Privacy Policy
Last updated: 20 October 2026
This Privacy Policy explains how Kirvik ("Kirvik", "we", "us") collects, uses, and protects your personal data. We are committed to the EU GDPR and the UK GDPR / Data Protection Act 2018.
1. Who we are (Data Controller)
Kirtika Yadav, operating as a sole trader as "Kirvik" · Alfred-Kowalke-Straße 20, 10315 Berlin, Germany · privacy@kirvik.app. You may lodge a complaint with your local supervisory authority (in Germany, your state DPA; in the UK, the ICO).
2. What data we collect
You provide: account data (email, password stored hashed, optional name / Google identifier); wardrobe images; style preferences, quiz responses and outfit feedback; optional body & fit profile (and, for some features, skin tone / complexion — see §7); your city (for weather); payment status via Stripe (not your full card details).
Collected automatically: usage & device diagnostics; a push token if you enable notifications.
3. How and why we use your data
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Provide the core service (store wardrobe, generate outfits) | Contract + consent for image processing |
| AI garment analysis & outfit generation (§4) | Consent |
| Build your style profile / personalise | Consent |
| Weather-aware suggestions | Consent |
| Subscriptions & payments | Contract |
| Push notifications | Consent |
| Product analytics | Consent (only after you grant it) |
| Security, fraud prevention, error monitoring | Legitimate interests |
| Training Kirvik's own models (optional) | Consent — off by default (§6) |
You give and manage these consents in the app and can withdraw any consent at any time; withdrawal doesn't affect prior processing.
4. AI processing and third-party subprocessors
To provide the service we share the minimum necessary data with the processors below. Some are in the United States; those transfers are protected by Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
| Subprocessor | Purpose |
|---|---|
| Supabase | Database, authentication, image storage, hosting |
| Google (Gemini API) | AI garment image generation — the "ghost mannequin" cut-outs and the optional on-model try-on renders — and styling text |
| OpenAI | AI analysis of garment images |
| Anthropic | AI outfit generation & styling text |
| TheNewBlack / WearView | Fallback "ghost mannequin" garment image processing |
| remove.bg / PhotoRoom | Background removal on garment images |
| Stability AI | Product-quality image enhancement |
| OpenWeatherMap | Weather for your city |
| Stripe | Payment & subscription processing |
| Expo | Push notifications & app updates |
| Sentry / PostHog | Error monitoring / product analytics (consent-gated) |
We do not sell your personal data, and we do not use your wardrobe images for advertising.
5. Sharing with other users
Your wardrobe and profile are private to your account by default. Any future community feature will be opt-in and described at that time.
6. Using your data to improve our models (optional)
By default we do not use your personal wardrobe or outfit data to train our own models. Only if you switch on "Help improve Kirvik's AI" (a separate, optional consent) do you allow this. It's distinct from the AI processing in §4 and you can turn it off anytime in Settings → Privacy & data.
7. Special-category data
Some optional features process skin tone / complexion, which may be data relating to racial or ethnic origin (Art. 9 GDPR). We process it only with your explicit consent, solely for the feature you requested, and you can withdraw and delete it anytime.
Specifically: (a) a warm/cool/neutral complexion value can personalise colour recommendations; and (b) for the optional on-model try-on you may set a skin tone for your rendered model. When set, it is used solely to render your try-on avatar — never for styling suggestions or any other purpose. It is set once, stored as a coarse preference, and you can remove it at any time in the app.
7a. On-model try-on
The on-model try-on is an optional feature that generates an image of your outfit worn by a faceless, AI-generated model (never a real person, and by default not resembling you). To create it, your garment images and the optional appearance preferences above are processed by Google (Gemini API) (see §4). These renders are AI approximations for visualisation and may not reproduce a garment exactly.
8. Your rights
Under the GDPR / UK GDPR you can access, rectify, erase, restrict, object, port your data and withdraw consent. In-app: Settings → Privacy & data → Export my data (Art. 20) and Delete account. For anything else, contact privacy@kirvik.app; we respond within one month.
9. Data retention
We keep your data while your account is active. On deletion we permanently erase your personal data and wardrobe images, except limited records we must retain by law (e.g. payment/tax records). Backups purge on our normal rotation.
10. Security
We use encryption in transit (HTTPS), access controls, hashed credentials and reputable infrastructure. No system is perfectly secure, but we will notify you and the authorities of any breach as required by law.
11. Children
Kirvik is not intended for anyone under 16. We do not knowingly collect data from children under 16.
12. International transfers
Where data is transferred outside the EEA/UK (see §4), we rely on adequacy decisions or Standard Contractual Clauses.
13. Changes
We may update this policy; material changes will be notified in the app or by email.
14. Contact
privacy@kirvik.app · Kirtika Yadav, Alfred-Kowalke-Straße 20, 10315 Berlin, Germany