Sub-processors

1. Providers

• Google Cloud (Google Cloud EMEA Limited): hosting for the app and the site, database, storage for photos and looks, task queues, analytics warehouse. Warsaw, Poland (EU).
• Google Vertex AI and Gemini: virtual try-on, AI model, checking photos and looks, recognising pieces and search queries, vector representations of text and photos, draft support replies. Regions: United States (us-central1), Netherlands (europe-west4), Poland (europe-central2) and Google's global infrastructure.
• Google Firebase Authentication: sign-in and accounts. Google infrastructure, including the United States.
• Anthropic: recognising wardrobe pieces, fallback interpretation of search queries, catalogue tagging. United States.
• RevenueCat: verifying purchases and subscription status. United States.
• Expo (650 Industries): delivering push notifications and app updates. United States.
• Sentry (Functional Software, Inc.): crash reports from the app. Germany (EU).
• Google Workspace (Gmail): waiting-list e-mails, team notifications about brand enquiries and the e-mail telling a brand its enquiry arrived. Google infrastructure, including the United States.

2. Other recipients

These companies are not our sub-processors; they process data under their own rules:

• Apple and Google: app stores, payments, sign-in with Apple ID and Google;
• the affiliate networks Awin and Skimlinks, and brands with a direct agreement: the random visit code only (see “Brand click-outs”).

3. Transfers outside the EU

Transfers to the United States rely on the EU-U.S. Data Privacy Framework for certified companies or on the EU standard contractual clauses. You can request a copy of the safeguards at privacy@svoista.com.