts and versions: Consent Texts.
| Purpose | Data | KVKK |
|---|---|---|
| Account, digital wardrobe, outfit suggestions, calendar, favorites, weather, subscription | Account, style profile, clothing photos and details, outfits, location, subscription | Art. 5/2-c |
| AI recognition of clothing and products, Style DNA name | Clothing and product photos, style names | Art. 5/2-c (the AI permission is an additional in-app preference) |
| Virtual try-on (with photo) | Profile photo, result images | Explicit consent (Art. 5/1; Art. 6 to the extent it is special category data) |
| Virtual try-on (with AI mannequin) | Physical profile, AI mannequin, result images | Explicit consent (Art. 5/1; Art. 6 to the extent it is special category data) |
| Keeping consent and permission records; account deletion record | Consent and permission records; deletion record | Art. 5/2-ç |
| Security, preventing misuse, debugging | Operational data, server logs, sign-in records (including IP address) | Art. 5/2-f |
| Database backups | Data in the database (excluding photos) | Art. 5/2-f |
| Responding to support and requests, verifying the applicant’s identity | Email correspondence | Art. 5/2-ç, 5/2-c |
Detailed table (including collection method): Privacy Notice. We do not use your data for advertising, marketing profiling, or sale.
The service providers below receive only the data needed for the stated function. Calls to AI and image services (Anthropic, FASHN, Poof) go through our own server; API keys are never on your device.
| Service | Purpose | Data sent | Location and retention | Source |
|---|---|---|---|---|
| Supabase | Hosting: database, authentication, file storage, server functions | All data this policy describes as stored on our servers | Frankfurt, Germany (EU). Server logs 1 day; no automatic backups (section 9). | supabase.com/pricing (log and backup periods) |
| Anthropic (Claude) | Clothing and product recognition; Style DNA name | Background-removed clothing or product photo; the style names and weights you picked. No name, email, physical profile or profile photo is sent. | USA. According to the provider, API inputs and outputs are deleted within 30 days (except for usage policy violations or legal requirements) and commercial API data is not used for model training by default. | privacy.claude.com |
| FASHN (FASHN LTD) | Virtual try-on and AI mannequin generation | Your profile photo or AI mannequin image and the clothing images in the outfit, via signed links valid for 10 minutes. If you have no profile photo, a mannequin description made from the physical profile fields you chose. No name or email is sent. | United Kingdom; sub-processors in the USA, Singapore, Malaysia, Indonesia, the EU and global cloud / content delivery networks. According to the provider, generated images are deleted after three days, submitted image links are kept in the request record, and customer content is not used for model training unless expressly agreed in a separate agreement. Our links expire after 10 minutes. | docs.fashn.ai, sub-processors |
| Poof (Dumpling Software UG) | Background removal | Clothing or product photo (downscaled JPEG) | Berlin, Germany. According to the provider, images are processed in memory, deleted immediately after the result is returned and not used for model training. | poof.bg/privacy |
| OpenWeather (OpenWeather Ltd) | Weather | Rounded latitude/longitude (if allowed) or “Istanbul”. The request goes directly from your device. | London, United Kingdom. According to the provider, IP address, user agent and request parameters are not collected or stored for API requests. | openweather.co.uk |
| RevenueCat, Inc. | Subscription management | Our account ID (not your email or name) and the purchase information reported by the store | USA. According to the provider, it processes app users’ data on our behalf, as a data processor. When you delete your account, we ask RevenueCat to delete your subscriber record. | revenuecat.com/privacy |
| Expo (650 Industries, Inc.) | Downloading app updates | Your device’s operating system and a random ID for the app installation (not derived from hardware or account identifiers) | USA | expo.dev/privacy, docs.expo.dev |
| Apple / Google | Sign in with Apple / Sign in with Google; store purchases | You interact with the provider directly during sign-in; we receive the identity token, your email and (if shared) your name, and with Google also your profile picture link. On account deletion the Apple token is revoked and Google access is withdrawn. | The provider’s own policy applies. | — |
| Google (Google LLC) — Google Drive | Storing database backups | Weekly database backup encrypted with AES-256 (photos are not backed up) | USA. In the data controller’s personal Google Drive account; backups are kept for at most 30 days. | policies.google.com |
| Cloudflare, Inc. | Forwarding emails sent to support@sestinaapp.com | Emails you send us (your address and the content) | USA | cloudflare.com/privacypolicy |
| Google (Google LLC) — Gmail | Receiving and storing support and request emails | Emails you send us and our replies | USA. Kept for 2 years from the closing of the request. | policies.google.com |
If you choose to share an outfit, style card or virtual try-on result, sharing happens through your device’s share sheet to the app you pick.
