TrAi Style

Privacy Policy

Last updated: 4 July 2026

 Summary: TrAi Style is an AI-powered virtual try-on, digital closet, personal styling and fashion community service. Your photos are used only for the try-on and avatar features you request; they are never sold for advertising. This notice explains how we process your data under both Türkiye's KVKK (Law No. 6698) and the EU GDPR.
 

1. Data Controller

Your personal data is processed by the controller:

TrAi Style Moda ve Yapay Zeka Teknolojileri
Address: Van YYÜ Technopark, Van, Türkiye
Email: info@trai.style
Web: https://trai.style

EU representative (GDPR Art. 27): The appointment of an EU representative for our activities directed at users in the European Union is in progress. Until it is completed, you may address all data protection requests directly to info@trai.style.

2. Personal Data We Process

Category	Examples	Purpose
Identity & Account	Name, username, email, password (hashed), Google sign-in details, profile photo	Membership, authentication, account management
Visual Data (Special Category)	Face/body photos you upload, generated avatar, try-on images and videos	Virtual try-on, avatar creation, video generation
Closet & Preferences	Garment photos you add, size/style preferences, saved outfits, favorites	Digital closet, personal styling
Social Content	Posts, comments, likes/votes/reactions, stories, follow relationships, direct and group messages, stylist applications, reports/blocks	Fashion community, sharing, messaging, moderation
Security	IP address, device ID, browser fingerprint, session/logs, bot-protection (App Check) data	Security, abuse and fraud prevention
Location (optional)	Approximate location, with your consent (sent to the weather service)	Weather-based outfit suggestions
Payment & Subscription	Subscription status, purchase history, billing records (card data stays with the payment provider, not us)	Premium subscription and payments
Notifications	Push token (FCM), with your permission	App notifications
Analytics (optional)	In-app behavior: try-ons, saves, searches, product dwell time — de-identified	Product improvement, anonymous trend reports (consent only)

 ⚠ Special Category Data: Your facial images are treated as special-category (potentially biometric) personal data under KVKK Art. 6 and GDPR Art. 9. This processing is carried out only with your explicit consent, which you can withdraw at any time.
 

3. Purposes of Processing

Providing virtual try-on (photo and video)
Generating AI stylist and outfit recommendations
Digital closet, saved outfits and favorites
Fashion community: posts, feed, voting, comments, stories, messaging
Weather-based outfit suggestions (if you grant location consent)
Membership, Premium subscription and payment processing
Notifications (with your permission)
Operating the referral program
Security, content moderation, abuse and fraud prevention
Complying with legal obligations
Producing aggregated, anonymized trend reports and sharing them with partner brands (only with analytics consent)

4. Legal Bases (KVKK Art. 5-6 / GDPR Art. 6, 9)

Processing	KVKK basis	GDPR basis
Membership, account and service	5/2-c (performance of a contract)	Art. 6(1)(b) (contract)
Photos & face/biometric data	6 (explicit consent)	Art. 9(2)(a) (explicit consent)
International transfers	9 (explicit consent)	Art. 49(1)(a) (consent) / Art. 46 safeguards
Location & analytics	5/1 (explicit consent)	Art. 6(1)(a) (consent)
Security & abuse prevention	5/2-f (legitimate interest)	Art. 6(1)(f) (legitimate interest)
Accounting & legal requests	5/2-ç (legal obligation)	Art. 6(1)(c) (legal obligation)

5. Data Sharing and Recipients

Your data is shared only with the service providers (processors) below and where legally required. We do not sell your data for advertising.

