Last updated: 2026-11-10
1. Who is responsible for your data
The data controller is Lindoi di MBN, Capriate San Gervasio (BG), Italy, VAT number IT04121240164 ("FaStyle Pro", "we"). For any question about your data or to exercise your rights, write to privacy@fastylepro.com.
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account: email, name, encrypted password | Create and protect your account | Contract (Art. 6(1)(b) GDPR) |
| Profile and preferences: country, language, style preferences, measurements and skin tone you enter or confirm | Personalise looks, sizes and colour harmony | Contract |
| Wardrobe: item details and photos | Provide your digital wardrobe, Mix & Match and suggestions | Contract |
| Beauty profile: skin type, concerns, sensitivities, limits | Beauty Council recommendations that respect you | Explicit consent (Art. 9(2)(a) GDPR), as some data may concern health |
| Photo and selfie analysis | Recognise items, estimate skin tone and undertone | Explicit consent, which you can withdraw at any time |
| Body measurements (chest, waist, hips, shoulders, inseam) you confirm | Sizes and avatar | Contract |
| Try-on images you choose to save (Full Look) | Keep your try-ons in your private gallery | Contract; you can delete them at any time |
| Conversations with the Beauty Council | Answer your questions and keep the history you see | Contract |
| Subscription status (never card data) | Enable the features of your plan | Contract |
| Approximate location, if you allow it | Weather forecast for the Smart Timeline | Consent |
| Notification token | Send the notifications you allowed | Consent |
| Support tickets | Answer your requests | Contract and legitimate interest |
| Security logs | Prevent abuse and protect accounts | Legitimate interest (Art. 6(1)(f) GDPR) |
3. Artificial intelligence
When you use the Beauty Council or photo recognition, our servers send the AI provider only what is needed for that answer: your request, the relevant items in your wardrobe, your beauty profile and, if you consented, the photo. The answer is checked on our servers before it reaches you, and suggestions that refer to items you don't own are discarded.
AI calls always pass through our servers: AI providers never receive your password, and the service keys are never exposed to the app. We only use business API plans whose terms exclude using customer data to train models. The AI provides aesthetic suggestions; it does not take decisions that have legal or similarly significant effects on you.
On-device analysis. The live make-up mirror (face points) and the camera body measurements (pose and outline) run entirely on your phone or in your browser: the images are not sent to us or to third parties. Only the measurements you confirm are saved.
Try-on on your photo. The garment is cut out and fitted to your photo entirely on your device: your photo is not sent to us or to third parties. Only the final image, if you choose to save it, is stored privately in your account and can be deleted at any time.
Your face on your style twin. Only if you ask for it and give your explicit consent, your face and hair are cut out of a photo on your device and stored in your private folder, visible only to you, so your style twin shows your face in every image, in the app and on the web. We do not use it to identify or recognise you, we do not share it and we do not use it for any other purpose (legal basis: your consent, Art. 6(1)(a) and 9(2)(a) GDPR). You can delete it at any time from the style twin; it is also deleted together with your account.
Find and try from a photo. When you ask us to recognise items in a photo, the photo is sent through our servers to the AI provider only to identify the objects, then it is deleted immediately. Brand and shop are shown only for brands that are part of the FaStyle network; the brand only receives anonymous counts (how many times a product was recognised or its shop opened), never your photo or your identity.
Voice chat. Dictation and read-aloud use the free speech engines already built into your device or browser (for example Apple, Google or Microsoft). FaStyle does not receive or store your voice: only the transcribed text is sent, like a typed message. Depending on your device or browser, the speech provider may process the audio under its own terms. You can always type instead.
Community. Looks you choose to share, and photos you enter in style challenges, are visible to other FaStyle members together with your first name and the initial of your surname; you can delete them at any time. Style points are calculated by our servers from your activity (posts, likes, saves, votes, invitations) and are used only to unlock the offers of network brands; a brand only sees how many times its code was unlocked, never who unlocked it. We store the language you use in the app to send you announcements and notifications in that language.
4. Community, reports and blocks
When you share a look in the community or join a challenge, other users see the photo, title, description, your first name with the initial of your surname and your skin tone (Monk scale) if you entered it. Before posting you accept the community rules; we record the date.
If you report content we keep the report (reason, any details, a copy of the reported content) to review it and decide whether to remove it. If you block a user we record the block to hide their content. Legal basis: our legitimate interest in keeping the community safe (Art. 6(1)(f) GDPR). If you delete your account, your reports remain without your name and your blocks are deleted.
5. Voice chat
Voice chat with the Beauty Council uses your device's speech recognition and text-to-speech: usually Google's services on Android and Apple's on iPhone, which may process audio on their servers under their own privacy policies. Audio never reaches our servers: we only receive the text of your question, as if you had typed it. The microphone is used only when you start voice chat.
6. Service providers
We rely on carefully selected providers, bound by data processing agreements:
| Provider | Service | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU (Ireland) |
| Google Firebase | Website hosting, push notifications | EU / USA |
| RevenueCat | Subscription status from the stores | USA |
| Google (Gemini), with Anthropic and OpenAI as backup | AI processing for the Beauty Council and photo recognition | USA |
| Resend | Service emails and support replies | USA |
| MET Norway (Norwegian Meteorological Institute) | Weather forecast, requested by our server with an approximate position (about 11 km), never with your identity | Norway (EEA) |
| komoot (Photon, OpenStreetMap data) | Finding the coordinates of a city you type in (receives only the city name, from our server) | EU (Germany) |
| Stripe | Fee payments of partner brands (not of app customers) | EU / USA |
Apple and Google process payments as independent controllers, under their own privacy policies.
7. Transfers outside the EU
When a provider processes data outside the European Economic Area, the transfer is protected by the EU-US Data Privacy Framework, where the provider is certified, or by the European Commission's Standard Contractual Clauses.
8. How long we keep data
- Account, wardrobe, photos, beauty profile, conversations and tickets: as long as your account exists. When you delete the account, they are erased immediately.
- Residual copies in encrypted backups: overwritten in their normal rotation cycle.
- Security logs: up to 12 months.
- Data we must keep by law (e.g. tax records of direct payments): for the period required by law.
9. Your rights
You have the right to access, correct, delete and port your data, to restrict or object to processing, and to withdraw consent at any time without affecting earlier processing. You can delete your account directly from the app (see how) or write to privacy@fastylepro.com. We respond within one month.
You also have the right to lodge a complaint with a data protection authority, in particular in the EU country where you live or work. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).
10. Minimum age
FaStyle Pro is intended for people aged 16 and over. We do not knowingly collect data from younger people; if you believe this has happened, write to us and we will delete it.
11. Security
Data is encrypted in transit, access is limited by role and protected by row-level security rules in the database, staff accounts use a second authentication factor, and AI service keys are kept only on our servers.
12. Changes
If we change this policy in a way that matters to you, we'll inform you in the app before the changes take effect. The date at the top shows the latest version.