Privacy Policy

1. Who is responsible

Maison (“the app”) is operated by Anton Reznik (“we”, “us”), acting as the data controller for the personal data described here. You can reach us at support@maisonapp.ai for any privacy question, including the requests described in section 7.

2. What we collect

Account data

Your email address, and — if you sign in with Apple or Google — the account identifier those providers return to us. If you use Sign in with Apple with a private relay address, we only ever see the relay address. We never receive your Apple or Google password.

Photographs of you

To render outfits on your own likeness, the app asks for a short face scan (several selfies taken from different angles) and one full-length photograph. These are uploaded to our storage and used to produce a studio portrait sheet, which then serves as the visual reference for every outfit image the app generates for you.

We use these images to depict you. We do not use them to identify you, we do not run facial recognition or one-to-many matching against them, and we do not use them to train any general-purpose model.

Face detection during the scan — checking that your face is in frame and at the right angle — runs on the device. The selfies and the full-length photograph are then sent to Google (Gemini) to describe your features, and to OpenAI and Google to render your portrait reference and your outfits. Both process them on our behalf, under API terms that do not permit training on your content. Nobody uses them to identify you, and no biometric template is created or stored.

Physical characteristics

Height, build, body proportions inferred from your full-length photograph, colouring (skin, hair and eye tones), and any clothing or shoe sizes you enter. This is what allows the app to advise on fit rather than on looks alone.

Your wardrobe

Photographs of your garments, together with what we derive from them or you provide: category, colour, material, brand, price, and when you last wore an item.

Forwarded order-confirmation emails arrive through Postmark. We send the message text to OpenAI to extract the items, and keep the sender address, the subject line and the first 4,000 characters of the text while your account exists. The excerpt contains whatever the retailer put there, which may include your delivery address or order number. A pasted product link is fetched by Firecrawl, and the page text goes to OpenAI for the same purpose. When you search for a product, the garment description and your size are sent to Serper as a search query; when you look for a cheaper alternative, the city you have set and your country go with it so results come from shops in your market. Never your name, your account or your photographs.

Approximate location

Your time zone is read from the phone’s clock whether or not you grant location, so the morning look arrives at the right hour. If you grant location permission, the phone passes the coordinates to Apple’s geocoding service, which turns them into a city and a country; what reaches us is the city and the country, never the coordinates. The city fetches the weather your outfit is planned around; the city and the country also go with a search for cheaper alternatives, as described above. You can set the city by hand instead and refuse the permission entirely.

Usage and diagnostics

Usage analytics — which screens you open and which features you use — are recorded in PostHog, tied to your account identifier and email address. We use this to find broken journeys and to understand which parts of the product earn their keep.

Crash reports go to Sentry: device model, operating system, app version and the stack trace of the error. We do not attach your account to them, though the technical log sent with a report can include the addresses of the requests the app was making at the time, and some of those carry your account identifier. They never contain the photographs themselves.

Advertising attribution

To learn which advertisement brought you to Maison, installs, sign-ups and purchases are reported to our attribution partner AppsFlyer together with Apple’s per-app vendor identifier (IDFV), your IP address and your Maison account identifier, so a conversion can be tied to the campaign that led to it. If you allow tracking when iOS asks, the device advertising identifier (IDFA) is added, which lets that match be made across apps. If you decline, no IDFA is used; Apple’s SKAdNetwork still reports that an install came from a campaign, without identifying you. Maison shows no advertisements and builds no advertising profile. You can change your tracking choice at any time in iOS Settings → Privacy & Security → Tracking.

Subscription data

Whether you are on a free or paid plan, and when a trial or renewal falls due. Our subscription provider, RevenueCat, receives your account identifier, Apple’s purchase receipt, your IP address and Apple’s per-app vendor identifier, plus the AppsFlyer install identifier, so that a purchase can be attributed to the campaign that brought you; the advertising identifier is added only if you allowed tracking. RevenueCat forwards purchase and trial events to AppsFlyer for that purpose. We never receive or store your card details — Apple handles payment in full.

Notifications, widgets and Live Activities

If you enable notifications, we store a push token for your device and deliver messages through Expo’s push service. Live Activities — the lock-screen card that follows a look while it renders — use a separate token that Apple issues for that activity; we use it only while the activity runs, sending updates through Apple’s push service. Home-screen widgets read your looks on the device only; nothing leaves the phone for them.