Your personal data is transferred outside Turkey: to Germany (Supabase, Poof), the United Kingdom (FASHN, OpenWeather), the USA (Anthropic, RevenueCat, Expo, Cloudflare; Google — database backups and support emails), and through FASHN’s sub-processors to the USA, Singapore, Malaysia, Indonesia and the EU. Which data is transferred for which purpose: Privacy Notice, Transfers abroad.
Paid subscriptions are purchased through the App Store or Google Play. Apple or Google processes the payment; we never see your card details. We receive and store your subscription status through RevenueCat (product, store, period type, expiry date, auto-renewal). Plan limits are set out in the Terms of Use. Deleting your account does not cancel your subscription; cancel it in your App Store or Google Play subscription settings.
| Data | Period |
|---|---|
| Account, style profile, wardrobe, outfits, favorites, subscription status, virtual try-on quota records | For as long as your account exists; deleted immediately when you delete your account. Database records may remain in backups for up to 30 days. |
| Individually deleted clothing items | The record, its images and any try-on images containing that item are deleted immediately |
| Profile photo | Until you remove it, withdraw photo consent or delete your account |
| Physical profile and AI mannequin | Until you withdraw physical details consent or delete your account |
| Virtual try-on images | Until the related item, photo or consent is deleted, or you delete your account |
| Consent and permission records | For as long as your account exists; deleted when you delete your account |
| Daily usage counters | 13 months |
| Operations records (no user ID) | 12 months |
| Account deletion record | Limited to what is needed to show that the deletion took place: the time of deletion, the channel (App, email, under-18 declaration), the types of data deleted, and the outcome of the RevenueCat / Apple steps; and an irreversible digest of the user ID, so that a deleted account can be deleted again if a backup is restored. Kept for at least 3 years, then deleted. |
| Server logs | 1 day |
| Sign-in and authentication records (including IP address) | 1 day in server logs; at most 90 days in authentication audit records. They may remain until this period ends even after you delete your account. |
| Backups | No automatic backups are taken. The database is backed up manually once a week; backups are encrypted with AES-256 and kept in the data controller’s personal Google Drive account (Google LLC, USA) for at most 30 days. Photos are not backed up. |
| “Match?” photos, original photos of clothes added with AI permission, location | Not stored on our servers |
| Support and request correspondence | 2 years from the closing of the request |
| At third parties | The periods in section 6 |
Your rights under KVKK Art. 11 are listed in the Privacy Notice. In the App you can do the following yourself:
For other requests: Requests. We respond within 30 days at the latest, free of charge.
If the EU General Data Protection Regulation (GDPR) or the UK GDPR applies to you:
Sestina is for users aged 18 and over. Whichever way you sign in (email, Apple, Google), you are asked to confirm that you are over 18 before using the App. If you indicate that you are under 18, deletion of your account and all your data is started. If we otherwise learn that we are processing data of someone under 18, we will delete the account and its data; you can report this to support@sestinaapp.com.
Connections between the App, our servers and service providers are encrypted (HTTPS). The database and file storage enforce row-level access rules, so each user can only access their own records and files. Photos are kept in private storage, opened only through time-limited signed links and not included in backups. Database backups are encrypted with AES-256. The API keys of the AI and image services (Anthropic, FASHN, Poof) are kept on the server only. Quota counters and consent records cannot be changed from the App; AI and virtual try-on requests are rejected on the server if the required permission or consent is missing. No system is completely secure; if a data breach occurs, we will notify you and the relevant authority as required by law.
We may update this policy. The current version is always on this page and the date at the top will change. We will announce significant changes in the App or by email. Each consent record stores the version of the text you accepted; if the virtual try-on notice changes, you are asked to read the current text again before giving a new consent.
Hasan Can Demircan — support@sestinaapp.com