Privacy Policy

Phone number. We use your phone number solely to sign you in with a one-time password (OTP). We do not use it for marketing.

Photos you upload. Your uploaded photos are processed only to generate your try-on result. They are processed transiently and are not stored on our servers after the result is produced.

Usage analytics. We collect anonymous, aggregated usage statistics through PostHog to understand and improve the product. Analytics are opt-in and never include your photos or phone number.

Account and credit records. We keep a minimal record of your subscription status and credit ledger so the service works correctly.

Payment information. Payments are handled by our payment provider. We do not receive or store your full card details.

To be explicit: uploaded photos are used only in-memory to produce the requested image and are not retained afterwards. We do not build a library of your images, and we do not use your photos to train AI models.

The generated result is returned to you in the app. Keeping a copy of any result is your choice.

To authenticate you and secure your account.

To provide the try-on service and manage your credits and subscription.

To maintain, troubleshoot and improve the service.

To comply with legal and accounting obligations.

Supabase — authentication and database hosting (data hosted in the EU).

Google (Gemini) — the AI model that generates try-on images; images are sent for processing and are subject to Google's applicable terms.

Paddle — our payment provider and merchant of record for subscriptions and one-time purchases.

PostHog — privacy-friendly product analytics (EU-hosted), used only with your consent.

We process your data under these legal bases: performance of our contract with you (providing the service), your consent (e.g. analytics), and our legitimate interests (security and product improvement).

We comply with the EU General Data Protection Regulation (GDPR) and Turkey's Law on the Protection of Personal Data (KVKK No. 6698).

Uploaded photos are not retained. Your phone number and account records are kept while your account is active. Credit and payment records may be retained where required for accounting and legal purposes.

You can request deletion of your account and associated personal data at any time by contacting us.

Under the GDPR and KVKK you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at support@provalabs.app.

Prova Labs — support@provalabs.app — https://provalabs.app. If you have a concern we cannot resolve, you may also contact your local data protection authority.