3. Why we use it

• To provide the service you asked for: composing outfits, rendering them on your likeness, advising on purchases and reviewing what you are wearing.
• To send the notifications you have enabled, such as the morning look being ready.
• To operate, secure and debug the app, and to enforce usage limits.
• To manage subscriptions, trials and restores.
• To measure which of our own advertisements work.

We do not sell your personal data and we do not build advertising profiles. Maison shows no advertisements. We do measure our own advertising: installs and purchases are attributed to the campaign that brought you (section 2), and your advertising identifier joins that measurement only if you allow tracking.

4. Legal bases (UK and EU users)

• Performance of a contract — account data, wardrobe data and subscription data, all of which are necessary to give you the service.
• Consent — your face and full-length photographs, your physical characteristics, location, push notifications and, if you allow tracking, the advertising identifier used for attribution. Each is requested explicitly and each can be withdrawn, either in the app, in iOS Settings or by deleting your account.
• Legitimate interests — diagnostics, product analytics, and install and conversion attribution without the advertising identifier, each limited to what is needed to keep the app working and to measure our own advertising, and balanced against your interests.

5. Who processes it

We keep the list of third parties short and name all of them. Each acts only for the purpose stated, as a processor on our instructions under a data processing agreement — with one exception. When Apple or Google signs you in, and when Apple handles an App Store purchase, they act as independent controllers under their own privacy policies; only Apple’s push service, which delivers Live Activity updates, works on our instructions.

Your account, your photographs and your wardrobe are stored in the European Union. Where a processor above is based in the United States, transfers are made under the European Commission’s Standard Contractual Clauses (with the UK Addendum where applicable) and, where the processor is certified, under the EU-U.S. Data Privacy Framework.

Images sent to our AI processors are sent for the sole purpose of generating your result. Under the API terms we operate on, that content is not used to train their models.

6. How long we keep it

• Account, wardrobe, portrait and generated images: for as long as your account exists.
• Forwarded-email excerpts: for as long as your account exists. An email from an address we cannot match to any account is kept so we can see why the import failed, until we review it or you ask us to remove it. Push tokens: disabled when you sign out of a device and deleted with your account.
• After you delete your account: removed promptly, and in any case within 30 days, including from backups on their normal rotation. We also delete your analytics person and its events from PostHog.
• Crash reports, attribution records and subscription records are held by Sentry, AppsFlyer, RevenueCat and Apple respectively, and are kept according to those providers’ own retention periods.
• Records we are required to keep for tax or accounting purposes: as long as the law requires.

7. Your rights

If you are in the UK, the EU or another jurisdiction with comparable law, you have the right to access the data we hold about you, to correct it, to erase it, to restrict or object to its processing, to receive it in a portable form, and to withdraw any consent you have given. Withdrawing consent does not affect processing already carried out.

The fastest route to erasure is in the app itself — see Account deletion. For anything else, write to support@maisonapp.ai from your account address and we will respond within 30 days. You also have the right to complain to your national data protection authority.

If you are a California resident: we do not sell personal information. Our attribution partner receives device and account identifiers in all cases to measure which advertisement brought you to Maison (section 2); the advertising identifier is included only if you allow tracking, and that part California law may treat as “sharing”. You can opt out of it by declining tracking when iOS asks, or at any time in iOS Settings → Privacy & Security → Tracking. You may request access, deletion or correction through the routes above, and we do not discriminate against you for exercising your rights.

8. Security

Data is encrypted in transit and at rest. Access to production data is restricted to what is necessary to operate the service. Your photographs and generated images are stored under long, unguessable addresses so the app can display them; they are not listed or searchable, but the addresses are not password-protected — anyone who obtains one can open it. No system is perfectly secure, and we will tell you without undue delay if a breach affects your personal data.

9. Children

Maison is not intended for anyone under 17 and we do not knowingly collect data from them. If you believe a child has given us personal data, write to us and we will delete it.

10. Changes

If we change this policy materially, we will update the date at the top of this page and give notice in the app before the change takes effect.

11. Contact

support@maisonapp.ai