TrAi Style

Privacy Policy

Last updated: 5 September 2026

 Summary: TrAi Style is an AI-powered virtual try-on, digital closet, personal styling and fashion community service. Your photos are used only for the try-on and avatar features you request; they are never sold for advertising. This notice explains how we process your data under both Türkiye's KVKK (Law No. 6698) and the EU GDPR.
 

1. Data Controller

Your personal data is processed by the controller:

TrAi Style Moda ve Yapay Zeka Teknolojileri
Address: Van YYÜ Technopark, Van, Türkiye
Email: info@trai.style
Web: https://trai.style

EU representative (GDPR Art. 27): The appointment of an EU representative for our activities directed at users in the European Union is in progress. Until it is completed, you may address all data protection requests directly to info@trai.style.

2. Personal Data We Process

Category	Examples	Purpose
Identity & Account	Name, username, email, password (hashed), Google or Apple sign-in details, profile photo	Membership, authentication, account management
Visual Data (Special Category)	Face/body photos you upload, generated avatar, try-on images and videos	Virtual try-on, avatar creation, video generation
Closet & Preferences	Garment photos you add, size/style preferences, saved outfits, favorites	Digital closet, personal styling
Social Content	Posts, comments, likes/votes/reactions, stories, follow relationships, direct and group messages, stylist applications, reports/blocks	Fashion community, sharing, messaging, moderation
Security	IP address, app/device-install ID, browser fingerprint, session and security logs	Security, abuse and fraud prevention
Location (optional)	Approximate location, with your consent (sent to the weather service)	Weather-based outfit suggestions
Historical Legal Transaction Records	Any transaction and accounting records retained from before V1 (TrAi does not store card data)	Legal retention and accounting obligations; V1 offers no payment or subscription
Notifications	Platform push token (FCM or APNs), with your permission	App notifications
Live Updates	App/OS version, platform, bundle/channel and plugin version, update status and timestamp, approximate request country, IP address and a random app-scoped device ID	Signed web-layer update delivery, installation health, rollback, support and abuse prevention
AI Safety	Output kind, random owner-bound output ID, provider safety-category/probability signals and your report reason	In-app reporting and moderation of private AI output; the private output itself is not copied into the report record
Analytics (optional)	In-app behavior: try-ons, saves, searches, product dwell time — de-identified	Product improvement, anonymous trend reports (consent only)

 ⚠ Special Category Data: Your facial images are treated as special-category (potentially biometric) personal data under KVKK Art. 6 and GDPR Art. 9. This processing is carried out only with your explicit consent, which you can withdraw at any time.
 

3. Purposes of Processing

Providing virtual try-on (photo and video)
Generating AI stylist and outfit recommendations
Digital closet, saved outfits and favorites
Fashion community: posts, feed, voting, comments, stories, messaging
Weather-based outfit suggestions (if you grant location consent)
Membership and free V1 entitlement management
Retaining any pre-V1 transaction records solely for legal and accounting obligations
Notifications (with your permission)
Securely delivering signed web-layer updates to compatible app versions, monitoring installation health and rolling back when needed
Operating the referral program
Pre-publication text filtering, user/AI-output reports, security, content moderation, abuse and fraud prevention
Complying with legal obligations
Producing aggregated, anonymized trend reports and sharing them with partner brands (only with analytics consent)

4. Legal Bases (KVKK Art. 5-6 / GDPR Art. 6, 9)

Processing	KVKK basis	GDPR basis
Membership, account and service	5/2-c (performance of a contract)	Art. 6(1)(b) (contract)
Photos & face/biometric data	6 (explicit consent)	Art. 9(2)(a) (explicit consent)
International transfers	9 (explicit consent)	Art. 49(1)(a) (consent) / Art. 46 safeguards
Location & analytics	5/1 (explicit consent)	Art. 6(1)(a) (consent)
Security & abuse prevention	5/2-f (legitimate interest)	Art. 6(1)(f) (legitimate interest)
Accounting & legal requests	5/2-ç (legal obligation)	Art. 6(1)(c) (legal obligation)

5. Data Sharing and Recipients

Your data is shared only with the service providers (processors) below and where legally required. We do not sell your data for advertising.

Recipient	Purpose	Location
Amazon Web Services (Cognito, API Gateway/Lambda, DynamoDB, S3, CloudFront and App Runner)	Authentication, Apple/Google federation, application APIs, data/image storage and hosting	EU (Frankfurt); CloudFront edge locations may be global
Apple	Sign in with Apple and delivery of iOS push notifications through APNs	Global infrastructure
Google Firebase Cloud Messaging	Solely to deliver Android/web push notifications you permit	US / EU
Capgo	Signed web-layer update delivery and technical update operations only; no user content, name, email or advertising ID is sent	United Kingdom / global infrastructure; current subprocessors
Google Gemini & Veo (Generative AI)	Try-on image, video and style suggestion generation	US
Open-Meteo	Weather by location (if location consent given)	EU (Germany)
Competent public authorities	Upon lawful request	TR

 International Transfers: Your photos and videos may be transferred to the US when processed for virtual try-on by Google Gemini/Veo. Primary application data in AWS is stored in the Frankfurt (EU) region; CloudFront, APNs, FCM and Capgo update delivery may use global infrastructure. Capgo uses only a random app-scoped device ID and technical update data. Transfers use the legal basis applicable to the processing and, where appropriate, the EU Standard Contractual Clauses (SCCs) and provider safeguards.
 

