Privacy policy

The controller of your personal data is «pełna nazwa spółki», registered at «ulica, kod pocztowy, miasto», «KRS / NIP / REGON».

For anything concerning personal data or this policy, write to support@omotia.pl.

We collect only what the fitting room needs:

• Account data: your email address and a password stored in encrypted form. If you sign in through an outside provider (such as Google), we receive only your email address and confirmation of your identity from it. We do not store your name or profile picture.
• Consents and settings: which version of the terms and policy you accepted, when you gave or refused each consent, your chosen language and department (women's or men's).
• Your photo: one full-length photo that you upload yourself.
• Photos of your clothes: if you add clothes you already own to the Closet, their photos and the garment images cut out of them.
• Try-ons: the generated images, and your rating of a try-on if you ask for it to be generated again.
• Closet: saved products, outfits, and their names, notes and tags.
• Plan and payments: your plan, credit balance, use of daily allowances and purchase history. Card or BLIK details go straight to the payment operator and never reach us.
• Referrals: whether your account was created from someone's referral link, and how many accounts were created from yours.
• Where you came from: if you create your account after following a link from our promotion (such as the link in our TikTok profile), we note with your account which link it was (for example "tiktok / social / bio_link"). Taps on the sign-up button on such a link's page are counted only as a total, one number per day, with nothing about you.
• Only with your consent: what you do in the feed (which products you saw, opened, saved, tried on or hid) and app usage statistics (screens opened, time in the app, search phrases, errors, device type: phone, tablet or computer). We store no IP address or browser data with them.
• Technical data: your IP address and basic browser information in server logs, for security.

We do not collect your name, phone number or home address.

• Providing the service: your account, try-ons, Closet and history. Basis: performance of the contract for electronic services (GDPR Art. 6(1)(b)).
• Your photo and photos of your clothes: your explicit consent, asked for in a separate, unticked box before your first photo is uploaded (Art. 6(1)(a)). You withdraw it by deleting the photo.
• Plus, credits and payments: performance of the contract (Art. 6(1)(b)). Keeping proof of purchase: a legal obligation under tax and accounting law (Art. 6(1)(c)).
• Personalised feed: your consent (Art. 6(1)(a)). This is profiling: we use your choices to decide which clothes to show higher. Without consent, products are shown in random order.
• App statistics: your consent (Art. 6(1)(a)). Article 399 of the Polish Electronic Communications Act also requires it, because the app's script sends this information from your device.
• Account emails (address confirmation, sign-in, welcome, payments): performance of the contract (Art. 6(1)(b)). We send marketing emails only with your separate consent (Art. 6(1)(a)).
• The referral programme: performance of the contract (Art. 6(1)(b)).
• Learning which promotion brings new users (the link an account was created from, and the daily number of taps): our legitimate interest (Art. 6(1)(f)). You can object by writing to us.
• Security, abuse prevention and error diagnostics: our legitimate interest (Art. 6(1)(f)).
• Complaints, requests and defending legal claims: legal obligation (Art. 6(1)(c)) and our legitimate interest (Art. 6(1)(f)).

We treat the photo you upload with particular care.

• We use it only to generate your try-ons. We never publish it, share it with other users or sell it.
• Before storing it, we remove the file's metadata, including GPS location.
• To generate a try-on we send it to Google's AI models (Vertex AI) running in the European Union. Google processes it on our instructions and, under its contract with us, does not use it to train its models.
• We do not train any models on it either.
• We do not use it for biometric identification or face recognition, and we do not create a biometric template from it.
• You can replace or delete it at any time in Profile. Replacing or deleting the photo also deletes the try-ons generated from it.

The same rules apply to photos of clothes you add to the Closet.

