Privacy Policy

Last updated: October 6, 2026

Astyl ("Astyl", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Astyl mobile application.

Companion document: By using Astyl you also agree to our Terms of Service.

1. Eligibility

You need to be old enough to agree to our Terms of Service where you live. By creating an account or using the app you confirm that you are, or that a parent or guardian has agreed on your behalf.

Astyl is built for adults and we market it to adults. We do not direct it at children.

2. Information We Collect

Account Information: When you sign in, we receive identifying information from your sign-in provider:

• Sign in with Google: name, email address, and profile photo. We do not access your Google password.
• Sign in with Apple: name (only if you choose to share it), email (your real address or Apple's private email relay address — your choice at sign-in), and an Apple-issued user identifier. We do not access your Apple ID password. If you use Apple's Hide My Email relay, we receive a relay address (e.g. random@privaterelay.appleid.com) instead of your real email — messages we send to that address are forwarded to you by Apple.

Profile Information: At setup you give your gender and your city, and — when you have not given a full-length photo — your height, weight and closest body shape, so Astyl can pick cuts that work on you. Age and style preferences are not asked at setup: you can set them later in Settings, and until you do, styling assumes an adult of 25. All of it is used solely to personalize your outfit recommendations.

Full-length photo (optional, opt-in storage): Used so Astyl can show today's outfit on your own body. When you give one you choose whether we keep it. If you opt in, it is stored privately in your account so every outfit can be rendered on you without asking again. If you opt out, it is never kept: if a previous photo is stored, it is deleted from our servers immediately. You can delete a stored photo at any time via Profile → Settings → Account → "Delete full-length photo".

Selfie (optional, separate opt-in): Used to read your colouring and to build a picture from your face when you have not given a full-length photo. A facial image is biometric data, so we ask for it separately and never bundle its consent with the photo above. Withdraw consent from Settings → Account → "Delete selfie" and the stored file is deleted, not merely left unused.

Garment photos: Photos of an item you ask Astyl to judge, or of a look you want adapted, are analysed in seconds and then discarded. Only the resulting text — the verdict, or the adapted look — is kept.

Pictures Astyl generates of you: An outfit rendered on your own photo, or on your face, is stored privately in your account so that re-opening a look you already have does not generate it again. These are never shown to another user. Pictures with no person in them — a garment on a faceless form — are shared across accounts, because they show clothes and not you.

Usage Data: Firebase Analytics and Crashlytics record which screens you open, which actions you take, and any crash. These are tied to your account identifier — not your name or email — and three profile details (gender, region, style preference) are attached to that record so we can see how the app performs for different kinds of user.

Session recording: Microsoft Clarity records app sessions so we can find where the app confuses people. It is keyed to your account identifier alone — never your name and never your email. Anything on screen that shows your photo, a picture of Astyl's outfit rendered on you, or your name and email address is masked before it is recorded, so it reaches us as a blank shape.

3. How We Use Your Information

• To provide personalized outfit recommendations based on your body type, skin tone, weather, and preferences
• To build your Style DNA — the palette and silhouettes Astyl styles you around
• To improve our AI recommendation quality
• To send you daily styling notifications (if you opt in)
• To provide customer support

4. AI Processing

Google Gemini reads your text and your photos — your outfit recommendations, the buy-or-skip verdict and the reading of your colouring — and it also generates and checks the pictures. Anthropic Claude stands in if Gemini is unavailable. Both operate on paid tiers, and neither uses your prompts or your photos to train their models.

Both providers retain API data briefly — typically up to 30 days — for safety and abuse review, then delete it. That processing happens on Google's and Anthropic's servers, which may be outside India. By using Astyl you consent to this cross-border transfer, a required disclosure under India's DPDP Act 2023 and the EU GDPR.

4a. Styling is shared; you are not

When Astyl writes an outfit for you, the styling itself — the garments and the reasoning — is filed into a shared catalogue and may be shown to other people dressing for a similar day. What is filed carries no name, no account identifier and no picture, and a look whose text mentions your name is refused rather than shared.

Because a filed look holds nothing that points to you, deleting your account does not remove it. There is nothing in it to remove.

