This Privacy Policy applies to the SELION.AI mobile applications, the SELION Agent experience, and the public pages at selionai.app that link to it. It does not replace the privacy notices of Apple, Google, RevenueCat, WeatherAPI.com, or another service you choose to use directly.
Who is responsible for your data.
Tortuga Co & Development, operating the SELION.AI product from Kazakhstan, determines why and how SELION.AI account and product data is processed and is the controller or business for that data where those terms apply. Some integrated platforms independently determine how they process platform, payment, advertising, or authentication data under their own terms.
This policy covers registered and signed-out users, free and paid features, website visitors, and people who contact support. Choosing an optional feature is a request to process the data reasonably necessary to provide it; it is not treated as consent where applicable law or platform rules require a separate affirmative choice. In those cases, the relevant collection, use, or third-party disclosure is subject to the notice and choice presented in the feature flow. You may refuse or withdraw consent without losing unrelated functionality, although the affected optional feature may then be unavailable.
Data we process and where it comes from.
| Category | Examples | Source |
|---|---|---|
| Account and identity | Firebase UID, name, email, avatar, authentication provider, sign-in status, account settings | You; Google, Apple, or email authentication |
| Wardrobe and style | Garment photos and attributes, outfits, favorites, capsules, wardrobe locations, sizes, style preferences, plans, feedback | You; editable AI-assisted analysis |
| Portrait and visual content | Portraits, body or outfit photos, selected reference images, generated or transformed images, Virtual Try-On results | You, your device, or content you are authorized to provide |
| AGENT and AI interactions | Prompts, chat history, attachments, requested actions, confirmations, results, durable preferences and facts you ask or allow Agent to remember | You; product context; AI output |
| Beauty and appearance | User-selected facial images, visible appearance attributes, style or beauty analysis, routines, and transformations | You; AI analysis of content you submit |
| Location and weather | Approximate or precise coordinates when permitted, city, destination, weather conditions, climate context | Your device, your input, WeatherAPI.com |
| Calendar and notifications | Upcoming event title/time when calendar permission is granted, SELION outfit plans, notification preferences, push token and delivery interactions | Your device calendar; you; Firebase Cloud Messaging |
| Purchases and entitlements | Product, localized price, transaction state, receipt or purchase token, subscription status, entitlement, AI Credits balance and usage ledger | Apple App Store, Google Play, RevenueCat, SELION systems |
| Device, usage, and diagnostics | App version, device/OS class, locale, feature events, coarse session metrics, crash traces, performance timings, App Check and abuse signals | Your app/device; Firebase SDKs; security systems |
| Website and support | Analytics consent, page category, bounded acquisition campaign, referrer domain, interactions, performance, email and support content | Your browser; you; Google Analytics after consent |
We may infer practical style information from the content you provide—for example garment category, visible colors, silhouette, or a stated preference. We do not ask for government identifiers, payment-card numbers, account passwords, genetic data, or medical records. Apple and Google process payment credentials; SELION.AI does not receive your full card number.
Why we process data.
| Purpose | Data commonly used | EEA/UK legal basis |
|---|---|---|
| Provide and synchronize the Service | Account, wardrobe, content, settings, plans, purchase entitlement | Performance of our contract |
| Run AI and personalization | Prompts, selected images, wardrobe/profile context, memory, feedback | Contract; consent where required for optional sensitive inputs |
| Weather, calendar, gallery, and notifications | Permission-bound device data and user selections | Consent or contract, depending on the feature and jurisdiction |
| Purchases and AI Credits | Store transaction, entitlement, usage and fraud signals | Contract; legal obligations; legitimate interests |
| Security, abuse prevention, and support | Auth, App Check, device/app signals, logs, account events, correspondence | Legitimate interests; legal obligations; contract |
| Product analytics and reliability | Bounded feature events, crash and performance diagnostics | Consent where required; otherwise legitimate interests |
| Legal compliance and claims | Minimum records relevant to the obligation or dispute | Legal obligation; legitimate interests; legal claims |
Our legitimate interests include securing accounts, preventing fraudulent use, measuring reliability, improving product flows, and protecting users and the Service. We balance those interests against user rights and avoid putting private free-form wardrobe, photo, or chat content into public marketing analytics.
AI, photos, facial data, and Agent memory.
