Privacy policy

This policy explains what personal data Tenua processes, why, and your rights. It applies under the Swiss Federal Act on Data Protection (nFADP) and, for users in the EU/EEA, the GDPR.

Who is responsible

[to be completed], [to be completed]. Contact for any privacy request: [to be completed].

What we process

• Account data — your email address, and your name and profile picture if you sign in with Google.
• Wardrobe data — photos of your clothes, the tags and notes attached to them, outfits, plans, trips and wear history.
• Body profile and reference photos — only if you choose to use photorealistic previews; used solely to render looks on you.
• Location — approximate coordinates, only when you allow weather-aware suggestions; used to fetch the forecast and not stored with your profile.
• Billing data — handled by Paddle (see below). We receive your plan, subscription status and billing country, never your card details.
• Usage and device data — pages visited and actions taken, only if you accept analytics cookies.
• Push subscription — a browser token, only if you turn on daily reminders.

Why (purposes and legal bases)

• Providing the service you signed up for — closet, outfits, previews, planner (contract).
• Billing and tax records (contract, legal obligation).
• Product analytics and measuring which ads bring people to Tenua (your consent — you can withdraw it at any time via “Cookie settings”).
• Security, abuse prevention and fixing errors (legitimate interest).

We do not sell your data. Your closet photos are never used in advertising and are never shared with ad platforms.

Service providers (processors)

• Supabase — database, file storage and sign-in.
• Fly.io — application hosting (servers in Amsterdam, Netherlands).
• OpenAI — garment recognition, outfit generation and stylist answers. Photos and wardrobe descriptions are sent for processing; per OpenAI’s API terms they are not used to train models.
• fal.ai — rendering photorealistic previews (receives the garment images and, if provided, your reference photo).
• Open-Meteo — weather forecasts (receives coordinates only).
• Google — optional “Continue with Google” sign-in.
• Paddle — payment processing, as merchant of record and independent controller for payment data.
• PostHog (EU hosting) and Meta Platforms — analytics and ad measurement, only after consent. For purchases we send Meta a hashed (SHA-256) email address and account id, never the address in plain text.

Background removal runs on your own device; that step does not send the photo to a server.

International transfers

Some providers (OpenAI, fal.ai, Meta, Google) are based in the United States. Transfers rely on the Swiss–US and EU–US Data Privacy Framework where the provider is certified, and otherwise on standard contractual clauses.

How long we keep data

Wardrobe and account data are kept while your account exists and deleted within 30 days of account deletion. Billing records are kept for 10 years as required by Swiss law. Analytics data is kept for up to 24 months.

Cookies

Necessary cookies keep you signed in and remember your language. Analytics and advertising cookies (PostHog, Meta Pixel) are set only after you click “Accept” in the cookie banner; you can change your choice at any time with “Cookie settings” in the footer.

Your rights

You can request access to, correction, export or deletion of your data, object to processing, and withdraw consent at any time by emailing [to be completed]. You may also complain to the Swiss FDPIC or your local EU data-protection authority.