• Your photo: until you replace or delete it, at the latest until your account is deleted.
• Try-ons, outfits and photos of your clothes: until you delete them or your account.
• Account data: for as long as you have an account. After it is deleted we erase the data without undue delay, within 30 days at the latest.
• Feed activity: 180 days. The preferences derived from it expire after 180 days without activity.
• App statistics: 180 days, and search phrases 30 days.
• The promotion link your account was created from: for as long as you have an account.
• Technical logs: 30 days.
• Record of consents and account deletions: 5 years, as evidence. It contains only the account identifier and the type of event.
• Proof of purchase: 5 years from the end of the year in which the payment was made, as tax law requires. After your account is deleted we keep it without any link to you.
• Inactive accounts: after 24 months without a sign-in we remind you of your account, and after 27 months we delete it.

We do not sell your data. We entrust it only to providers the service cannot run without, under data processing agreements:

• Supabase, Inc.: database, sign-in and file storage, on servers in Frankfurt.
• Google Cloud EMEA Limited: application servers, task queues and the models that generate try-ons (Vertex AI), in Google Cloud regions in the European Union.
• Zoho: sending email, from a data centre in the European Union.

Each of them processes data only on our documented instructions and only as far as necessary.

Some data also goes to organisations that process it as independent controllers, under their own policies:

• Stripe Payments Europe Limited (Ireland) handles payments. We pass it your email address and an internal account identifier; you give your card or BLIK details directly to Stripe.
• Shops and affiliate networks: when you tap “See in shop”, you go to their site through a partner link, and from then on they process your data.
• A sign-in provider (such as Google), if you create your account through it.

We store and process your photos, try-ons and other data on servers in the European Union: the database in Frankfurt, and the application and AI models in Google Cloud's European regions.

Some providers belong to groups based outside the European Economic Area (for example Supabase, Inc. and Stripe group companies in the United States). Where they access data from outside the EEA, this happens under the mechanisms of Chapter V GDPR: an adequacy decision (the EU-US Data Privacy Framework) or standard contractual clauses.

Under the GDPR you have the right to:

• access your data and receive a copy of it,
• have inaccurate data corrected,
• have your data erased, the “right to be forgotten”,
• restrict processing,
• port your data to another controller,
• object to processing based on our legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

You can change or delete your photo, try-ons, consents and account yourself in Profile. We will send you a copy of your data, including your photo and try-ons as files, on request to support@omotia.pl. We respond without undue delay, at the latest within one month.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, if you believe we process your data unlawfully.

This website (omotia.pl) sets no cookies, collects no visit statistics, and makes no requests to third-party services. Typefaces are served from our own server, so not even they reveal your IP address to anyone.

In the app, we use without asking only what it needs to work: a session cookie once you sign in, short-lived cookies needed during sign-up and sign-in, a cookie holding your chosen language, a cookie remembering a referral link (30 days), your remembered position in the feed (until you close the tab) and a cache of the app's own files.

Two things are optional and run only with your consent, which the app asks for: the personalised feed and app statistics. The boxes are never ticked in advance, refusing is as easy as agreeing, and you can change your mind at any time in Profile, under Privacy. Until you answer, we collect neither.

We use no advertising or tracking cookies, no third-party analytics tools, and no session recording.

Try-ons are generated by Google's AI models (Vertex AI), which combine your photo with the product photo. Every such image is visibly labelled in the app as generated, and a downloaded file carries that information in its metadata.

If you agree to the personalised feed, the order of products is set automatically from your choices. This is profiling, but it only affects which clothes you see higher up, and has no legal or similarly significant effect on you.

We make no decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. We do not profile you for advertising.

Omotia is intended for people aged 16 and over. We do not direct the service at children and do not knowingly collect their data. If we learn that an account was created by someone younger, we delete it together with its data.

If we change how we process data, we will update this policy and change the date at the top of the page. We will email signed-in users about significant changes in advance, and if a change affects your consents, we will ask for them again.

For personal data matters: support@omotia.pl.

For everything else: support@omotia.pl.

Postal address: «pełna nazwa spółki», «ulica, kod pocztowy, miasto».