What is sent for AI processing
When you ask SELION Agent a question or use garment analysis, outfit generation, Style Analysis, Beauty Scan, a beauty transformation, or Virtual Try-On, we send Google AI services the minimum combination of your prompt, selected images, product instructions, and relevant wardrobe, profile, memory, weather, or history context needed to produce the requested result. Outputs may also be checked, logged in bounded form, stored in your account, and used to settle the correct AI Credits cost.
This policy is not a substitute for a separate affirmative permission where one is required. The relevant feature flow must identify the third-party AI processing, the categories of data involved, and the purpose before the first covered transfer. Refusing that permission prevents the covered data from being sent for that request and may prevent the AI feature from operating; it does not authorize us to repurpose the data for advertising or an unrelated purpose.
Facial images are not used to identify you
Beauty and Virtual Try-On features analyze visible characteristics in photos to create style guidance or visual output. SELION.AI does not intentionally use these photos for face recognition, identity verification, surveillance, or matching you against other people, and does not intentionally create a reusable face-geometry template for unique identification. If that purpose changes, we will provide a separate legally required notice and consent before collection.
Memory and autonomy remain controllable
Agent can save durable details such as style preferences, dislikes, sizes, lifestyle context, upcoming plans, and communication preferences so future conversations do not start from zero. You can ask Agent to correct or forget supported memories and can delete conversations or your account through available controls. Default Mode asks before supported actions; Turbo Mode may continue supported in-app actions automatically. Permission gates, ownership checks, confirmations required by policy, and platform restrictions still apply.
Training and human access
We do not sell or license private user photos, wardrobe content, or conversations to data brokers or advertisers, and we do not intentionally use private content to train a public general-purpose SELION model. Google processes AI requests under the Google/Firebase/Cloud terms and configurations applicable to the selected service. Authorized personnel may access limited data when reasonably necessary to investigate a support issue, security incident, abuse report, billing failure, or legal obligation.
Beauty results are not medical analysis. Visible-skin, facial, hair, makeup, or appearance suggestions are cosmetic and informational. Do not use them to diagnose, treat, or monitor a medical condition.
Who processes data with us.
We disclose data only as needed for the purposes described here, at your direction, or when lawfully required. “Disclosure” includes a service provider processing data for SELION.AI; it does not mean we sell ownership of your content. Service providers acting on our behalf are required by applicable agreements to process personal data for defined services, protect it consistently with applicable law and this policy, restrict access, and support deletion or return obligations. Independent platforms may process data under their own legal responsibilities and notices.
| Recipient | Role and data | More information |
|---|---|---|
| Google / Firebase / Google Cloud | Authentication, database, file storage, functions, app integrity, remote configuration, messaging, analytics, crash and performance diagnostics, hosting, and AI text/image processing. Inputs can include account IDs, app/device data, photos, prompts, and requested context. | Firebase privacy and security |
| Google Sign-In and Google Play | Authentication, app distribution, billing, purchase tokens, refunds, and platform security. | Google Privacy Policy |
| Apple | Sign in with Apple, app distribution, payments, subscription management, platform security, and Apple Ads attribution when enabled. | Apple Privacy Policy |
| RevenueCat | Customer identifiers, device/platform metadata, purchase receipts or tokens, transaction history, subscription status, and entitlements. | RevenueCat Privacy Policy |
| WeatherAPI.com / Zoomash Ltd | Coordinates or a city/destination query and request metadata needed to return current weather or a forecast. | WeatherAPI Privacy Policy |
| Ad networks | Google AdMob may receive advertising, device, IP, and interaction data when ads are active. Private wardrobe, photo, and chat content is not intentionally sent in an ad request. | Google advertising privacy |
| Advisers and authorities | Limited information may be disclosed to auditors, legal or security advisers, insurers, courts, regulators, or law enforcement where reasonably necessary and legally valid. | Subject to professional duties and applicable law |
We remain responsible for selecting and overseeing processors used to provide SELION.AI. We do not authorize a processor to use private wardrobe content, photos, or conversations for its own advertising. A provider may retain or disclose limited information where its independent legal obligations, security requirements, or platform terms lawfully require it.
If the business is reorganized, financed, acquired, or sells relevant assets, data may be transferred as part of that transaction subject to confidentiality, lawful notice, and continued protection. We do not disclose more data than the transaction requires.
