Privacy Policy
Last updated: 04 October 2025
This Privacy Policy describes how Stylish (“we”, “us”, or “our”) collects, uses, and shares information when you use our Android application and related services (collectively, the “Service”). If you have questions, contact us at support@ornek.com.
1) Who we are (Data Controller)
For users in the EEA/UK/Brazil and elsewhere, the data controller is the Stylish team. You can reach us at support@ornek.com. If you are contacting us about a privacy right, please include enough information for us to verify your identity and locate your records.
2) Scope
This policy applies to information processed through our Android app and any in-app paywalls powered by Adapty. It does not cover third-party websites or services we do not control.
3) Information we collect
A. Content you provide
- Photos/Images you upload. We use these to generate looks and recommendations. We do not use them to uniquely identify you or perform face recognition for identity verification.
- Support messages and other communications sent to us.
B. Purchases & account signals
- Purchase metadata from Google Play Billing (e.g., purchase tokens, product IDs, receipts). We do not receive your full payment card details.
- Access level/subscription state managed via Adapty (e.g., active/inactive, product IDs).
- Customer user ID if you sign in or otherwise identify yourself (optional).
C. Device & usage data
- Device information (OS version, model, language, country, app version).
- Log data (IP address, timestamps, error/diagnostic logs) for security and debugging.
- In-app events such as when a paywall is shown or a purchase attempt occurs (for analytics and fraud prevention).
D. Sensitive data
Uploaded photos may be considered “sensitive” or “biometric” under some laws. We process them solely to provide the feature you request (e.g., style or makeup guidance) and do not use them to identify you.
4) How we use information
- Provide and operate the Service (including generating results from uploaded photos).
- Process purchases, manage access levels, and restore purchases.
- Maintain safety and integrity, prevent fraud/abuse, and debug/repair errors.
- Measure and improve performance (e.g., paywall view metrics).
- Communicate with you about the Service and respond to requests.
- Comply with applicable laws and enforce terms.
5) GDPR/UK GDPR legal bases
- Performance of a contract – to deliver the app’s core features and your purchases.
- Legitimate interests – to secure, improve, and measure usage (balanced against your rights).
- Consent – for optional processing where required (e.g., using uploaded photos to generate results if your jurisdiction requires consent for such content).
- Legal obligation – to comply with requests from authorities and maintain required records.
6) How we share information
We do not sell your personal information. We share data only as described below:
- Service providers (processors). We use trusted vendors to operate our Service, including:
- Google Play Billing (payments and purchase validation).
- Adapty (paywalls, subscriptions, and access-level management).
- Legal & safety. We may disclose information to comply with law, protect users, or defend our rights.
- Business transfers. If we are involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.
7) Data retention
- Uploaded photos: retained only as long as necessary to generate your result and for a short operational period (up to 30 days) unless you delete them sooner. We do not build biometric templates for identification.
- Purchase & access records: retained as required for accounting, fraud prevention, chargebacks, and legal obligations.
- Logs/diagnostics: retained for a limited period to ensure security and reliability.
We may retain information longer when required by law or to resolve disputes.
8) International transfers
We may process data outside your country. Where required (e.g., transfers from the EEA/UK), we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) with our processors.
9) Your privacy rights
Your rights depend on where you live. Subject to legal limits, you may have the right to:
- Access, correct, or delete personal data we hold about you.
- Object to or restrict certain processing, and request portability.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a supervisory authority (EEA/UK) or data protection agency in your region.
California (CCPA/CPRA): you have rights to know, delete, correct, and opt-out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell or share your personal information as those terms are defined by the CPRA. You may also limit the use of sensitive personal information to the extent applicable.
Brazil (LGPD): you have rights of confirmation, access, correction, anonymization, portability, deletion, and review of automated decisions, among others.
To exercise rights, email support@ornek.com. We may need to verify your identity before responding.
10) Children’s privacy
Our Service is not directed to children and we do not knowingly collect personal data from children under 13 (or a higher age of consent where required, e.g., 13–16 in some jurisdictions). If you believe a child has provided personal data, contact us and we will delete it.
11) Security
We use reasonable technical and organizational measures to protect personal data (e.g., encryption in transit, access controls, least-privilege practices). No system is perfectly secure; please notify us immediately if you suspect unauthorized use or a breach.
12) App permissions
- Camera / Photos & Media: to let you capture or select images to process.
- Internet: to communicate with our servers and payment providers.
13) Changes to this policy
We may update this policy from time to time. If we make material changes, we will provide notice in the app or by other appropriate means. Your continued use of the Service after the effective date means you accept the revised policy.
14) Contact
Email: support@ornek.com
If you need a mailing address for formal correspondence, include it here.
This policy is provided to support app-store compliance (Google Play) and common global privacy frameworks. Your actual data flows govern; please keep this document in sync with your implementation.