Controller
The data controller is MONRYTE S.R.L., Str. Baia nr. 10, Sector 1, 013496 București, Romania (Trade Register J2026032634002, VAT RO54953006). For privacy questions or to exercise your rights, contact seelvie@monryte.com.
What we collect
Account & profile: name, email, handle (username), city and country, style and thermal preferences, bio.
Content: wardrobe items (photos of your own clothes and metadata like color, category, brand), outfit photos and captions, posts, comments, reactions, stories, weather-based recommendations you generate.
Usage: wear logs (what you wore and when), recommendation feedback (liked/disliked outfits), follows and blocks, reports you file, achievements and experience points, and which posts appeared in your feed (used to rank the feed; authors only ever see a total count, never who viewed).
Age: you confirm your date of birth for the minimum age check. The check runs on your device and the date stays there — it is not uploaded to our servers.
Approximate location: the city name you choose or pick from our autocomplete, plus latitude/longitude coordinates for that city (used to fetch weather for your forecasts). If you tap “Use my current location”, your device’s approximate position is used once to find the nearest city; we do not store those coordinates on our servers.
Photos you upload
Photos you upload may show people, including faces. Depending on your country of residence, these data may be classified as sensitive or special-category data under local privacy laws. We process them only to:
- Display your looks and wardrobe items (private closet or shared outfits, per your visibility setting).
- Power outfit recommendations (your photos are not used to train models; they stay private to you unless you share them).
By uploading you confirm: (1) you have the legal right to that image (you took it or own the rights), and (2) you consent to us storing and using it as described. Deleting an item, outfit, or post deletes the image; deleting your account deletes all your images straight away, before the account itself is erased.
Public photos can be checked: photos for public posts pass through a content check before they are published, and anyone can report a post. If a photo is flagged, you will be told you cannot post it here and encouraged to try another.
Why we process it (legal bases)
Contract: to provide the service you ask for (weather forecasts, outfit suggestions, social feed, account management).
Legitimate interests & legal obligation: to keep the community safe, prevent abuse and fraud, enforce our Terms, comply with law-enforcement requests (we respond to valid legal processes; we never disclose your data to authorities without a warrant).
Consent: where required by law, we ask your permission before processing your data in certain ways. For example:
- Personalized AI recommendations: Outfit suggestions can use AI services (Gemini, Groq, Cerebras, Mistral, OpenRouter, Grok). At sign-up and in Settings, you can opt in or out. If you opt out, recommendations use on-device logic instead; if you opt in, we send limited context (garment types, weather, occasion) to your chosen AI provider. We never send photos to these providers.
- Optional analytics: we do not track analytics today, but if we add them, we will ask your permission first.
You can withdraw consent at any time in Settings → AI sharing (or the equivalent in your onboarding flow). We will stop sending data to AI providers immediately.
Who we share it with (processors)
We do not sell your personal information. We share data only with third parties who help us run the app, under strict data-processing agreements:
Infrastructure & hosting
- Supabase, Inc. (database, authentication, storage, real-time notifications). Supabase uses AWS for hosting in eu-west-2 (London, UK). Data is encrypted in transit and at rest.
- nxtHost (NXTSERVERS SRL) (website hosting, Romania).
Weather & location
- OpenWeather Ltd (UK). We send: the city name and coordinates you chose. They return 5-day weather forecasts. You control the location in Settings or by tapping "Use my location" — if you don't, we do not send GPS data to them.
- Photon by komoot (Germany). City autocomplete suggestions as you type. We send what you type and, if you tap “Use my current location”, your approximate coordinates to look up the nearest city. No account details are sent.
- OpenStreetMap Foundation (UK). The map in the location picker loads map tiles from OpenStreetMap’s tile servers, which see your IP address and the map area you view. No account details are sent.
AI recommendations (only with your opt-in)
When you enable AI recommendations in Settings, we send limited data to one or more of these providers:
- Google Gemini (US/global)
- Groq Inc. (US/global)
- Cerebras (US/global)
- Mistral AI (France)
- OpenRouter (US/global)
- xAI / Grok (US/global)
What we send: your weather, the occasion you specified, and the pieces in your closet (category and the item names exactly as you typed them — so avoid putting personal details in item names). What we never send: photos, your user ID, name, email, real location (city name only if explicitly shared), or any other personal details.