No sale of personal data.
SELION.AI does not sell personal data for money and does not sell or rent private photos, wardrobe content, or conversations. Free versions may show Google-served ads. Google may process device, advertising, IP, coarse location, and ad-interaction data under its terms. Depending on the jurisdiction and configuration, this can be considered “sharing” for cross-context behavioral advertising even though SELION.AI receives no payment for your personal data.
Use of SELION.AI is not consent to cross-context behavioral advertising. Advertising processing is subject to the consent, opt-out, and platform requirements that apply to the user and request. Where a separate affirmative choice is legally required, that choice—not continued use—controls. You can reset or limit the advertising identifier in iOS or Android settings, decline tracking where a platform prompt is shown, use an available in-app privacy choice, or submit the opt-out below. Premium access may remove in-app ads but does not automatically erase historical platform records.
The public website does not request advertising storage or ad-personalization consent. Google Analytics loads on production pages only after you allow analytics; you can change that choice using “Analytics settings” in the site footer.
We keep data for a reason, not forever by default.
| Data | Retention approach |
|---|---|
| Account, wardrobe, saved content, chats, memory, and settings | While your account is active and the data is needed to provide the Service, until you delete the item, conversation, memory where supported, or account. |
| Temporary uploads and unselected AI candidates | Kept only for the processing, retry, safety, and settlement window. Short-lived rejected or expired AI identity candidates are targeted for expiry from active staging within 72 hours; narrowly scoped security logs and provider backups may rotate later under their configured schedules. |
| Analytics, crash, performance, and security records | According to configured provider schedules and for as long as reasonably needed to measure reliability, investigate incidents, prevent abuse, or meet legal obligations. |
| Purchase, entitlement, fraud, tax, and accounting records | For the transaction lifecycle and any longer period required by stores, tax/accounting law, fraud prevention, dispute handling, or legal claims. |
| Support and rights requests | For as long as needed to resolve and evidence the request, protect the account, and meet legal limitation or recordkeeping requirements. |
Account deletion
You can start deletion in the app through the account/profile settings. Deleting the app, signing out, or canceling a subscription does not delete the account. When Firebase Authentication confirms account deletion, SELION.AI's server-side cleanup is designed to remove the active user profile, nested account data, and account-owned storage paths.
Limited transaction, security, legal, or already-deidentified records may be retained when permitted or required. Provider backups and logs can persist for a bounded period before rotation. Apple, Google Play, RevenueCat, or another independent platform may retain records under its own legal obligations. You must cancel an active store subscription separately; deleting a SELION.AI account does not cancel billing controlled by Apple or Google.
This section is SELION.AI's external web route for requesting account and associated-data deletion without reinstalling or signing in to the app. Use the action below or email the displayed address with the same subject. We may verify account control using proportionate information, but we do not require unnecessary identity documents or payment details. A deletion request is not converted into mere suspension or deactivation.
Layered protection, not an impossible guarantee.
We use technical and organizational safeguards appropriate to the nature of the Service. These include authenticated access, account-scoped authorization, Firebase Security Rules, protected server actions, App Check on supported paths, transport encryption, provider-supported encryption at rest, restricted administrative access, bounded telemetry, purchase verification, rate and abuse controls, code review, automated tests, dependency and security checks, and deletion workflows.
AGENT actions use capability boundaries, ownership checks, confirmation policies, bounded context, and result verification. Sensitive identifiers and free-form user content are excluded from public product analytics where the implementation provides a categorical event instead.
We review controls as the product changes and investigate credible reports. No system is immune from failure or unauthorized access, and this policy does not claim an independent certification, a flawless audit, or absolute security. If a breach creates a legally reportable risk, we will notify affected people and authorities as required by applicable law.
Report a suspected vulnerability privately to [email protected]. Do not access other users' data or disrupt the Service while testing.
Data can be processed across borders.
SELION.AI operates from Kazakhstan and uses global providers. Firebase Authentication is operated from the United States; Firebase, Google Cloud, Google AI, RevenueCat, Apple, Google Play, and WeatherAPI.com may process data in the United States and other countries where they or their subprocessors operate. Data-protection laws in those locations may differ from those where you live.
