Last updated: October 12, 2026
1 | Who we are
ASTROS VALENTES, LDA is responsible for the personal data described in this policy. Our registered office is Startupleiria, Rua da Carvalha, nº 570, 2400-441 Leiria, Portugal. NIF: 518816320. VAT number: PT518816320.
This policy covers www.aidentite.app, the AIDENTITÉ app and your communications with us. AIDENTITÉ provides AI fashion recommendations and virtual try-on images. The current test version is free and for adults aged 18 or over.
The processing described here is subject to the EU General Data Protection Regulation (Regulation (EU) 2016/679) and Portuguese Law 58/2019 of 8 August, as applicable. Portuguese Law 41/2004 of 18 August, as amended, also applies to cookies and similar technologies where relevant. Mandatory protections under other applicable privacy laws remain unaffected.
For privacy questions and requests, contact support@aidentite.app. For company enquiries, contact info@aidentite.app. This policy provides information about processing; it does not itself request your consent.
2 | Information we process
Account and sign-in: your email address, first and last name, country, city, telephone number, profile image reference and authentication information. If you use social sign-in, we also process the provider and its identifier for your account.
Styling information: your age range, womenswear or menswear preference, lifestyle, budget, preferred style, height, weight, clothing and shoe sizes, and face and full-body photographs.
Generated results: your inferred colour palette and body-shape category, a portrait with its background removed, virtual try-on images, recommendations and product links. These results are linked to your account.
Communications and technical information: details submitted through contact and collaboration forms, support correspondence, technical information used to maintain and secure the service, and app usage information collected with your analytics consent.
Fields marked as required must be completed to use the relevant registration, styling or contact function. Without photographs, we cannot provide the features that require them. Optional analytics is not a condition of using the app.
3 | Purposes and legal grounds
We process account and authentication information to provide access to the service, and photographs, measurements and preferences to provide the styling features you request. We rely on performance of our contract with you to the extent this processing is objectively necessary for those features.
We respond to service requests as part of our contract. For general enquiries and collaboration proposals, we rely on our legitimate interest in communicating with people who contact us and considering business opportunities, or on taking steps at your request before a contract where applicable.
We process technical logs for our legitimate interest in maintaining security and reliability. We use optional analytics with your consent. We also process information where necessary to comply with legal obligations. The app currently sends authentication emails, not promotional email campaigns.
Our AI analysis produces fashion suggestions, not decisions with legal or similarly significant effects. Results may be inaccurate. We do not create a three-dimensional body model, use facial recognition to identify or authenticate you, or use the analysis to infer health conditions, ethnicity or other sensitive characteristics.
AIDENTITÉ does not use your photographs, questionnaire responses or styling results for its own separate model training or advertising.
4 | Who receives information
We use service providers for cloud hosting and storage, website forms, authentication emails, analytics and AI processing. They receive information relevant to the functions they perform.
OpenAI receives your face and full-body photographs and questionnaire responses, including age range, height and weight, for styling analysis and recommendations. Google Vertex AI Virtual Try-On receives your photograph to generate try-on images. AILabTools receives photographs for background removal.
Our product-search providers receive clothing search text, country and budget, without your photographs or account identifiers. Services used to create product collages receive product photographs, not your personal photographs. This is separate from the styling analysis performed by OpenAI.
When you choose Google, Apple, Facebook or X sign-in, that provider also processes information under its own privacy policy. Google receives app analytics information only when you consent to analytics.
We may disclose information to competent authorities where legally required, or where necessary to establish, exercise or defend legal claims. Information about the recipients involved in processing your data is available from support@aidentite.app.
5 | International processing
Our providers may process data outside the European Economic Area and the United Kingdom, including in the United States. Google Vertex AI Virtual Try-On processes photographs in the United States.
International transfers require a lawful transfer mechanism. Depending on the recipient, this may be an applicable adequacy decision or contractual safeguards, such as the European Commission’s Standard Contractual Clauses, with the appropriate UK safeguards for UK transfers and supplementary measures where necessary. You can contact support@aidentite.app for details of the safeguards applicable to your data and how to obtain a copy.
6 | How long we keep information
Original photographs: six months from each upload, for future virtual try-ons, unless you request earlier deletion or delete your account. Signing in does not extend this period. You will need to upload another photograph if a feature requires one after expiry.
Account information, questionnaire responses, AI results, processed portraits and try-on images: until you delete your account or request deletion of the relevant information. We also delete accounts and associated data after 12 consecutive months without sign-in, with prior email notice. Signing in restarts this inactivity period but not the six-month period for original photographs.
Deleting an original photograph does not automatically delete the images generated from it. You can request deletion of those images as well.
Enquiries and support correspondence: 12 months after the matter is closed. Technical logs: 30 days. Temporary authentication information expires when no longer needed for sign-in.
Deleted information may remain in restricted backups for up to 30 days before those copies expire. It is not used for ordinary operations and must not be restored to active use. Limited information may be retained longer where required by law or necessary for a specific legal claim.
7 | Analytics and similar technologies
The app uses Google Analytics to understand how people use the service. Analytics starts only after your separate, optional consent. Refusing consent does not prevent registration or use of the app. You can withdraw consent in Privacy Settings; this stops future analytics collection without affecting processing already lawfully carried out.
User-level and event-level analytics data are retained for 14 months, without restarting the user-identifier retention period on new activity. Standard aggregated reports may be retained longer. Analytics is not used for advertising personalisation or advertising-audience sharing.
Any non-essential cookies or similar technologies requiring consent on the website must remain inactive until you consent. Information and choices for any such technologies are provided where they are used.
8 | Retailer websites
Product links take you to independent retailers, where purchases and payments take place. Their privacy policies apply to information they collect, including connection information such as your IP address and any referrer information sent by your browser.
The current version of AIDENTITÉ does not track your purchases for affiliate commissions or transmit your personal data for calculating those commissions.
9 | Your rights and security
Depending on the applicable law and circumstances, you may request access, correction, deletion, restriction of processing or a portable copy of your data. You may object to processing based on legitimate interests on grounds relating to your situation, and to direct marketing at any time. Where we rely on consent, you can withdraw it without affecting prior lawful processing.
Send requests to support@aidentite.app. We handle deletion and data-copy requests manually and may ask for information reasonably necessary to verify your identity. Deleting information needed for a feature may prevent that feature from working.
Under the GDPR and UK GDPR, we normally respond within one month. If a permitted extension is needed because of complexity or the number of requests, we explain the reasons within the first month. If we cannot fulfil a request, we explain why and the available complaint routes. Where applicable US state law provides additional rights, including an appeal, you can exercise them through the same email address; the applicable statutory response periods apply.
You may complain to Portugal’s Comissão Nacional de Proteção de Dados at www.cnpd.pt or another competent authority. In the UK, you may contact the Information Commissioner’s Office at ico.org.uk. You do not have to contact us first.
We use technical and organisational safeguards to protect personal data. No method of transmission or storage can guarantee absolute security.
10 | Age limit and policy updates
People under 18 must not register or upload photographs. Contact support@aidentite.app if you believe a minor has supplied personal data, so that we can investigate and take appropriate action.
We update this policy when our practices change and identify the current version above. We provide appropriate notice of material changes and request consent where required; updating the policy alone does not replace consent.