Privacy Policy

Piqqo is a mobile application published by Lexa, the trading name of Axel Leclercq, sole trader (entrepreneur individuel) (hereinafter "we", "us" or "the Publisher"). This privacy policy describes how we collect, use and protect your personal data when you use the Piqqo application (hereinafter "the App").

1. Data Controller

Lexa - Axel Leclercq (sole trader / entrepreneur individuel)
SIRET 841 864 341 00026
RCS Evry 841 864 341
15 rue Severine, 91380 Chilly-Mazarin, France
VAT not applicable, art. 293 B of the French Tax Code (CGI)
Email: piqqo@lexa.bzh

2. Data We Collect

2.1 Account Data

Email address: collected during registration or via Google/Apple sign-in.
Name (optional): provided by your Google or Apple account if you sign in with those services.
Authentication identifiers: unique user ID, OAuth identity tokens (processed by Supabase, our hosting provider).

2.2 User-Generated Content

Clothing photos: photos you take or select from your library to build your wardrobe.
Clothing tags: category, colors, style and season assigned to each item (generated by AI).
Occasion context: free-text descriptions of occasions you enter (e.g., "job interview").
Outfit feedback: your likes and passes on suggested outfits.
Favorites: outfits you save.
Notification preferences: your choices regarding push notification types.

2.3 Automatically Collected Data

Push notification token: your Expo Push Token for sending notifications (device platform: iOS or Android).
Timestamps: creation and modification dates for your content.
Subscription data: your subscription status, transaction ID and purchase history, managed via our provider RevenueCat. We never receive your payment card details (processed directly by Apple or Google).

2.4 Data NOT Collected

We do not collect: precise geolocation, contacts, browsing history, advertising identifiers, health data, financial data, device model or OS version (at the application level).

3. How We Use Your Data

Purpose	Data Used	Legal Basis
Account creation and authentication	Email, name, auth tokens	Contract performance
Wardrobe management	Photos, tags	Contract performance
AI outfit suggestions	Tags, occasion context, feedback preferences	Legitimate interest
AI clothing analysis	Photo (temporarily, not retained)	Contract performance
AI outfit image generation	Clothing tags and optional photo URLs	Contract performance
Push notifications	Push token, notification preferences	Consent
Subscription and in-app purchase management	User ID, subscription status, purchase history	Contract performance
Crash reporting	Anonymous error data	Legitimate interest

4. AI Processing

The App uses artificial intelligence to analyze your clothing and generate outfit suggestions:

Anthropic Claude (clothing analysis, suggestions): your clothing photo is sent temporarily for analysis. The image is not retained after processing. Only structured tags (category, colors, style, season) are stored.
Google Vertex AI (Gemini models) (outfit visualization): clothing descriptions and optionally photo URLs are sent to generate outfit images. Data is not retained after generation.

AI services act as data processors and do not use your data for training purposes.

5. Data Sharing

We do not sell your personal data. Your data is shared only with the following service providers, strictly necessary for the App's operation:

Provider	Purpose	Location
Supabase	Database, authentication, file storage	EU (AWS eu-central-1, Frankfurt)
RevenueCat	Subscription and in-app purchase management	United States
Anthropic	Clothing analysis, outfit suggestions (AI)	United States
Google Cloud (Vertex AI)	Outfit image generation (AI)	United States
Expo	Push notification delivery	United States
Sentry	Crash reporting and error monitoring	United States

For transfers to the United States, these providers implement appropriate safeguards (Standard Contractual Clauses, DPF certification where applicable).

6. Data Storage and Security

Your data is stored on Supabase servers in Europe (AWS eu-central-1, Frankfurt, Germany).
All data is protected by Row Level Security (RLS): each user can only access their own data.
Communications are encrypted in transit (HTTPS/TLS).
Authentication tokens are verified server-side.
API keys and secrets are stored in secure server-side vaults, never exposed to the client.

7. Data Retention

Account data and content: retained for as long as your account is active.
AI processing data: not retained — processed in real time and discarded immediately.
Crash reports (Sentry): retained according to Sentry's retention policy (90 days by default).

8. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

Right of access: request a copy of your personal data.
Right to rectification: correct inaccurate data.
Right to erasure: delete your account and all associated data.
Right to data portability: export your data (available via the App: Settings > Export my data).
Right to object: object to data processing based on legitimate interest.
Right to restrict processing: request limitation of processing.

How to exercise your rights

Delete your account: Settings > Delete my account (in the App). This permanently deletes all your data from our servers and your device.
Export your data: Settings > Export my data (in the App). Exports your wardrobe, feedback and favorites as a JSON file.
Contact us: email piqqo@lexa.bzh for any other request.

We will respond to your request within 30 days.

9. Children's Privacy

The App is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page indicates the latest revision. We will notify you of significant changes via the App or by email.

11. Contact

For any questions about this privacy policy: