Privacy policy

1. Who we are

Operator and controller of your data: Svoista OÜ, Estonian business registry code 17575762, registered address: Tornimäe tn 5, Kesklinna linnaosa, 10145 Tallinn, Estonia. Phone: +37259843335, +380503865028, +380504404200.

Privacy matters and data requests: privacy@svoista.com. General enquiries: hello@svoista.com.

Svoista is an app that learns your taste, picks pieces from niche clothing brands and lets you try them on virtually. We are not a shop: the “Buy” button takes you to the brand's website, and you buy from the brand.

2. Who the app is for

The app is for people aged 18 and over. At sign-up we ask for your year of birth and do not create an account if you are under 18.

If we learn that an account belongs to someone under 18, we will delete it. You can tell us at privacy@svoista.com.

3. What data we process, why, and on what basis

Legal bases under the EU General Data Protection Regulation (GDPR): performance of our contract with you, i.e. providing the service (Art. 6(1)(b)); your consent (Art. 6(1)(a)); our legitimate interest (Art. 6(1)(f)); compliance with a legal obligation (Art. 6(1)(c)).

3.1. Account.

• a sign-in identifier and e-mail address (if you sign in with e-mail, or Apple or Google provides it);
• your name if you gave one, year of birth, and gender if you gave it;
• a contact e-mail address if you gave one in your profile; we do not verify it and do not write to it without your consent;
• language, market, display currency, the device's time zone.

Purpose: to create and run your account, check your age, and show pieces for your market and the right gender. Basis: contract; checking age is also our legitimate interest in keeping minors out of the service.

3.2. Taste profile and recommendations.

• your onboarding answers, swipes, likes, saved pieces, “not mine” marks and the reasons you chose;
• the price range and categories you set;
• which pieces and brands you opened, saved, tried on and followed to the brand's website.

From these we calculate your taste profile: a set of weights across styles. Every change to the profile is logged. Purpose: to tailor the feed, search and similar pieces to you. This is profiling, and it is the service itself, so the basis is contract.

Separately, we count which attributes of pieces and which brands (colour, cut, material and so on) appear more often than is usual for you among your “not mine” marks, and which among the pieces you open, save, try on or visit on the brand’s site. The first move lower, the second higher. The types of pieces you opened in the current session are also lifted a little for that session; nothing about the session is stored. What we have noticed is shown in the app under Taste, “Showing less” and “Showing more”, where you can change the strength of each signal or remove it.

You can pause the learning: Profile, Settings, “Pause behavioural learning”. Your new actions then no longer change the profile. We take no automated decisions that have legal or similarly significant effects on you.

3.3. Photos and virtual try-on.

Try-on photo. The app keeps a reduced copy of your photo on your device so you can use it again. To create a look, the photo is sent to our servers and to Google's artificial intelligence service. Once the look is created the photo is not kept on our servers: it is deleted as soon as the try-on finishes, and in any case within a day.

Finished looks. Before it is shown, every look is automatically checked by a Google model for unacceptable content. The look's file is kept on our servers for 30 days, and the try-on record (which pieces, your rating or comment if you left one) for 12 months. Your last 30 looks also stay on your device under “Your looks”, where you can delete them at any time.

AI model. If you create an AI model, your body and face photos are sent to Google to check them and generate the model, and are not kept afterwards. We keep the generated model for as long as your account exists.

Search by photo. The photo is sent to Google for recognition and is not kept on our servers; a copy stays on your device. We keep a record of the search without the photo itself: what was recognised and what was found.

Wardrobe. Photos of the pieces you add are kept on our servers until you delete the piece or your account, and a copy stays on your device. So the piece can be tried on and matched, its type, colour and style are recognised by an artificial intelligence service (Anthropic or Google).

The basis for all photo processing is contract, because you ask us to create a look or a model or to find a piece. We do not publish your photos, do not show them to brands, do not create facial templates to recognise people, and do not use photos to train artificial intelligence models. Under their terms for business customers, the AI providers we work with do not use our request data for training either.

3.4. Purchases and tokens.

• subscription status, renewal date and the ending reason reported by the app store;
• the history of tokens credited and spent.

Payments are processed by Apple (App Store) and Google (Google Play); we never see your card details. RevenueCat receives your account identifier and the purchase data in order to verify the purchase. Basis: contract and accounting obligations.

3.5. Visits to brands' websites.

Every visit to a brand gets a random code, which we pass to the brand or to an affiliate network so they can see the visit came from us and, where the brand works through an affiliate network, so we can earn a commission on the purchase. The code contains no data about you. Basis: our legitimate interest.

Whether the visit is linked to your profile is your decision: we ask before your first visit. Without your consent the visit is recorded with no link to you at all. If a brand or network reports a purchase, we receive the order number, the amount and, where one applies, the commission. Full detail: the “Brand click-outs” page (svoista.com/en/legal/brand-clicks).

3.6. Notifications.

• the device's notification token, platform and time zone;
• a log of notifications sent.

Service notifications (a look is ready, a saved piece is back in stock) are on by default, on the basis of contract and our legitimate interest; you can turn them off in settings. News, edits and events are sent only with your consent. We select them by taste profile, market, language, gender, subscription status and activity in the app, limit how often they arrive, and never send them at night in your time zone.

3.7. Usage analytics.

We count which features get used: how many searches happened and how many found nothing, which filters are applied, how many try-ons started and finished, where onboarding stops, how many people opened a notification. These are records of the service doing its work — they are what tells us what works and what does not — and we keep them for everyone. Basis: our legitimate interest.

Separately, the app sends technical records about the course of a session: which screens were opened, which cards were shown and in what position, taps and scrolling. Without your analytics consent these records are linked neither to you nor to your device: they carry only a session identifier that lives in the app's memory and disappears when you close it, so two launches cannot be matched to each other. We strip the content out of such records and keep only the screen name, the position, the step or the reason.

If you turn “Usage analytics” on, these records start carrying your account identifier, and a search also carries what you searched for. We can then see how a person uses the app over time rather than within a single session. Basis: your consent, which is off by default and which you can switch off in settings at any time. When you do, we remove the link to you from the records already made and delete the stored search text; the records themselves remain, without a person.

Separately from all of this, the app shows you your own recent searches and recently viewed pieces. That is your list: it is kept in your account so it is there on another device, and you can clear it in the app. Basis: our contract with you.

Purpose: to understand what works in the app and to improve it. For reporting we also keep a copy in a separate analytics warehouse where the account and session identifiers are replaced by a one-way hash. Only the data of people who consented to analytics goes there.

The app contains no third-party advertising or tracking libraries, we do not use the device's advertising identifier, and we do not sell data. Brands see only overall statistics for their own pieces, never who did what.

3.8. Advertising in the app.

The “New” section may show brand banners marked “ad”. Which banner is shown depends on the market, the campaign's dates and budget, and how many times you have already seen it; your taste profile is not used for this. We record each banner impression and each tap on it together with your account, to limit repeats and to calculate what the brand pays. The brand does not learn who saw the banner or who tapped it. Basis: our legitimate interest.

3.9. Support requests.

Messages, attachments (for example photos or screenshots), topic, language, platform and app version. To help you, a team member also sees your token balance, subscription status and recent try-ons. A draft reply may be prepared by Google's artificial intelligence; a person sends it. Basis: contract and our legitimate interest.

3.10. Security and technical data.

Your IP address is used to limit request rates and protect against abuse, and the hosting keeps technical access logs. To check for updates, the app contacts the Expo service, which sees the IP address, platform and app version. Basis: our legitimate interest.

If the app crashes, we receive a crash report: the device model, the system and app versions, the place in the code where it happened, and a few technical events leading up to it. The report carries no name, e-mail or account identifier, and query parameters are stripped from request addresses, so your taste profile is not in it. Reports are processed by Sentry in Germany (EU). Purpose: to see a breakage and fix it. Basis: our legitimate interest.

3.11. The svoista.com site.

Waiting list: e-mail address, language, the consent record with its date and policy version, a confirmation token, the form it came from, a hash of the IP address. Purpose: to send a confirmation e-mail and tell you when the app is available in the App Store and Google Play. Basis: consent.

Brand enquiries: brand name, link, contact, page language, a hash of the IP address. Purpose: to reply to the enquiry. Basis: legitimate interest.

Brand portal: the representative's e-mail and role, a log of edits, and a record of accepting the terms with name, position and IP address. Basis: our contract with the brand and our legitimate interest in having evidence the terms were accepted.

The site sets no analytics or advertising cookies and uses no third-party pixels.

4. Who we share data with

Providers who process data on our behalf and on our instructions: Google hosting, database, e-mail and artificial intelligence, Firebase sign-in, Anthropic, RevenueCat, Expo, Sentry. The full list, with what is processed and where: the “Sub-processors” page (svoista.com/en/legal/sub-processors).

Independent recipients who process data under their own rules: Apple and Google as app stores and sign-in services; brands and affiliate networks (the visit code only, see clause 3.5).

Public authorities and courts, where the law requires it.

We do not sell personal data and do not pass it to advertisers.

5. Transfers outside the EU

Our main servers are in Warsaw, Poland (EU), and crash reports are processed in Germany (EU). Some processing takes place in the United States: virtual try-on and photo checks at Google (region us-central1), Google's global services for recognition and checking looks, and Firebase Authentication, Google Workspace e-mail, Anthropic, RevenueCat and Expo.

These transfers rely on the European Commission's adequacy decision (the EU-U.S. Data Privacy Framework) for certified companies, or on the EU standard contractual clauses. You can request a copy of the relevant safeguards at privacy@svoista.com.

