Privacy Policy
Last updated: 2 November 2026
This Privacy Policy explains how Pleyada LTD (“Pleyada”, “we”, “us”) collects, uses and protects personal data when you use our website pleyada.tech and our mobile app Amalook (together, the “Services”).
1. Who we are
The controller of your personal data is Pleyada LTD, a company registered in the Republic of Cyprus under № HE 498838, with its registered office at Griva Digeni, 51, ATHINAION COURT, Flat/Office 202, 8047, Paphos, Cyprus. You can contact us about privacy at privacy@pleyada.tech.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, sign-in codes or credentials, account settings | You |
| Wardrobe content | Photos of clothing items, item details (category, colour, brand), outfits and outfit calendar | You |
| Selfies and outfit photos | Photos of you wearing an outfit that you choose to analyse | You |
| Location | Approximate location, only if you allow it, to get the local weather forecast | Your device |
| Purchase data | Subscription status, product, transaction identifiers. We do not receive your card details | Apple |
| Usage and device data | App interactions, crash reports, device model, OS version, app version, language | Your device |
| Support correspondence | Messages you send us and our replies | You |
We do not use your photos to identify you, and we do not create biometric templates from your face.
3. How and why we use your data
- To provide Amalook: create and secure your account, store your wardrobe, recognise clothing items, analyse outfits, suggest outfits and show weather-based recommendations. Legal basis: performance of our contract with you.
- To process subscriptions and give you access to paid features. Legal basis: contract.
- To improve and keep the Services reliable: understand which features are used, fix bugs and crashes. Legal basis: our legitimate interests in running and improving the Services.
- To support you and answer your requests. Legal basis: contract and legitimate interests.
- To comply with the law, for example tax and accounting obligations. Legal basis: legal obligation.
- Location is used only with your consent, which you can withdraw at any time in your device settings.
We do not sell your personal data, and we do not use it for targeted advertising.
4. AI processing
Amalook uses artificial intelligence to recognise clothing items in your photos and to generate outfit and style suggestions. To do this, the relevant images and item details are sent securely to our servers and to AI model providers acting on our behalf: currently OpenAI and Google (Gemini API). These providers may process the data only to deliver results to us and are contractually prohibited from using it for their own purposes. We do not use your photos to train AI models.
AI suggestions are generated automatically and may sometimes be inaccurate. They do not produce legal or similarly significant effects on you.
5. Who we share data with
We share personal data only with service providers that help us run the Services, under data processing agreements:
- cloud hosting and storage providers (Google Cloud);
- AI model providers OpenAI and Google (see section 4);
- analytics and crash-reporting providers;
- subscription management and Apple, which processes payments;
- a weather data provider, which receives approximate location only;
- email providers for sign-in codes and support.
We may also disclose data if required by law, or to a successor in the event of a merger or acquisition, in which case this Policy will continue to apply.
6. International transfers
Some providers may process data outside the European Economic Area. In that case we rely on an adequacy decision of the European Commission or the Standard Contractual Clauses, together with additional safeguards where needed.
7. How long we keep data
- Account and wardrobe data: for as long as your account exists. When you delete your account, we delete this data within 30 days, and from backups within 90 days.
- Usage and analytics data: up to 26 months.
- Support correspondence: up to 2 years after the conversation ends.
- Records we must keep by law (for example, accounting): for the period required by law.
8. Your rights
Under the GDPR you have the right to access, correct, delete or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time. You can delete your account directly in Amalook (Settings → Delete account) or by writing to privacy@pleyada.tech. We reply within one month.
You also have the right to lodge a complaint with a supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).
9. Security
We protect data with encryption in transit (TLS), access controls and the principle of least privilege. No system is perfectly secure, so we also limit the data we collect to what the Services need.
10. Children
The Services are not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
11. Website and early access list
Our website does not use advertising or tracking cookies. Our hosting provider may keep standard server logs (such as IP address and request time) for security, for a short period.
Website analytics. To understand which pages are useful, we use Vercel Web Analytics, provided by our hosting provider Vercel Inc. It sets no cookies and does not identify you or track you across other sites. It records pages viewed, the referring site, and your country, browser, operating system and device type. Visitors are counted using a hash of the request that is discarded after 24 hours, so we cannot recognise returning visitors or link visits to a person. Our legal basis is our legitimate interest in improving the website. We see only aggregated statistics.
Early access list. If you join the Amalook early access list on our website, we collect your email address, the date you signed up and the date you confirmed it. We use it only to send you news about Amalook's launch and early access invitations. The legal basis is your consent, which you can withdraw at any time using the unsubscribe link in every email or by writing to privacy@pleyada.tech. The list is stored in our Google Workspace account and emails are sent through Gmail, with Google acting as our processor. Addresses that are never confirmed are deleted within 30 days. We keep a confirmed address until you unsubscribe, or for at most 12 months after Amalook launches, whichever comes first. We never sell the list or share it for others' marketing.
12. Changes to this Policy
We may update this Policy from time to time. We will change the “Last updated” date above and, for significant changes, notify you in the app.
13. Contact
Pleyada LTD, Griva Digeni, 51, ATHINAION COURT, Flat/Office 202, 8047, Paphos, Cyprus. Email: privacy@pleyada.tech. Phone: +357 9511 6765.