Privacy Policy

Phone number. We use your phone number solely to sign you in with a one-time passcode (OTP). We do not use it for marketing.

Email address (optional). You do not have to give one. Its only purpose is account recovery: if you can no longer receive a code on your phone number, there is no other way back into your account. We do not verify the address, and giving it does not by itself grant us permission to email you.

Notification permission (optional and separate). Independently of giving us an address, you may additionally consent to one thing only: being told when a new issue is out. You can withdraw that consent at any time from your account page. We record the dates on which the permission was given and withdrawn, for compliance with Turkey's İYS rules; recording a withdrawal does not erase the record of when you gave it.

The portrait photo you upload for the analysis. It is processed to extract your colour reading and is not retained on our servers afterwards — see the section below.

The result of your colour analysis. Your colour season, the palette you were given and your wardrobe and fit preferences are saved to your account. The sole purpose is to be able to produce your monthly issue without asking you for a photo and a questionnaire again every month. Redoing your analysis overwrites this record.

Images of pieces you upload to your issue. You can add photos of clothes and accessories you own to your issue. They are held in a private, non-public store, in a folder only you can reach; they are displayed using short-lived signed links, and no permanent public link is ever created.

Your monthly issues. The text of each issue produced for you is saved to your account so you can read it again from your archive at any time.

Usage analytics. We collect anonymous, aggregated usage statistics through PostHog to understand and improve the product. Analytics is consent-based and never includes your photos or your phone number.

Account and subscription records. We keep a minimal record of your subscription status, the issues you have produced and any extra issues you have purchased, so the service works correctly.

Payment details. Payments are handled by our payment provider. We do not receive or store your full card details.

The portrait photo you upload for the analysis is NOT kept. It is processed in memory only while your colour reading is extracted, and is not retained on our servers afterwards. We do not build a library of your images, and we do not use your photos to train any models.

The images of clothes and accessories you add to your issue ARE kept. These are pieces you deliberately added to your issue, and they are retained because they form part of it. They sit in a private store, in a folder only you can reach; for how long they are kept and how they are deleted, see "Data retention and deletion" below.

Your finished analysis and your issues are returned to you in the app. Keeping your own copy of any result is your choice.

To verify you and keep your account secure.

To prepare your colour analysis, produce your issue each month and manage your subscription.

Only if you have additionally consented, to tell you when a new issue is out. Withdrawing that consent ends this use.

To operate, troubleshoot and improve the service.

To meet our legal and accounting obligations.

Supabase — authentication and database hosting (data hosted in the EU).

Google (Gemini) — the image-processing model used for colour analysis and preview images; your photo is sent for processing and is subject to Google's applicable terms.

Anthropic (Claude) — the AI model that writes two things: your written colour analysis, from the summary of your colour reading and your questionnaire answers; and, each month, the text of your monthly issue, from your colour season and that month's reference data. NO IMAGE IS EVER SENT to Anthropic — neither your portrait photo nor the images of pieces you upload to your issue. Only text is sent: the summary of your colour reading, the preferences you gave, and words such as the name, fabric and colour of any piece you selected.

Creem — our payment provider and merchant of record for PROVA subscriptions and one-time purchases.

Paddle — our payment provider and merchant of record for PATİ PROVA subscriptions and one-time purchases.

PostHog — privacy-friendly product analytics (EU-hosted), used only with your consent.

Prova Labs is an independent service and is not affiliated with, endorsed by, or sponsored by Google or Anthropic. We access their models through our own interface to provide the colour analysis, monthly issue, and preview features described above.

We process your data under these legal bases: performance of our contract with you (providing the service), your consent (e.g. analytics), and our legitimate interests (security and product improvement).

We comply with the EU General Data Protection Regulation (GDPR) and Turkey's Law on the Protection of Personal Data (KVKK No. 6698).

The portrait photo you upload for the analysis is not retained.

Images of pieces you upload to your issue are kept for 12 months from the issue period they belong to, and are deleted afterwards.

The result of your colour analysis, your phone number, your email address if you gave one, and your account records are kept for as long as your account is active. Your produced issues remain readable in your archive.

The dates on which notification permission was given and withdrawn are kept after you withdraw it: compliance with Turkey's İYS rules requires being able to show that permission once existed and when it ended.

Payment and purchase records may be retained to meet accounting and legal requirements.

You can ask us to delete your account and the personal data associated with it at any time by emailing support@provalabs.app. On such a request we delete your account records together with the images of pieces you uploaded.

Under the GDPR and KVKK you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at support@provalabs.app.

Data controller: Böke Bacakoğlu (trading as Prova Labs), Türkiye.

Prova Labs — support@provalabs.app — https://provalabs.app. If you have a concern we cannot resolve, you may also contact your local data protection authority.