6. How long we keep data

• Account, taste profile, swipes, likes, saved pieces, “not mine” marks, your changes in “Showing less” and “Showing more”, wardrobe, AI model, token balance and the records of how tokens were used: while the account exists.
• Records of token and subscription purchases: while the account exists and, after it is deleted, no longer linked to you, for as long as accounting law requires.
• The taste profile change log and the records of actions that teach the profile: 12 months.
• Try-on photos on our servers: until the try-on finishes, no longer than a day.
• Finished look files on our servers: 30 days. Try-on records: 12 months.
• Looks, try-on, search and wardrobe photos on your device: until you delete them, your account or the app. Of the looks, the last 30 are kept on the device.
• Search-by-photo records (without the photo): 90 days.
• Technical session records: 6 months. The analytics warehouse copy with hashed identifiers: up to 14 months.
• Feature-use records (searches, filters, onboarding steps): 6 months. Records of refused paid actions: 12 months.
• Your recent searches and viewed pieces: the last 20 of each, until you clear them or delete the account.
• Brand visits not followed by a purchase: 13 months. Purchase and commission data: as long as accounting law requires.
• Ad banner impressions: 13 months, but not before the ad campaign has ended.
• Log of notifications sent: 6 months after the send has finished.
• Support requests and their attachments: 36 months after the request is closed or its last message, whichever is later. Requests that are still open are kept until they are closed.
• Data requests sent by e-mail: 12 months after completion.
• The log of consents given and account deletion receipts: kept without a link to your profile, as evidence that processing was lawful.
• Technical access logs: up to 30 days. Database backups: up to 7 days.
• Waiting list: unconfirmed addresses 72 hours plus up to 7 days; confirmed addresses until we announce the app in the stores plus 6 months, or until you unsubscribe.
• Brand enquiries: 24 months.

When the period ends, the data is deleted automatically.

7. How we protect your data

• All connections between the app, the site and our servers are encrypted (HTTPS). Data on Google Cloud servers is stored encrypted.
• Photos, looks, wardrobe pieces and support attachments are kept in private storage with no public access. The app receives them only through temporary signed links.
• We do not store passwords: sign-in is handled by Firebase Authentication. We never see payment card details.
• In the analytics warehouse, identifiers are replaced by a one-way hash, and IP addresses from the site's forms are stored only as a hash.
• Only staff with administrator accounts can access data in the back office. Account deletions and the handling of data requests are recorded in an audit log.
• If a security breach puts your rights at risk, we will notify the Estonian Data Protection Inspectorate within 72 hours, and you without undue delay where the risk to you is high.

8. Your rights

You have the right to access your data and receive a copy, to rectify it, to erase it, to restrict processing, to receive it in a machine-readable format, to object to processing based on legitimate interest, and to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before it.

In the app: “Download my data” gives a copy of your core account data, and “Delete account” deletes the account. A full copy of everything we hold about you can be requested at privacy@svoista.com.

We reply within 30 days. If a request is complex, this can be extended by a further two months, and we will tell you.

You have the right to lodge a complaint with a supervisory authority. For our operator that is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI, www.aki.ee, info@aki.ee). You may also turn to the authority of the country where you live or work; in Ukraine that is the Ukrainian Parliament Commissioner for Human Rights.

9. Deleting your account

You can delete your account in the app (Profile, “Delete account”) or by e-mail. Your data on our servers is deleted with the account, and the app deletes the saved looks and photos on your device.

What exactly is deleted and what remains without a link to you: the “Deleting your account” page (svoista.com/en/legal/delete-account).

Deleting your account does not cancel your subscription: cancel it in the App Store or Google Play settings.

10. Consents and how to change them

In the app, Profile, Settings:

• “Usage analytics”: consent to analytics (clause 3.7);
• “News and edits”: consent to marketing notifications (clause 3.6);
• “Brand click-outs”: consent to link visits to your profile (clause 3.5);
• “Pause behavioural learning”: objection to updating your taste profile (clause 3.2).

Access to photos, camera and notifications is managed in your phone's settings. You can unsubscribe from waiting-list e-mails with the link in each e-mail.

11. Changes to this policy

A new version is published on this page with its date. We tell you about material changes in the app and ask you to read and accept the new version.

Version of 22 September 2026: section 3.7 was rewritten. We separated what we count for everyone (how many searches, try-ons and onboarding steps — records of the service doing its work) from what we collect only with consent (the link between those records and your account, and the text of a search). Without consent, the technical session records are now linked neither to you nor to your device. It also now says that recent searches and viewed pieces are kept in your account so they are there on another device, and that we record a tap on a banner the same way we record its impression.

Version of 15 September 2026: waiting-list e-mails and brand-enquiry notifications are now sent through Google Workspace e-mail instead of the Resend service, section 7 on data protection was added, and it now says which brands pay us a commission.

The version of 14 September 2026 replaces the pre-launch version, which described only the site and the waiting list. The policy now describes the app: the taste profile, photos and virtual try-on, purchases, brand visits, advertising, notifications, analytics, support and transfers outside the EU.