Duvion helps you check an outfit before you go out: you take a photo, tell us where you're going, and get at most two concrete suggestions. This policy explains what data Duvion uses, why, who else sees it, how long we keep it and what you can do about it.
Who we are
Duvion is published by DIVEX S.R.L., Splaiul Independenței 202B, Camera 42, Sector 6, București 060023, Romania, VAT number RO50207739 ("we"). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR).
Contact for anything about your data: office@divex.ro.
The short version
- Outfit photos are sent to our AI provider only after you agree in the app, and they are deleted from Duvion within 24 hours unless you save the outfit.
- We don't sell your data, show ads or track you across other apps and websites.
- You can use Duvion without an account. With an account, you can export or delete everything from the app.
- Our servers are in the European Union (Vienna, Austria).
What we collect and why
| Data | When | Why | Legal basis (GDPR) |
|---|---|---|---|
| Outfit photos (resized, with location and camera data removed), the occasion, direction and constraints you choose, your optional note | When you check an outfit, adjust a suggestion, compare two options or take an "after" photo | To give you suggestions | Your consent (art. 6(1)(a)), given in the app before the first photo is sent; and our contract with you (art. 6(1)(b)) |
| Wardrobe: photos of pieces, their name, category, colour and state (available, in the laundry, lent, stored) | When you add pieces | To suggest outfits from clothes you own | Contract |
| Saved outfits and plans, the day planned and how it went ("I wore it", "I felt good") | When you save or plan an outfit | To keep your outfits and plans | Contract |
| Preferences (formality, colours, comfort, things to avoid) and feedback on suggestions | When you set them or react to a suggestion | To make suggestions fit you; to propose preferences, which apply only if you accept them | Contract |
| Place for weather: the place name and its coordinates rounded to about 11 km | Only if you choose a place (Duvion never asks for your device's location) | To take the day's forecast into account | Contract |
| Account: email address; or, if you sign in with Apple or Google, the identifier and email they give us | Only if you create an account | To sign you in with a one-time code and keep your data across devices | Contract |
| Guest session: a random identifier stored on your phone | When you first open the app | To let you use Duvion without an account | Contract |
| Subscription: whether you have Duvion Plus, the plan, trial and renewal dates | When you subscribe or restore purchases | To unlock Duvion Plus and apply its limits | Contract |
| Session security data: IP address and device type of your sign-in session | While you're signed in | To protect your account and prevent abuse | Legitimate interests (art. 6(1)(f)) |
| Usage events, e.g. "analysis started" or "outfit saved", with counts but no photos, notes or email addresses | When you use the app | To understand which features work and to fix problems | Legitimate interests |
| Reports you send about a suggestion, optionally with the photo | Only when you report something | To review the problem | Legitimate interests |
| Language of the app | Always | To answer you in your language | Contract |
What Duvion does not do with photos. Suggestions are about clothes only. Duvion is built not to comment on bodies, weight, skin or faces, and does not use photos to identify anyone, build biometric profiles or train AI models.
Automated suggestions. Suggestions are produced by an AI model. They are advice only and have no legal or similarly significant effect on you.
Who receives data
We use a small number of service providers who process data for us under contract:
| Provider | What for | What they receive | Where |
|---|---|---|---|
| netcup GmbH (via Divex Infra) | Servers and database | Everything stored in Duvion | EU (Vienna, Austria) |
| Anthropic, PBC (Claude) | Producing suggestions and comparisons | The outfit photos and context listed above, the names, categories and colours of up to 12 wardrobe pieces, your preferences and the day's forecast (no place name, email address or account identifier) | United States |
| RevenueCat, Inc. | Managing subscriptions | A random user identifier and your App Store purchase records | United States |
| Resend | Sending sign-in codes | Your email address and the code | United States |
| Apple | App Store purchases and, if you choose, Sign in with Apple | Payments are made directly with Apple; we never see your card details | Apple's own terms |
| Sign in with Google, if you choose it | What you agree to share in Google's sign-in screen | Google's own terms | |
| MET Norway | Weather forecasts | Rounded coordinates only, requested by our server; nothing about you | Norway (EEA) |
Transfers to the United States rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
We share data with authorities only when the law requires it. We never sell personal data.
How long we keep it
- Outfit photos and unsaved results: deleted within 24 hours. "After" photos follow the same rule.
- Saved outfits, wardrobe, preferences, feedback: until you delete them or your account.
- Using Duvion without an account: your data is deleted after 30 days without opening the app, but never while you have an active Duvion Plus subscription. If you create an account, nothing is deleted for inactivity.
- Report photos: 30 days.
- Data export archives: 24 hours after they're ready.
- When you delete your account: access stops immediately and your data, including photos, is deleted from our systems. Backups roll over within a limited period.
- Subscription records at RevenueCat and Apple are kept as their own terms and tax laws require.
This website
duvion.com is hosted by Vercel. If you join the launch list, we keep your email address in our waitlist database (MongoDB) only to tell you when Duvion launches; unsubscribe by writing to office@divex.ro. To keep bots out, the form uses Cloudflare Turnstile, which checks the request without cookies used for advertising. Visits are counted with Plausible Analytics, which uses no cookies and stores no personal data.
Your rights
Under the GDPR you can ask to access, correct, delete, restrict or move your data, and you can object to processing based on legitimate interests. Many of these are built into the app:
- Withdraw consent to AI processing: Settings → Privacy. No more photos are sent; saved results stay.
- Export your data: Settings → Privacy → Download my data (for accounts).
- Delete temporary data or your whole account: Settings, or the web page at https://duvion-api.dev.divex.cloud/account/delete.
For anything else, write to office@divex.ro. We answer within one month. You can also complain to the Romanian data protection authority (ANSPDCP, www.dataprotection.ro) or the authority in your country.
Subscriptions
Duvion Plus is sold through the App Store. Apple handles payment, renewal and refunds. You manage or cancel the subscription in your App Store account settings. We receive only the purchase status, not your payment details.
Children
Duvion is not meant for children under 16, and we don't knowingly collect their data. If you believe a child has used Duvion, write to us and we'll delete the data.
Security
Data travels encrypted (HTTPS). Photos are private and reachable only through links that expire within 10 minutes. Each person's data is separated at the database level. No system is perfectly secure, but we limit what we keep and for how long.
Changes
If we change this policy in a way that matters, we'll tell you in the app before the change applies. The date at the top always shows the current version.