You can opt out anytime in Settings; we stop sending data immediately.
Stock photos (when you search for inspiration)
When you search for inspiration photos (e.g., "winter coats"), we search one or more of these free stock-photo APIs (only if you have configured API keys):
- Unsplash (US)
- Pexels (Estonia)
- Pixabay (Germany)
We send: your search query only. We do not send your location, profile, or any personal data.
Error monitoring & crash reports
- Functional Software, Inc. / Sentry (Germany, de.sentry.io). When the app crashes or encounters an error, a crash report is sent with: your SEELVIE user ID (never your name or email), a stack trace, device model and OS version, the app version, and your locale. We also send performance timings for a sample of sessions (about 1 in 5) to find slow screens. Query strings are stripped. Reports are kept for 90 days then deleted.
Sign-in providers (only if you choose them)
If you sign in via Apple, Google, or another third-party provider, we receive your ID, email, and name from them. We store these to link your account.
Each processor acts under a data-processing agreement that requires them to:
- Process data only on our instructions.
- Keep data confidential.
- Implement appropriate technical and organizational security measures.
- Notify us without undue delay if a breach occurs.
- Delete or return data when we ask.
Data safety summary (for app stores)
Google Play Data Safety
This summary is based on the information we provided to Google Play. It is accurate as of the policy effective date.
| Data type | Collected | Shared | Required | Purpose |
|---|---|---|---|---|
| Name | Yes | No | Yes | App functionality |
| Yes | Processors only | Yes | Account management, login | |
| Photos | Yes | Processors only (Supabase) | No | Closet & outfit storage, social feed |
| User ID (first party) | Yes | No | Yes | App functionality |
| Location (city name) | Yes | Weather provider (OpenWeather) | Yes | Weather forecast |
| Contacts (if imported) | No | No | No | N/A |
Encryption: all data in transit is encrypted (HTTPS). Data at rest in Supabase is encrypted.
Deletion: you can delete your account and all associated data in Settings → Delete my account. Data is erased within 30 days.
Apple App Privacy (Privacy Nutrition Label)
This summary is for the App Store and is also accurate as of the policy effective date.
| Data type | Linked to you | Tracking |
|---|---|---|
| Name | Yes | No |
| Yes | No | |
| User ID | Yes | No |
| Location | Yes | No |
| Photos/Videos | Yes | No |
| Usage Data | No | No |
Data collection practices: SEELVIE does not share data with third parties for tracking or targeted advertising. We do not sell your data.
International transfers
Your data is primarily hosted in the UK (eu-west-2 via Supabase/AWS). Some processors store data outside the EEA:
To the United States
AI providers (Gemini, Groq, Cerebras, OpenRouter, Grok) and stock-photo providers are based in or use infrastructure in the USA. We transfer data to these providers only when you enable AI recommendations (with your consent) or when you search for photos.
Safeguards
For transfers outside the EEA/UK, we rely on:
- EU Standard Contractual Clauses (SCC 2021/914): for US-based processors.
- UK Addendum: for UK law compliance when transferring to countries without adequacy decisions.
- Processor security: each processor commits to appropriate technical safeguards (encryption, access controls, breach notification).
Privacy Shield note: we do not rely on the (invalidated) Privacy Shield. We use SCCs + supplementary measures.
How long we keep it
Stories: automatically expire and are deleted after 24 hours.
Account and content: while your account is active, we keep your profile, wardrobe items, outfits, posts, comments, and wear logs.
When you delete your account: all user data is erased immediately from the live database. Residual copies in backups are removed within 30 days.
Crash reports (Sentry): kept for 90 days, then automatically deleted.
Server logs: kept for up to 30 days for security and debugging purposes.
Support emails: kept for up to 3 years to maintain records of support issues and account disputes.
Legal holds: if a safety report, legal claim, or law-enforcement request applies to your data, we may retain the relevant records longer as required by law.
Your rights
You have the right to:
Access & portability
In-app: Settings → Download my data. This generates a JSON file with all your account data, outfits, wear logs, and usage records.
Or by email: contact seelvie@monryte.com with "I want to access my data" and we will respond within 30 days (GDPR) or 45 days (CCPA).
