Privacy Policy

01 Overview

Stirolo is an AI personal-stylist application operated by Stirolo, Inc. ("Stirolo", "we", "us"). We collect data with one purpose: to help you dress better. We don't sell it, we don't trade it, and we don't use it to train models for anyone else.

If a clause in this document ever feels evasive or unclear, that's a bug — tell us at privacy@stirolo.app and we'll rewrite it.

02 What we collect

We collect only what's needed to make your styling recommendations work.

• Profile data — name, email, age range, location (city level), measurements you choose to provide.
• Photos you upload — body photos for fit analysis, wardrobe item photos for cataloguing.
• Wardrobe metadata — categories, colors, brands, wear counts, costs you log.
• AI chat history — your styling conversations, retained so the assistant remembers context.
• Usage data — which outfits you save, skip, or rewear (so recommendations improve).
• Device data — device model, OS version, app version, crash reports. Standard mobile telemetry.

03 How we use it

Your data is used to personalize your styling experience, run the AI models that power recommendations, send you notifications you opted into, prevent fraud and abuse, and meet our legal obligations.

We do not use your photos or wardrobe data to train foundation models. We do not sell, license, or share your data with advertisers or data brokers — ever.

04 Who we share with

• Infrastructure providers (AWS, Cloudflare) — for storage and delivery only. They cannot decrypt your wardrobe data.
• Payment processors (Stripe, Apple, Google) — billing data only, not your wardrobe or AI conversations.
• Law enforcement — only on a valid legal order, narrowly scoped, with notification to you where the law permits.

05 Storage & security

Photos and wardrobe data are end-to-end encrypted at rest (AES-256) and in transit (TLS 1.3). Encryption keys are derived per-user and held in a hardware security module. Stirolo engineers cannot read what's in your closet.

We're SOC 2 Type II certified, undergo annual independent penetration testing, and our infrastructure is hosted in the region you signed up from — US users in us-east, EU users in eu-west-1, and so on.

06 Your rights

• Access — see everything we hold on you, in a structured export.
• Rectify — correct any information that's inaccurate.
• Delete — wipe your entire account from one screen, no questions asked.
• Port — take your wardrobe data with you, in JSON or CSV.
• Object — opt out of specific processing while still using the app.

Settings → Privacy → "My Data" exposes all of these in one place. No support ticket required.

07 Cookies

Our marketing website (stirolo.app) uses minimal first-party cookies for analytics and authentication. We use no third-party advertising trackers. You can clear cookies at any time and the site will continue to work.

The Stirolo mobile app does not use web cookies — it uses standard iOS/Android local storage for caching only.

08 GDPR & regional rights

If you're in the European Economic Area, the UK, or Switzerland, Stirolo is the controller of your data. The lawful basis for processing is contractual necessity (you signed up to receive styling recommendations) and, where applicable, your explicit consent.

California residents have all rights under the CCPA/CPRA. Brazilian residents have rights under the LGPD. Reach out to privacy@stirolo.app with any regional request — we respond within 30 days.

09 Children

Stirolo is not intended for users under 16. If you believe a child has created an account, please contact privacy@stirolo.app and we'll delete the account and associated data promptly.

10 Contact

Email privacy@stirolo.app for any privacy question, request, or concern. For postal mail: Stirolo, Inc., 99 Bushwick Ave, Brooklyn NY 11211, USA.