Privacy Policy

Effective Date: September 20, 2025
App Version: 0.1.0

1. Data Controller

The data controller for Recloth application users is:

2. Scope and Purposes of Data Processing

Personal data is processed for the purpose of:

• creating and managing user accounts
• clothing photo analysis (AI)
• automatic listing creation on sales platforms (OLX, Allegro, Recloth)
• ensuring application security and maintenance
• fulfilling legal obligations

Categories of processed data:

• login data (email, UID, Google ID, Apple ID, name, profile picture)
• user-uploaded photos
• listing data (title, description, price, parameters)
• phone number (listing contact)
• purchase data (purchased credit pack, transaction identifier)
• user preferences
• OAuth tokens for sales platform integrations

3. Legal Basis

Data is processed based on:

• art. 6 ust. 1 lit. a GDPR – user consent (e.g., photo analysis, marketing)
• art. 6 ust. 1 lit. b GDPR – contract performance (providing app services)
• art. 6 ust. 1 lit. f GDPR – legitimate interest of the controller (analysis, security)

4. External Services

Data may be processed by the following providers:

• Google LLC – Firebase (authentication, database, photo storage), Gemini AI (image analysis)
• Apple Inc. – Sign in with Apple and in-app purchases (App Store) on iOS; payment is handled by Apple, Recloth does not receive payment card data
• Amazon Web Services – AWS Amplify (hosting)
• Kaleido AI GmbH (Remove.bg) – background removal from photos
• OLX Sp. z o.o. – sales integration
• Allegro.pl Sp. z o.o. – sales integration

Data is processed mainly within the European Union.

5. Data Retention

• account data is stored until deleted by the user
• analysis history and photos – until account deletion or manual removal
• application logs – up to 30 days
• OAuth tokens – stored until integration is disconnected

6. Security

• all connections are encrypted with HTTPS/TLS 1.3
• data at rest is encrypted in Firebase/GCP
• data access is restricted by Firebase Security Rules
• tokens and keys are stored in encrypted form

7. User Rights

Every user has the right to:

• access their data
• rectification and editing of data
• deletion of account and data
• restriction of processing
• data portability (to be implemented)
• object to processing

To exercise these rights, please contact the administrator:rodo@xfaang.com

You can delete your account and all associated data at any time, directly in the Recloth app: Profile → Delete Account.

8. Cookies and Local Storage

The application uses:

• Technical cookies – necessary for app functionality
• Firebase Auth Cookies – maintaining login session
• LocalStorage/SessionStorage – storing language preferences, interface settings, form data

9. Privacy Policy Changes

The privacy policy may be updated periodically. The current version will be published in the app and on the Recloth.io website.

10. Recloth Shop

Recloth Shop (shop.recloth.io) uses e-commerce infrastructure provided by yournextstore.com.

Data processed within the store includes information necessary for order fulfillment (contact details, delivery address, payment data). Recloth is responsible for data processing in the online store, while some technical functionalities are handled by an external provider.