1. Who we are
Ovra is a personal style assistant and digital wardrobe app for iPhone. Ovra is operated by Ahmet Subaşı and Arda Emir, Pendik, İstanbul, Türkiye (“we”, “us”). We are the data controller for the personal data described in this policy, including for the purposes of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies, the EU and UK General Data Protection Regulation.
Contact for privacy questions and requests: ahmetsubasi069@gmail.com.
2. Information we collect
Account. When you sign in with Apple we receive an account identifier, your email address (or Apple’s private relay address) and, if you share it, your name.
Style profile. Information you enter during setup or in Edit profile: name, age, gender, height, clothing size, body shape, favourite styles, skin tone and undertone, city, and an optional profile photo.
Wardrobe and outfits. Photos of clothing you add and the details Ovra reads from them (title, category, colour, pattern, fabric, season, style, warmth, formality), the outfits you build, favourites, and outfits you plan on the calendar.
Makeup. Photos of makeup products you add, the details Ovra reads from them (category, type, name, shade, colour, finish), and the makeup looks Ovra suggests for your outfits.
AI requests. Messages you send to Style AI, the choices and notes you give to Plan my outfit, and the photos and optional prices you add to Should I buy it?. Style AI conversations are not saved in the app after it closes.
Body photos. If the virtual try-on feature is available to you and you choose to use it, the full-body photos you upload and the images generated from them.
Purchases. If you subscribe, Apple handles the payment. We receive your subscription status and purchase history (product, dates, renewal state), but never your card details.
Usage and device data. Only if you tap “Allow” when iOS asks whether Ovra may track your activity, the Meta App Events SDK collects basic app events such as app installs, app opens and sessions, together with your device’s advertising identifier and device and app version information. Meta uses this to measure which of our ads brought you to Ovra. If you choose “Ask App Not to Track”, Ovra does not start the Meta SDK and sends nothing to Meta. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
Ovra asks for camera and photo library access only when you choose to add a photo. You can change these permissions at any time in iOS Settings.
3. How we use information
To create and secure your account; to store your wardrobe, outfits, makeup products and plans; to analyse your photos and fill in details for you; to give style, outfit, purchase and makeup suggestions based on your wardrobe, profile and the weather in your city; to apply daily usage limits and provide your subscription; to answer support requests; to measure, with your permission, which of our ads brought you to Ovra; and to keep the service secure and fix problems.
We do not sell your personal data. Apart from the Meta ad measurement you can allow or decline above, we do not share it for advertising.
4. AI processing
Before your first AI request, Ovra asks for your permission and lists what is shared and with whom. If you choose “Not now”, nothing is sent and Ovra asks again the next time you use an AI feature. After you allow it, Ovra’s AI features send the relevant photos, text, profile details and wardrobe details to our AI providers only when you use a feature, so that the provider can return a result. Requests are sent from our servers, not directly from your device.
We use fal.ai to run AI models, including Google Gemini models reached through OpenRouter and image models from Google and ByteDance. These providers process the data on our behalf under their own terms. Some providers may keep requests for a limited time for security and abuse monitoring. We do not use your photos or content to train AI models.
AI output can be wrong. Treat suggestions as inspiration and use your own judgement.
5. Service providers
We share data only with providers that help us run Ovra: Supabase (account, database and backend functions); Cloudflare R2 (private photo storage); fal.ai and OpenRouter, with Google and other model providers (AI processing); Apple WeatherKit (weather for your city; only the location of your city is sent, not your device location); Apple (Sign in with Apple); RevenueCat (subscription status); and Meta Platforms (ad measurement, only if you allow tracking). Each provider may only use the data to provide its service to us.
We may also disclose information when the law requires it or to protect the rights and safety of our users and the service.
6. International transfers
Our providers store and process data on servers outside Türkiye, including in the European Union and the United States. Where KVKK or other laws require it, we rely on appropriate safeguards such as standard contractual clauses or, where necessary, your explicit consent, which you give by using the features that need the transfer.
7. Legal bases
We process your data to perform our contract with you (providing the app and your subscription); based on our legitimate interests (security, fixing problems); to meet legal obligations; and, where the law requires it, based on your explicit consent, for example for AI processing, Meta ad measurement, photos you choose to upload and transfers abroad.
8. Retention and deletion
We keep your data while your account exists. You can delete individual pieces, outfits, plans, makeup products and photos in the app at any time; their photos are removed from storage when you delete them.
You can delete your whole account in the app: Profile → Privacy & data → Delete account. After you confirm and sign in with Apple again, your account, profile, wardrobe, outfits, plans, makeup data and all stored photos are deleted immediately and your Sign in with Apple authorisation is revoked. Copies in backups are removed within 30 days. Purchase records may be kept by Apple and RevenueCat as required by law. Deleting the app alone does not delete your account, and it does not cancel a subscription.
9. Your rights
Under Article 11 of KVKK and other applicable laws you may ask whether we process your data; get a copy of it; ask us to correct, delete or restrict it; learn who it was shared with, in Türkiye or abroad; object to results produced only by automated processing that affect you; withdraw consent; and claim compensation for unlawful processing. You can also complain to the Turkish Personal Data Protection Authority or, in the EU or UK, to your local supervisory authority.
Send requests to ahmetsubasi069@gmail.com. We will reply within 30 days.
10. Children
Ovra is intended for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
11. Security
Data is sent over encrypted connections, photos are kept in private storage that can only be opened with short-lived links, and each account can only access its own records. No system is perfectly secure, but we work to protect your information.
12. This website
This website has no analytics, advertising pixels, forms or cookies. Our hosting provider may keep standard server logs such as IP addresses for security.
13. Changes and contact
If we change this policy we will post the new version here with a new date, and tell you in the app when the change is significant.
Ahmet Subaşı and Arda Emir, Pendik, İstanbul, Türkiye. Email: ahmetsubasi069@gmail.com.