Recipient	Purpose	Location
Google Firebase (Auth, Firestore, Storage, Cloud Functions, App Check, Cloud Messaging)	Authentication, data/image storage, infrastructure, bot protection, notifications	US / EU
Google Gemini & Veo (Generative AI)	Try-on image, video and style suggestion generation	US
Google reCAPTCHA Enterprise	Bot and abuse protection (App Check)	US
Open-Meteo	Weather by location (if location consent given)	EU (Germany)
Sentry	Error and performance monitoring	US / EU
Upstash	Server-side rate limiting (abuse prevention)	US / EU
Vercel	Web hosting	US / EU
Payment provider (when Premium is active)	Subscription billing; card data stays with provider	US / EU
Competent public authorities	Upon lawful request	TR

 International Transfers: Because our infrastructure (Google Firebase, Gemini/Veo) is located in the US, your photos and videos are transferred abroad for try-on processing. These transfers rely on your explicit consent (KVKK Art. 9 / GDPR Art. 49). For EU users, we also rely, where applicable, on the EU Standard Contractual Clauses (SCCs) and providers' supplementary safeguards (GDPR Art. 46).
 

6. Social Features and Public Content

TrAi Style includes a fashion community. When you share a post, story, comment or vote:

Your content and display name are visible to other users according to the privacy setting you choose.
"Public" posts are visible to all signed-in users; "friends" posts are visible only to your followers.
Direct and group messages are visible only to participants, though reported content may be reviewed for safety/moderation.
Deleting content removes your copy; reposted copies may require contacting the relevant user.
You can block other users and report inappropriate content.

7. Automated Processing and AI

Try-on images, videos and style suggestions are generated automatically by AI. These outputs are simulations; they may not reflect real appearance and should not be the sole basis for a purchase. We do not make solely automated decisions that produce legal or similarly significant effects on you (GDPR Art. 22). Contact us with any questions.

8. Cookies and Local Storage

Essential: session management and security (App Check).
Local storage: remembering language, theme and preferences.
Analytics (optional): only with your consent; anonymized usage statistics.

We do not use advertising or tracking cookies.

9. Data Security

TLS/SSL in transit; provider-level encryption at rest
Row-level access control via Firebase Security Rules
Server-side authentication and rate limiting
Bot protection (App Check) and regular security reviews

10. Retention Periods

Photos, avatar, try-on images/videos: while your account is active; deleted when you upload a new photo or delete your account.
Social content (posts, messages): until you delete it or close your account. Stories are removed automatically after ~24 hours.
Account data: for the duration of membership.
Logs & security records: up to 2 years.
Payment/accounting records: for the period required by law (generally 10 years in Türkiye).
On account deletion: visual and personal data are deleted immediately and permanently, except accounting records that must be retained by law.

11. Your Rights under KVKK (Art. 11)

In Türkiye, you may: learn whether your data is processed and request information; know the third parties to whom it is transferred at home or abroad; request correction or erasure; request notification of these to recipients; object to results arising solely from automated analysis; and claim compensation for unlawful processing. Send requests to info@trai.style with the subject "KVKK Request"; we respond within 30 days. You may also complain to the Turkish Personal Data Protection Authority.

12. Your Rights under GDPR (EU Users)

If you are in the EU/EEA, under GDPR Art. 15-22 you have the rights below.

Access (Art. 15): obtain a copy of your data
Rectification (Art. 16): correct inaccurate/incomplete data
Erasure / "right to be forgotten" (Art. 17)
Restriction (Art. 18): limit processing in certain cases
Portability (Art. 20): receive/transfer your data in a structured, machine-readable format
Objection (Art. 21): object to processing based on legitimate interest
Withdraw consent: stop consent-based processing (photos, location, analytics) at any time — this does not affect prior lawful processing
Automated decisions (Art. 22): not be subject to solely automated decisions with significant effects

Contact info@trai.style. You also have the right to lodge a complaint with the data protection supervisory authority in your EU member state.

13. Account Deletion

In the app: Profile → Settings → Delete Account
Or email info@trai.style

Deletion is irreversible and completed within 24 hours; visual data is deleted immediately.

14. Children's Privacy

TrAi Style is for users 18 and older only. We do not knowingly collect data from anyone under 18. Accounts we identify as under 18 are closed.

15. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via in-app notice or email. The current version is always published on this page.

16. Contact

TrAi Style Moda ve Yapay Zeka Teknolojileri
Address: Van YYÜ Technopark, Van, Türkiye
Email: info@trai.style
Web: https://trai.style