Correction
In-app: edit your profile, preferences, and closet items directly in Settings.
Or by email: tell us what needs correcting and we will update it.
Deletion (erasure)
In-app: Settings → Delete my account. Your account and all associated data are erased within 30 days. Note: public posts are removed immediately; copies in backups are purged within 30 days.
Or by email: request account deletion and we will process it.
Restriction & objection
You can object to certain processing or ask us to restrict how we use your data (e.g., stop sending recommendations). Contact seelvie@monryte.com with your request.
Privacy settings
Private account: only you can see your wardrobe and wear logs. Followers only: only people you follow can see your posts. Public: everyone can see your posts.
Blocked accounts: you can block any account; they cannot see your public posts, follow you, or message you. You can manage blocked accounts in Settings → Blocked accounts.
Complaints
If you believe we have violated your rights, you have the right to lodge a complaint with your data-protection authority. In the EU, you can contact your local Data Protection Authority (DPA). In the UK, that is the Information Commissioner's Office (ICO). In the US (California), contact the California Attorney General.
Response time
We respond to access and deletion requests within:
- 30 days under GDPR (European residents).
- 45 days under CCPA (California residents).
- 30 days otherwise (best effort).
US privacy (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you these rights:
Right to know
What: the personal information we collect, the source, and how we use it. How to exercise: Settings → Download my data, or email seelvie@monryte.com with "I want to know what data you have on me."
Right to delete
What: we will erase your personal information upon request. How to exercise: Settings → Delete my account, or email seelvie@monryte.com.
Right to correct
What: you can correct inaccurate information. How to exercise: edit your profile in Settings, or email us with corrections.
Right to opt-out of sale or sharing
Our position: we do not sell or share your personal information for cross-context behavioral advertising. Therefore, there is no "Do Not Sell or Share My Personal Information" link to display — but you have the right to request confirmation, and we will provide it.
Right to non-discrimination
We will not deny services, charge different prices, or provide different quality of service if you exercise your privacy rights.
Right to limit sensitive personal information
What we limit: we do not use your photos for purposes beyond what we disclosed. We do not infer sensitive categories (health, financial, racial/ethnic origin, religious beliefs, etc.) about you.
How to submit requests
Email seelvie@monryte.com with your request. Include:
- Your name and email.
- What you are requesting (access, deletion, correction, opt-out, etc.).
- Any relevant details (e.g., "delete my account").
Response time: we respond within 45 days. If we cannot verify your identity, we may ask for additional information.
Verification
For security, we verify your identity before processing requests. We may ask you to confirm your email and authenticate into your account.
Virginia, Colorado, Connecticut, Utah residents: similar rights apply to you under your state's privacy laws. The same processes apply.
Children
SEELVIE is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child under 13 has created an account, please contact seelvie@monryte.com and we will delete it.
Minimum age gate
At sign-up, you must provide your date of birth and confirm you are at least 13 years old (or older, if your country's law requires a higher age to consent to data processing — for example, 16 in several EU countries).
Parental consent
If you are under the minimum age in your country but your parent or guardian consents to your account, please have them create the account. We do not provide a formal "parental consent" flow today; countries that require it (e.g., some EU member states for under-16 users) should have the parent create the account with their own email.
Age gate for UGC
Following Apple 1.2.1(a) and Google Play UGC policy, users who do not meet the minimum age are blocked from posting, commenting, or uploading photos, even if they created an account with parental consent.
Content safety
SEELVIE has a zero-tolerance policy for content that sexualizes or endangers minors. Every report is reviewed within 24 hours and violating accounts are removed immediately.
Security
Data in transit: all communication between your device and SEELVIE servers uses HTTPS encryption.
Data at rest: your account and content data are stored in encrypted databases. Supabase uses row-level security (RLS) so other users can only read data you chose to share (public posts, followers' content, etc.).
Access controls: only authorized SEELVIE staff can access backend systems, and only when necessary to operate the service or respond to support requests.
No system is perfectly secure. If you discover a security vulnerability, please email seelvie@monryte.com. Do not publicly disclose it. We will acknowledge receipt within 48 hours and work with you to confirm and fix the issue.
Questions, data requests, or privacy concerns: seelvie@monryte.com