Privacy Policy

This Privacy Policy explains how Astur Labs (“Astur Labs”, “TRYSHOP”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use the TRYSHOP website, mobile applications, APIs, and related services (collectively, the “Service”).

By using the Service, you agree to the practices described in this Policy and to our Terms of Use. If you do not agree, do not use the Service.

1. Who we are

Astur Labs is the data controller for personal information processed through the Service. You can reach us at contact@tryshop.app.

2. Information we collect

a. Information you provide

Account information. Name, email address, password, date of birth (to verify age), and any profile details you choose to add.
Photos and visual inputs. Photos of yourself, garments, or your wardrobe that you upload for virtual try-on, styling, or wardrobe features. These images may contain biometric features such as your face and body shape.
Style and body information. Measurements, sizes, style preferences, color preferences, occasions, and similar inputs you share to personalize recommendations.
Payment information. When you purchase a subscription or AI credits, payment is processed by Apple (App Store), Google (Google Play), or another payment processor. We do not store full payment card numbers. We receive limited transaction data such as purchase confirmation, plan, and partial billing details.
Communications. Messages, support requests, survey responses, and feedback you send to us.

b. Information collected automatically

Device and technical data. Device model, operating system, app version, language, time zone, mobile carrier, IP address, and crash logs.
Usage data. Features used, screens viewed, actions taken, items tried on, items saved, search queries, session duration, and referring URLs.
Approximate location. Derived from IP address. We do not collect precise GPS location unless you grant the corresponding permission in the app.
Cookies and similar technologies on our website (see Section 7).

c. Information from third parties

App stores. Apple and Google share transaction and receipt data when you purchase or restore a subscription.
Social sign-in. If you choose to sign in with a third-party provider (such as Apple or Google), we receive the profile information that provider releases to us, in line with your settings.
Analytics, attribution, and advertising partners. Aggregated and pseudonymized data to help us measure engagement and ad performance.

3. How we use information

We use personal information to:

provide and operate the Service, including running AI models that power virtual try-on, styling, and wardrobe features;
generate AI outputs from your inputs (for example, processing your photo to render a try-on);
create, secure, and manage your account, and verify your age;
process subscriptions, in-app purchases, and AI credit balances;
personalize content, product recommendations, and editorial suggestions;
send service messages (account updates, security alerts, receipts) and, with your consent where required, marketing communications;
improve the Service, including evaluating and improving our AI models (see Section 4);
detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Use;
comply with legal obligations and enforce our agreements.

Legal bases (EEA / UK / Canadian Quebec law). Where applicable, we rely on: performance of a contract (to provide the Service you request), our legitimate interests (to operate, secure, and improve the Service), your consent (for example, for processing of biometric inputs and marketing), and compliance with legal obligations.

4. How we use photos and AI inputs

When you upload a photo or other visual input, the Service processes it to produce the AI output you requested (for example, a virtual try-on image or a style recommendation). This may involve detecting visual attributes such as face, hair, skin tone, pose, and body shape so that garments can be rendered on you.

Your photos and the outputs generated from them are stored in your account and used to deliver the features you request. We do not sell your photos or AI outputs.

Model training and improvement.We may use de-identified and aggregated signals from inputs and outputs to evaluate and improve the accuracy and safety of our AI models. Where required by applicable law (including in the EEA, UK, and the Province of Quebec), we will obtain your consent before using your photos in any way that goes beyond providing the requested feature, and you can withdraw that consent at any time in the app's privacy settings.

Deletion. You can delete an individual photo at any time from within the app, or delete your entire account to remove your photos and associated AI outputs, subject to the retention rules in Section 8.

We do not sell your personal information. We share information only as described below.

Service providers. Cloud hosting and storage, AI infrastructure, payment processors, customer support, email delivery, analytics, crash reporting, and security providers. These providers are bound by contract to process personal information only on our instructions and to keep it secure.
Brands, retailers, and affiliate networks.The Service lets you browse catalogs from third-party brands and retailers and, in some cases, click through to their websites to buy a product. Some of those outbound links are affiliate links. When you click an outbound or affiliate link, the retailer and the affiliate network we use to track the referral may receive limited information such as a referral or click identifier, the page you came from, your IP address, your user agent, and the time of the click — and, if you complete a purchase, basic order data (such as order ID and amount) so commissions can be attributed. Once you are on the retailer's site, your activity and any purchase are governed by that retailer's own terms and privacy policy, not this one. We do not share your photos, AI inputs, or AI outputs with brands, retailers, or affiliate networks.
App stores and platforms. Apple and Google process purchases and subscriptions through their stores in accordance with their own policies.
Legal and safety. We may disclose information when we believe in good faith it is required to comply with law, legal process, or lawful requests from public authorities; to enforce our agreements; or to protect the rights, property, or safety of TRYSHOP, our users, or others.
Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of the transaction, subject to continued protection consistent with this Policy.
With your consent. Any other sharing that you direct or authorize.

6. International data transfers

Astur Labs is based in Canada and uses service providers that may process personal information outside your country, including in the United States and the European Union. When we transfer personal information across borders, we rely on appropriate safeguards, which may include standard contractual clauses, adequacy decisions, or your consent, in accordance with applicable law.

7. Cookies and similar technologies

On our website, we use cookies and similar technologies to keep you signed in, remember preferences, measure traffic, and understand how the Service is used. You can control cookies through your browser settings. Mobile devices offer similar controls for app-level identifiers (for example, Limit Ad Tracking on iOS and Reset Advertising ID on Android).

8. Data retention

We keep personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

Account data is retained for the life of your account.
Photos and AI outputs are retained until you delete them or delete your account, after which they are removed from active systems within 30 days and from backups within 90 days, except where we are required to retain them by law.
Transaction records are retained for the period required by tax, accounting, and consumer-protection law.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and routine monitoring. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

10. Your privacy rights

Depending on where you live, you may have the following rights with respect to your personal information:

Access: obtain a copy of the personal information we hold about you.
Correction: ask us to correct inaccurate or incomplete information.
Deletion: request that we delete your personal information, subject to legal retention requirements.
Withdraw consent: withdraw consent for processing that relies on consent (for example, marketing or use of photos for model improvement).
Portability: receive certain personal information in a portable, machine-readable format.
Objection / restriction: object to or restrict certain processing, including direct marketing.
Automated decisions: request human review of decisions that are based solely on automated processing and that produce significant effects on you.

To exercise your rights, contact us at contact@tryshop.app. We may need to verify your identity before responding. You can also delete your account at any time from within the app.

Canadian residents (PIPEDA and Quebec Law 25)

Canadian users have rights under the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Residents of Quebec also have rights under An Act respecting the protection of personal information in the private sector (Law 25), including the right to data portability and the right not to be subject to a decision based exclusively on automated processing. If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.

EEA, UK, and Swiss residents (GDPR)

Residents of the European Economic Area, the United Kingdom, and Switzerland have rights under the General Data Protection Regulation and equivalent laws. You may also lodge a complaint with your local data protection authority.

California residents (CCPA / CPRA)

California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know, the right to delete, the right to correct, the right to limit the use of sensitive personal information, and the right to opt out of any sale or sharing of personal information. We do not sell personal information.

11. Children

The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Third-party links and content

The Service contains links to third-party websites, including brands and retailers. We are not responsible for the privacy practices or content of those sites. Please review their privacy policies before sharing personal information with them.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will give you reasonable notice (for example, by updating the “Last updated” date, posting a notice in the Service, or sending you an email). Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

14. Contact us

For privacy questions, requests, or complaints, contact our privacy team at contact@tryshop.app.