This policy explains how GEEKDEV TECHNOLOGIES, SRL (“we”, “us”) handles information in connection with the Vestly iPhone app and this website (together, the “Service”). Vestly makes pictures of you wearing clothes, from photographs you give it.
The short version
- Vestly needs two photographs of you — one of your face, one of your whole body. They are stored on our server so the app can make new pictures from them.
- Your photographs are sent to an outside image service every time a picture is made. That is how the picture gets made; there is no way around it. Copies can exist there for up to 30 days.
- There is no account. No name, no email, no password. We know you only by the subscription identifier Apple gives us.
- The pictures you make stay on your phone. We do not keep them.
- You can delete your data from inside the app, at any time, without asking us.
- We never sell your personal information.
1. The photographs you give us
To set Vestly up you provide two photographs of yourself: one full-body and one of your face. Every picture the app makes is built from that pair, so they are kept on our server until you replace or delete them. You may only upload photographs of yourself — see section 11 and our Terms.
When you make a look you may also send up to three photographs of clothes — a garment on a rack, a shop window, a screenshot from an online shop. These are used to make that one picture and are not kept as a collection of yours.
Before anything is uploaded, your phone re-encodes each photograph to a smaller JPEG. Camera metadata attached by your phone, including any location tag, is not carried into the file we receive.
You also answer four short questions at the start (the clothes you wear, an age range, what you want the app for, and how you heard about us) and swipe six looks so the app can learn your taste. Those answers are kept with your profile.
2. Where your photographs go
Two places, and only two:
- Our own server, run on Cloudflare (Workers, D1 and R2 storage) in their global network. Your two photographs are stored there. The pictures the app makes are not stored there — the server keeps only a temporary link to the result while it is being delivered to your phone.
- The image service that makes the picture. Each time you make a look, your two photographs and any garment photographs are sent to Atlas Cloud, which runs the image model that produces the result. Under their terms, uploaded images and results may be held for up to 7 days, and the model provider they use may hold a copy for up to 30 days. Those copies are not used to train their models. We cannot delete them for you; they expire on that schedule.
Nobody else receives your photographs. They are not published, not shown to other users, and not used for advertising.
3. What stays on your phone
Every picture you make is written to your phone, together with a short record (the date and the caption the app shows). The last 100 are kept; older ones are removed automatically. These files are excluded from iCloud backup on purpose, so a copy cannot outlive the deletion this app promises. Deleting the app removes them.
The small settings the app remembers — your four answers, your swipes, the clothes you chose to see — are stored in the normal iOS preferences area, which is included in an iPhone backup.
A picture reaches your camera roll only when you tap Save to Photos, and iOS asks you for permission the first time.
4. Who you are to us
Vestly has no account system. We never ask for a name, an email address or a password. When you subscribe, Apple gives the app a transaction identifier, and that identifier is how our server recognises your phone on every request. It is a long number, not a name — but Apple and our subscription provider can connect it to your Apple Account, so we treat it as personal data.
5. Deleting your data
In the app: Settings → Delete my data. It runs immediately, without writing to us. It deletes:
- your two photographs, from our storage;
- your profile and your style answers;
- the records of the pictures you made;
- and, on your phone, every picture and record Vestly holds.
Two things are deliberately kept, and neither contains a photograph or an answer of yours:
- How many pictures have been made on your subscription, and what they cost us. Your subscription outlives the deletion, so this counter has to as well — otherwise deleting would hand out a fresh monthly allowance each time.
- Cost and timing rows we reconcile against the image service's bill. They carry no identifier once your records are gone.
If a picture is being made at the moment you delete, its job record is stripped of everything that connects it to you and is removed as soon as the picture finishes. Copies already held by the image service (section 2) expire on their own schedule — we cannot reach into them.
Deleting your data does not cancel your subscription. Cancel in iPhone Settings → your name → Subscriptions.
6. When you write to us
Our support form and our email address give us what you send — your email address, your message, and anything you add such as your iPhone model. The form is processed by Formspree, which delivers it to us by email. We use it to answer you and keep it only as long as needed for that.
7. Usage analytics and crash reports
To see which parts of the app are used and to find bugs, we use PostHog, hosted in the European Union. It receives events such as “the app was opened”, “a picture was made” or “a picture failed, and why”, along with your device type, iOS version, app version and a randomly generated identifier. If the app hits an internal error we also receive a technical report of what went wrong.
These events never contain your photographs, the pictures you make, or your subscription identifier. Screen recording is switched off in the app and cannot be switched on remotely.
Apple may separately give us anonymous, aggregated statistics about installs and crashes, if you allowed that in your iPhone settings.
8. Purchases
Payment is handled by Apple; we never see your card or your billing details. We use RevenueCat to tell whether a subscription is active. RevenueCat receives the Apple transaction identifier and the purchase information Apple provides — never your photographs and never your name.
9. Who we share with
We do not sell your personal information and we do not share it for advertising. We share it only with the providers that make the Service work, and only with what each one needs: Cloudflare (our server and storage), Atlas Cloud (making the picture), RevenueCat (subscription status), PostHog (usage analytics), Formspree (support messages) and Apple (payment). We may also disclose information where the law requires it.
10. How long we keep things
- Your two photographs: until you replace them, delete your data, or we shut the Service down.
- Records of pictures made: deleted with your data.
- Counters and cost rows: kept as described in section 5.
- Support messages: as long as needed to help you and keep a record.
- Analytics events: kept by PostHog under their retention schedule.
11. Photographs of other people, and of children
Vestly is for photographs of yourself. Do not upload a photograph of anyone else, and never a photograph of a child. The app asks you to confirm this before you upload. If we learn that a photograph breaks this rule we delete it and may end access to the Service.
Vestly is not directed to children under 13, or the minimum age in your country, and we do not knowingly collect their personal information. If you believe a child has given us personal information, write to us and we will delete it.
12. Your rights
Depending on where you live — for example under the GDPR or the CCPA/CPRA — you may have the right to see, correct, delete or export the personal information we hold, and to object to or restrict some processing. Because there is no account, the fastest route for most of it is inside the app: replace your photographs, or use Delete my data. For anything else, including asking us to stop collecting usage analytics, write to info@geekdevtech.com or use the support form, and we will act on it.
13. Security
Everything the app sends is encrypted in transit, and the app checks the certificate of our server rather than trusting whatever the network presents. Access to stored photographs is limited to the request that proves it holds your subscription. No method of transmission or storage is completely secure.
14. Changes to this policy
We may update this policy. When we do, we change the date at the top and, where it matters, tell you in the app.
15. Contact
Questions about this policy? Use the support page or write to info@geekdevtech.com.