Privacy Policy

01Who We Are

ViWear B.V. acts as the Data Controller for all personal data processed when you use the Service, in accordance with the European Union General Data Protection Regulation, known as GDPR.

If we engage external service providers such as cloud hosting providers, they act as Data Processors under strict contractual agreements.

02Personal Data We Collect

Data you provide directly

• Account information including email address, password and username
• Try On Photos that are processed temporarily
• Saved Photos stored in your Calendar
• Preferences and selected styles
• Communications with us

Data collected automatically

• Device identifiers
• IP address
• Application usage logs
• Performance metrics

Data generated by the Service

• Try on results
• Recommendations
• Calendar entries and outfit history when saved

Special categories of personal data

We do not intentionally collect or process special categories of personal data as defined under Article 9 of GDPR. This includes racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used to identify a person, health data and data concerning a person’s sex life or sexual orientation.

Any such information that may incidentally appear in photos is processed only to provide the Service. It is not analyzed, inferred, stored or used for identification or profiling.

03How We Use Personal Data

Providing the Service

We process images and related technical data to provide virtual try on and related features. This processing is necessary for performing our contract with the user under Article 6 paragraph 1 point b of GDPR.

Operation, security and maintenance

We process limited technical and usage data to maintain the stability, security and proper function of the Service. This is based on our legitimate interest under Article 6 paragraph 1 point f of GDPR.

Improvement and development

We may process aggregated and anonymous usage data to analyze performance, identify errors and improve the Service. This is based on our legitimate interest under Article 6 paragraph 1 point f of GDPR. This data does not identify individual users.

Communications and support

When you contact us, we process your contact details and message to respond and provide support. This is necessary to perform a contract or take steps requested before entering a contract under Article 6 paragraph 1 point b of GDPR.

Legal compliance

We may process personal data when required by European Union or national law under Article 6 paragraph 1 point c of GDPR.

04How We Process Photos

Try On Photos

Try On Photos are uploaded only to generate virtual try on results. They are processed in memory or temporary storage, are not saved to your account unless you choose to save them, are not used for AI model training and are deleted automatically shortly after processing. Access is limited to automated systems. Human reviewers cannot access these photos through the normal Service workflow.

Saved Photos

If you save a photo in your Calendar, it becomes part of your content and remains in your account until you delete it. It may be displayed back to you within the Service. Saved Photos are not used for AI model training and are stored separately from temporary Try On Photos.

Processing location

Image processing and storage occur on secure servers in the European Union or through cloud providers that comply with European Economic Area requirements. We do not transfer photos outside the European Union unless adequate safeguards are in place, such as Standard Contractual Clauses.

05How Long We Store Data

Try On Photos

Photos used for virtual try on are deleted automatically after processing. They are normally deleted within a few hours and always within 24 hours after upload.

Saved Photos

Photos you save remain until you delete them or delete the related account.

Account data

Account data remains while the account is active. After account deletion, the data is deleted or made anonymous unless the law requires further retention.

Usage data and logs

Technical and usage data may be retained for up to twelve months for analytics, security monitoring and Service improvement.

Communications

Support communications may be retained for up to twenty four months to manage requests, maintain service quality and keep internal records.

Legal and compliance data

Certain data may be retained longer when required by legal, tax or regulatory obligations. We retain it only for the period required by law.

06Data Sharing

Service providers

We may share data with providers that support hosting, analytics, error monitoring, content delivery and email. These providers are bound by agreements designed to meet GDPR requirements.

Legal obligations

We may share data when required by law, regulators or court orders.

No sale of personal data

ViWear never sells personal data to third parties.

07Transfers Outside Europe

If data is transferred outside the European Union or European Economic Area, we use safeguards that may include Standard Contractual Clauses, Data Processing Agreements and supplementary protections where required.

08Your Rights Under GDPR

You may have the right to access your personal data, correct inaccurate data, request erasure, restrict processing, receive portable data, object to processing, withdraw consent and lodge a complaint with your national Data Protection Authority.

To exercise these rights, email [email protected].

09Age Requirements

ViWear is intended for people aged 18 years and older. We do not knowingly collect data from children under 18. If we learn that a person under 18 has used the Service, we will take appropriate steps to delete the related account and data without undue delay.

A parent or legal guardian who believes that a person under 18 provided data to ViWear may contact us. After verification, we will promptly delete the relevant account and data.

10Security Measures

We use encryption in transit, encryption at rest, access controls, secure data centers, audit logs, rate limiting and protections against abuse. No system is completely secure, but we apply appropriate measures to protect your data.

11Data Breach Notification

If a personal data breach occurs, we assess the risk to your rights. When legally required, we notify the Dutch Data Protection Authority within 72 hours. We also notify affected users without undue delay when a breach may create a high risk.

A notification may describe the nature of the breach, the types of data affected and the possible consequences.

12Analytics and Similar Technologies

ViWear is provided as a mobile application. The application may use software development kits and similar technologies to operate, secure and improve the Service.

These technologies may process limited technical data such as device identifiers, temporary session tokens and application interaction events. We use this data for secure authentication, communication with our services, aggregated usage analysis, performance monitoring, stability and error reporting.

13Account and Data Deletion

How to delete your account

You can delete your ViWear account at any time.

In the ViWear app: Open the ViWear app, go to Settings → Delete Account, and confirm your request.

If you no longer have access to the app: You can request deletion of your account by emailing [email protected] from the email address registered to your ViWear account.

When you delete your account or request account deletion, ViWear deletes the account and the personal data associated with it without undue delay and within applicable GDPR time limits, unless certain information must be retained for legal, security, fraud prevention or regulatory purposes.

Account data is removed from active systems. Saved Photos and other content associated with your account are deleted. Try On Photos will normally already have been deleted automatically as described above.

Limited technical data, such as security or audit logs, may be retained for longer where strictly necessary to comply with legal obligations, prevent fraud or protect the integrity and security of the Service. We do not use retained data for other purposes.

14Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices, Service features or legal requirements. We notify users when required by law. Continued use of the Service indicates acceptance of the changes.

15Contact Information

For privacy requests, email [email protected].