5. Data Storage & Security

Your data is stored securely on Google Firebase servers. We use industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Per-user Firestore security rules (you can only access your own data)
• Secure cloud storage with owner-only access for photos

6. Data Sharing

We do NOT sell, rent, or share your personal information with third parties for marketing purposes. Your data is shared only with:

• AI Service Providers (Google, and Anthropic as the stand-in) — to process your styling requests
• Firebase/Google Cloud — for data storage and authentication
• Law Enforcement — only if required by law
• Shopping partners (retailers such as Myntra, via affiliate networks) — when you tap a shopping link marked Ad, the retailer receives the garment you asked about and a referral code tied to your account id, so the referral credits to Astyl. The retailer may pay Astyl a commission; the price you pay is unchanged.

7. Your Rights

All users have these baseline rights regardless of where they live:

• Access — view your personal data inside the app (Profile screen) or request an export by email — we send it within 7 days.
• Correction — edit your profile data inside the app, or email us to correct anything not editable in-app.
• Deletion — delete your account and all associated data via Settings → Account → "Delete account". This erases your profile and everything under it, your spark balance and its full transaction history, the note of whether you have used your free colour read, your daily usage counters, every file in your storage folder, and your sign-in record. It is permanent and immediate. You may also email privacy@astyl.app, in which case we complete it within 30 days.
• Notifications — opt out of push at any time via device settings.
• Data portability — request a machine-readable copy of your data by email — we send it within 7 days.

7a. Additional rights for users in the European Economic Area (EU/EEA) and the United Kingdom — GDPR / UK GDPR

If you are in the EU, EEA, or UK, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Legal basis for processing: we process your data under Article 6(1)(b) (contract performance — to provide the styling service you requested) and Article 6(1)(a) (consent — for optional features like storing your full-length photo and push notifications).
• Right to restrict processing — request that we pause processing of specific data categories while a dispute is resolved.
• Right to object — object to processing for any purpose you did not consent to. We will stop unless we have an overriding legitimate interest.
• Right to withdraw consent — at any time, for any feature you previously opted into (storing your full-length photo, analytics, push). Withdrawal does not affect the lawfulness of prior processing.
• Right to lodge a complaint — with your local data protection authority (e.g. the Information Commissioner's Office in the UK, the CNIL in France, the Garante in Italy).
• International transfers: your account data and your photos are stored on Google Cloud infrastructure in Mumbai, India. The AI processing described in Section 4 happens on Anthropic's and Google's own servers, which may be elsewhere. Transfers outside the EEA rely on Standard Contractual Clauses (SCCs) or other lawful mechanisms.
• Data Protection Officer: for GDPR matters contact privacy@astyl.app.

7b. Additional rights for California residents — CCPA / CPRA

If you are a California resident, you have additional rights under the California Consumer Privacy Act (as amended by the California Privacy Rights Act):

• Right to know — request disclosure of the categories of personal information we collect, the sources, the purposes, and the categories of third parties we share with. The collection categories are summarized in Section 2 above.
• Right to delete — request deletion of personal information we have collected (see baseline deletion right above).
• Right to correct — request correction of inaccurate personal information.
• Right to opt-out of sale or sharing — we do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CPRA. No action needed on your part.
• Right to limit use of sensitive personal information — your full-length photo, your selfie and the colour analysis drawn from them qualify as sensitive personal information; we use them only to provide the styling service you requested. You can delete the stored photo or your selfie at any time from Settings → Account.
• Right to non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised any of these rights.
• Authorized agent: you may designate an authorized agent to submit a request on your behalf. We will verify the agent's authority before responding.
• To exercise these rights, email privacy@astyl.app with the subject "CCPA request".

7c. Additional rights for users in India — DPDP Act, 2023

If you are in India, you have additional rights under the Digital Personal Data Protection Act, 2023:

• Right to information about the categories of personal data we process and the purposes, summarized in Sections 2 and 3 above.
• Right to grievance redressal — contact our Grievance Officer at privacy@astyl.app. We will respond within 30 days as required under Section 13 of the Act.
• Right to nominate — designate another person to exercise your rights in case of death or incapacity. Submit nominations to privacy@astyl.app.
• Consent withdrawal — withdraw consent for processing at any time. Withdrawal does not affect prior lawful processing.
• Data Fiduciary: Zep Tepi Technologies Pvt Ltd operates as the Data Fiduciary under the Act.

8. Children's Privacy

Astyl is built for adults and is not directed at children. We do not knowingly collect personal information from a child without a parent or guardian's consent. If you believe we have, contact privacy@astyl.app and we will delete it. See Section 1 (Eligibility) above.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will tell you in the app at least 14 days before any material change, and post the new Privacy Policy here. Continuing to use Astyl after that notice means you accept the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:
Email: hello@astyl.app