6. Social Features and Public Content

TrAi Style includes a fashion community. When you share a post, story, comment or vote:

Your content and display name are visible to other users according to the privacy setting you choose.
"Public" posts are visible to all signed-in users; "friends" posts are visible only to your followers.
Direct and group messages are visible only to participants, though reported content may be reviewed for safety/moderation.
Deleting content removes your copy; reposted copies may require contacting the relevant user.
You can block other users and report inappropriate content.
User-entered text may be automatically screened before publication. You can appeal an incorrect filter or moderation decision at info@trai.style.

7. Automated Processing and AI

Try-on images, videos and style suggestions are generated automatically by AI. These outputs are simulations; they may not reflect real appearance and should not be the sole basis for a purchase. You may submit a private AI output for review using the in-app report control. The report record contains only its ID, kind, minimal safety signals and your reason; it does not copy the private output itself. We do not make solely automated decisions that produce legal or similarly significant effects on you (GDPR Art. 22).

8. Cookies and Local Storage

Essential: Cognito session management and service security.
Local storage: remembering language, theme and preferences.
Analytics (optional): only with your consent; anonymized usage statistics.

We do not use advertising or tracking cookies.

9. Data Security

TLS/SSL in transit; provider-level encryption at rest
AWS IAM, Cognito JWT and server-side ownership/role controls
Server-side authentication, rate limiting and abuse controls
Short-lived authorized access links for private S3 objects and regular security reviews

10. Retention Periods

Photos, avatar, try-on images/videos: while your account is active; deleted when you upload a new photo or delete your account.
Social content (posts, messages): until you delete it or close your account. Stories are removed automatically after ~24 hours.
Account data: for the duration of membership.
AI-output receipt and minimal safety signals: up to 1 year.
Live-update technical records: according to Capgo account/app retention settings and its current data policy for service operation, security, support and billing.
Logs & security records: up to 2 years.
Any pre-V1 transaction/accounting records: for the period required by law (generally 10 years in Türkiye).
Account-deletion request: access is disabled immediately and a resumable deletion process begins. Active account/profile data, user content, media, push tokens and the Cognito identity are securely removed. A limited deletion checkpoint/tombstone, security/audit records and records required for fraud, disputes or law are retained only as necessary, then deleted or anonymized.

11. Your Rights under KVKK (Art. 11)

In Türkiye, you may: learn whether your data is processed and request information; know the third parties to whom it is transferred at home or abroad; request correction or erasure; request notification of these to recipients; object to results arising solely from automated analysis; and claim compensation for unlawful processing. Send requests to info@trai.style with the subject "KVKK Request"; we respond within 30 days. You may also complain to the Turkish Personal Data Protection Authority.

12. Your Rights under GDPR (EU Users)

If you are in the EU/EEA, under GDPR Art. 15-22 you have the rights below.

Access (Art. 15): obtain a copy of your data
Rectification (Art. 16): correct inaccurate/incomplete data
Erasure / "right to be forgotten" (Art. 17)
Restriction (Art. 18): limit processing in certain cases
Portability (Art. 20): receive/transfer your data in a structured, machine-readable format
Objection (Art. 21): object to processing based on legitimate interest
Withdraw consent: stop consent-based processing (photos, location, analytics) at any time — this does not affect prior lawful processing
Automated decisions (Art. 22): not be subject to solely automated decisions with significant effects

Contact info@trai.style. You also have the right to lodge a complaint with the data protection supervisory authority in your EU member state.

13. Account Deletion

In the app: Profile → Settings → Delete Account
Or email info@trai.style

When your request is accepted, account access is disabled immediately and a resumable secure deletion process begins. If completion requires several steps, we will notify you of its status. Completed deletion cannot be reversed; only limited records required for law, security, fraud prevention or disputes may remain for the applicable period.

14. Children's Privacy

TrAi Style is for users 18 and older only. We do not knowingly collect data from anyone under 18. Accounts we identify as under 18 are closed.

15. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via in-app notice or email. The current version is always published on this page.

16. Contact

TrAi Style Moda ve Yapay Zeka Teknolojileri
Address: Van YYÜ Technopark, Van, Türkiye
Email: info@trai.style
Web: https://trai.style