Privacy Policy

Last updated: September 10, 2026

Aira Style ("Aira", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Aira Style mobile application.

Companion document: By using Aira you also agree to our Terms of Service.

1. Eligibility

Aira is for users 18 years of age or older. By creating an account or using the app, you confirm that you are at least 18. We do not knowingly collect personal information from anyone under 18. If you believe we have, please contact privacy@aira.style and we will delete it.

2. Information We Collect

Account Information: When you sign in, we receive identifying information from your sign-in provider:

• Sign in with Google: name, email address, and profile photo. We do not access your Google password.
• Sign in with Apple: name (only if you choose to share it), email (your real address or Apple's private email relay address — your choice at sign-in), and an Apple-issued user identifier. We do not access your Apple ID password. If you use Apple's Hide My Email relay, we receive a relay address (e.g. random@privaterelay.appleid.com) instead of your real email — messages we send to that address are forwarded to you by Apple.

Profile Information: At setup you give your gender and your city, and — when you have not given a full-length photo — your height, weight and closest body shape, so Aira can pick cuts that work on you. Age and style preferences are not asked at setup: you can set them later in Settings, and until you do, styling assumes an adult of 25. All of it is used solely to personalize your outfit recommendations.

Full-length photo (optional, opt-in storage): Used so Aira can show today's outfit on your own body. After analysis you choose whether we keep it. If you opt in, it is stored privately in your account so every outfit can be rendered on you without asking again. If you opt out, it is deleted from our servers immediately after analysis. You can delete a stored photo at any time via Profile → Settings → Account → "Delete body scan photo".

Selfie (optional, separate opt-in): Used to read your colouring and to build a picture from your face when you have not given a full-length photo. A facial image is biometric data, so we ask for it separately and never bundle its consent with the photo above. Withdraw consent from your Passport's photo hub and the stored file is deleted, not merely left unused.

Garment photos: Photos of an item you ask Aira to judge, or of a look you want adapted, are analysed in seconds and then discarded. Only the resulting text — the verdict, or the adapted look — is kept.

Pictures Aira generates of you: An outfit rendered on your own photo, or on your face, is stored privately in your account so that re-opening a look you already have does not generate it again. These are never shown to another user. Pictures with no person in them — a garment on a faceless form — are shared across accounts, because they show clothes and not you.

Usage Data: Firebase Analytics and Crashlytics record which screens you open, which actions you take, and any crash. These are tied to your account identifier — not your name or email — and three profile details (gender, region, style preference) are attached to that record so we can see how the app performs for different kinds of user.

Session recording: Microsoft Clarity records app sessions so we can find where the app confuses people. It is keyed to your account identifier alone — never your name and never your email. Anything on screen that shows your photo, a picture of Aira's outfit rendered on you, or your name and email address is masked before it is recorded, so it reaches us as a blank shape.

3. How We Use Your Information

• To provide personalized outfit recommendations based on your body type, skin tone, weather, and preferences
• To build your Style DNA — the palette and silhouettes Aira styles you around
• To improve our AI recommendation quality
• To send you daily styling notifications (if you opt in)
• To provide customer support

4. AI Processing

Google Gemini reads your text and your photos — your outfit recommendations, the buy-or-skip verdict and the reading of your colouring — and it also generates and checks the pictures. Anthropic Claude stands in if Gemini is unavailable. Both operate on paid tiers, and neither uses your prompts or your photos to train their models.

Both providers retain API data briefly — typically up to 30 days — for safety and abuse review, then delete it. That processing happens on Google's and Anthropic's servers, which may be outside India. By using Aira you consent to this cross-border transfer, a required disclosure under India's DPDP Act 2023 and the EU GDPR.

4a. Styling is shared; you are not

When Aira writes an outfit for you, the styling itself — the garments and the reasoning — is filed into a shared catalogue and may be shown to other people dressing for a similar day. What is filed carries no name, no account identifier and no picture, and a look whose text mentions your name is refused rather than shared.

Because a filed look holds nothing that points to you, deleting your account does not remove it. There is nothing in it to remove.