Where European or UK transfer rules apply, transfers are subject to a valid mechanism available for the relevant recipient and transfer, such as an adequacy decision, the European Commission's Standard Contractual Clauses, the applicable UK addendum or international data-transfer agreement, together with supplementary measures where required. We do not claim a safeguard that is not applicable to the specific transfer. You may request information about the relevant mechanism by contacting us.
Your rights and practical choices.
Depending on where you live and subject to lawful exceptions, you may have rights to access, know, correct, export, delete, restrict, object to, or withdraw consent for processing; opt out of sale, targeted advertising, or certain profiling; limit the use of sensitive personal information; and appeal a refused request. You will not receive discriminatory treatment for exercising a privacy right.
- Inside the app: edit profile and wardrobe data, remove items and results, manage Agent memory where supported, change notification settings, revoke operating-system permissions, and delete the account.
- On your device: revoke camera, photos, location, calendar, notifications, or advertising permissions in iOS or Android settings.
- On the website: accept, decline, or reopen analytics settings; clear local browser storage at any time.
- By request: email [email protected] with the right you want to exercise.
We may ask only for information reasonably necessary to verify that you control the account and to prevent fraudulent deletion or disclosure. An authorized agent may submit a request where local law permits; we may verify the agent's authority and the user's identity. We will respond within the period required by applicable law, explain any lawful denial or extension, and provide an appeal route where required. We do not charge for a request unless applicable law permits a reasonable fee for a manifestly unfounded, excessive, or repetitive request.
Additional regional disclosures.
EEA, Switzerland, and United Kingdom
The legal bases are summarized in Section 3. You may lodge a complaint with the data-protection authority where you live, work, or believe an infringement occurred. You may also object to processing based on legitimate interests and withdraw consent without affecting processing that was lawful before withdrawal. SELION.AI does not use solely automated processing to make decisions that produce legal or similarly significant effects about you.
California
In the preceding 12 months, SELION.AI may have collected the categories listed in Section 2: identifiers; customer records; commercial and subscription information; internet/electronic activity; device and coarse geolocation data; precise geolocation when you permit it; audio/visual content in photos; inferences about style and preferences; and account credentials or other sensitive information needed to secure access. Sources, purposes, and recipient categories are described in Sections 2, 3, and 5.
Sold for money: none. Potentially shared for cross-context behavioral advertising: device or advertising identifiers, internet/electronic activity, IP-derived or coarse location, and ad interactions with Google AdMob when that configuration is active. Disclosed for business purposes: the categories in Section 2, only as reasonably necessary for the recipient roles in Section 5. California residents may request to know, access, correct, delete, opt out of sale or sharing, and limit qualifying uses of sensitive personal information by using the controls in Sections 6 and 10 or emailing us. We do not knowingly sell or share the personal information of anyone under 18.
Other U.S. states
Where Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, or another applicable state law grants access, correction, deletion, portability, targeted-advertising opt-out, sale opt-out, profiling opt-out, or appeal rights, you may use the same request channel. If we deny an appeal, we will provide any regulator-contact information required by that law.
Biometric laws
As described in Section 4, SELION.AI does not intentionally use facial images for unique identification or create reusable face-geometry identity templates. A photograph by itself is not treated by us as a biometric identifier. If a future feature collects biometric identifiers or biometric information as defined by applicable law, it will require a separate written notice, purpose, retention/destruction schedule, and consent before collection.
SELION.AI is for adults.
The Service is intended for people aged 18 and older. We do not knowingly create accounts for children or knowingly collect their personal data. Do not upload a child's portrait or use a child as the subject of an AI or beauty feature. If you believe a child has provided data, contact us so we can investigate and delete it as appropriate.
When this policy changes.
We may update this policy when features, providers, laws, or practices change. We will change the date above and, for material changes, provide additional notice in the app, by email, or on the website where required. If a change requires consent, continued use alone will not replace that consent.
This English policy is the current policy published for SELION.AI.
Questions, requests, and concerns.
Contact the SELION.AI privacy team at [email protected]. Use the subject “Privacy request,” “Account deletion,” “Do Not Sell or Share,” or “Security report” so the request can be routed correctly. No special legal wording is required. Please do not email passwords, full payment details, or unnecessary identity documents.
Operator: Tortuga Co & Development, operator
of SELION.AI, Kazakhstan.
Website:
https://selionai.app