5. Data Storage & Security

Your data is stored securely on Google Firebase servers. We use industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Per-user Firestore security rules (you can only access your own data)
• Secure cloud storage with owner-only access for photos

6. Data Sharing

We do NOT sell, rent, or share your personal information with third parties for marketing purposes. Your data is shared only with:

• AI Service Providers (Google, and Anthropic as the stand-in) — to process your styling requests
• Firebase/Google Cloud — for data storage and authentication
• Law Enforcement — only if required by law

7. Your Rights

All users have these baseline rights regardless of where they live:

• Access — view your personal data inside the app (Profile screen) or request an export by email.
• Correction — edit your profile data inside the app, or email us to correct anything not editable in-app.
• Deletion — delete your account and all associated data via Settings → Account → "Delete account". This erases your profile and everything under it, every file in your storage folder, and your sign-in record. It is permanent and immediate. You may also email privacy@aira.style, in which case we complete it within 30 days.
• Notifications — opt out of push at any time via device settings.
• Data portability — request a machine-readable copy of your data by email.

7a. Additional rights for users in the European Economic Area (EU/EEA) and the United Kingdom — GDPR / UK GDPR

If you are in the EU, EEA, or UK, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Legal basis for processing: we process your data under Article 6(1)(b) (contract performance — to provide the styling service you requested) and Article 6(1)(a) (consent — for optional features like body-scan photo storage and push notifications).
• Right to restrict processing — request that we pause processing of specific data categories while a dispute is resolved.
• Right to object — object to processing for any purpose you did not consent to. We will stop unless we have an overriding legitimate interest.
• Right to withdraw consent — at any time, for any feature you previously opted into (body-scan storage, analytics, push). Withdrawal does not affect the lawfulness of prior processing.
• Right to lodge a complaint — with your local data protection authority (e.g. the Information Commissioner's Office in the UK, the CNIL in France, the Garante in Italy).
• International transfers: your account data and your photos are stored on Google Cloud infrastructure in Mumbai, India. The AI processing described in Section 4 happens on Anthropic's and Google's own servers, which may be elsewhere. Transfers outside the EEA rely on Standard Contractual Clauses (SCCs) or other lawful mechanisms.
• Data Protection Officer: for GDPR matters contact privacy@aira.style.

7b. Additional rights for California residents — CCPA / CPRA

If you are a California resident, you have additional rights under the California Consumer Privacy Act (as amended by the California Privacy Rights Act):

• Right to know — request disclosure of the categories of personal information we collect, the sources, the purposes, and the categories of third parties we share with. The collection categories are summarized in Section 2 above.
• Right to delete — request deletion of personal information we have collected (see baseline deletion right above).
• Right to correct — request correction of inaccurate personal information.
• Right to opt-out of sale or sharing — we do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CPRA. No action needed on your part.
• Right to limit use of sensitive personal information — your full-length photo, your selfie and the colour analysis drawn from them qualify as sensitive personal information; we use them only to provide the styling service you requested. You can delete the stored photo at any time (Settings → Account), and withdraw selfie consent from your Passport's photo hub.
• Right to non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised any of these rights.
• Authorized agent: you may designate an authorized agent to submit a request on your behalf. We will verify the agent's authority before responding.
• To exercise these rights, email privacy@aira.style with the subject "CCPA request".

7c. Additional rights for users in India — DPDP Act, 2023

If you are in India, you have additional rights under the Digital Personal Data Protection Act, 2023:

• Right to information about the categories of personal data we process and the purposes, summarized in Sections 2 and 3 above.
• Right to grievance redressal — contact our Grievance Officer at privacy@aira.style. We will respond within 30 days as required under Section 13 of the Act.
• Right to nominate — designate another person to exercise your rights in case of death or incapacity. Submit nominations to privacy@aira.style.
• Consent withdrawal — withdraw consent for processing at any time. Withdrawal does not affect prior lawful processing.
• Data Fiduciary: Aira Style operates as the Data Fiduciary under the Act.

8. Children's Privacy

Aira Style is not intended for users under 18. We do not knowingly collect personal information from anyone under 18. See Section 1 (Eligibility) above.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the app.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:
Email: hello@aira.style