✦ Alluvae

Privacy Policy

Last updated: 2026-07-30

Alluvae ("we," "us," or "our") is operated by SAVYX. This Privacy Policy explains how we collect, use, and protect your information when you use our AI outfit-reading application ("App"). Alluvae reads clothing — palette, silhouette, and styling — from a photo you take, and returns a for-entertainment style reading. It is not styling, fashion, or professional advice.

1. Information We Collect

1.1 Outfit Photos

• We collect photographs of clothing — a full look, a top-and-bottom combination, a single item, or a flat lay — to generate an AI-based reading.
• Alluvae reads clothes, not people. We do not analyze faces, skin, or bodies, and the App produces no commentary about your figure or appearance.
• You do not have to appear in the photo at all. Laying the outfit flat and photographing it produces the same reading.
• If a face appears incidentally — for example in a mirror selfie — it is not analyzed and is not part of the reading, and the image is discarded together with the photo.
• Outfit photos are processed in real time and deleted immediately after analysis. We do not store your photos on our servers beyond the duration of a single reading session.

1.2 Usage Data

• Anonymous app usage analytics (screens viewed, features used, session duration).
• Device type, operating system version, and app version.
• Crash reports for debugging purposes.

1.3 Account & Subscription

• Alluvae does not require an account. We do not collect your email address, name, or login credentials.
• Premium subscriptions are processed by Apple or Google. We do not collect or store your payment details; subscription status is managed through your app store account and our subscription provider (RevenueCat).

2. How We Use Your Information

• To provide AI reading results.
• To improve the quality of our readings.
• To process payments for premium features.
• To send optional push notifications (with your consent).
• To comply with legal obligations.

3. Not Biometric Data

• We do not collect, store, sell, or profit from biometric identifiers or biometric information (such as those defined under the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), or Washington's RCW 19.375).
• We do not perform facial recognition, face geometry scanning, or body measurement of any kind.
• If a human face inadvertently appears in a photo, it is excluded from analysis, the image is processed transiently, and it is deleted immediately after the reading is generated — never used to identify anyone.

California Residents (CCPA/CPRA)

You have the right to know what personal information we collect, to delete your personal information, to opt out of the sale of personal information (we do not sell personal data), and to non-discrimination for exercising your rights. To exercise these rights, contact jknam@savyx.kr.

4. GDPR (European Users)

Legal basis for processing: Consent (Article 6(1)(a)) and Legitimate Interests (Article 6(1)(f)).

Your rights under GDPR: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object.

Data Controller: SAVYX / Alluvae — jknam@savyx.kr

5. Data Retention

Data Type	Retention Period
Outfit photos	Deleted immediately after analysis (< 60 seconds)
Usage analytics	12 months (anonymized)
Account data	None — Alluvae has no accounts
Subscription status	Managed by the app store / RevenueCat (no payment details stored by us)

6. Third-Party Services

Service	Purpose	Privacy Policy
Supabase	Backend infrastructure	supabase.com/privacy
Anthropic (Claude)	AI analysis of the outfit photo	anthropic.com/privacy
RevenueCat	Subscription management	revenuecat.com/privacy
Functional Software, Inc. (Sentry)	Anonymous crash and error reports	sentry.io/privacy

We may display affiliate links to third-party services from time to time. Clicking such links may take you to external websites that have their own privacy policies. We are not responsible for the practices of those third parties.

7. Children's Privacy (COPPA)

Our App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at jknam@savyx.kr.

8. Data Security

• All data transmitted via HTTPS/TLS encryption.
• API keys and credentials stored encrypted (never in plain text).
• Regular security reviews.

9. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place (Standard Contractual Clauses for EU data transfers).

10. Entertainment Disclaimer

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via in-app notification. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

SAVYX / Alluvae
Email: jknam@savyx.kr
Personal Information Protection Officer (개인정보 보호책임자): SAVYX — jknam@savyx.kr

13. Korean Users (개인정보보호법 / PIPA)

Alluvae is operated by SAVYX, a business registered in the Republic of Korea. For users in Korea, the following applies under the Personal Information Protection Act (PIPA), the Network Act (정보통신망법), and related laws:

• No account, minimal data: Alluvae does not require an account and does not collect resident registration numbers (주민등록번호), names, or login credentials.
• Children (만 14세 미만): Our App is not directed to children under 14. Under PIPA Article 22-2, processing the personal information of a child under 14 requires the verifiable consent of a legal representative; we do not knowingly collect such information.
• Outfit photos: Processed transiently and deleted immediately after analysis; faces are excluded from analysis and never retained as identifiers.
• Data breach notification: In the event of a data breach affecting Korean users, we will notify affected users and report to the Personal Information Protection Commission (개인정보보호위원회) / KISA within 72 hours, as required by PIPA Article 34.
• Marketing messages: We do not send advertising push notifications. Any future marketing messages will be sent only with your prior opt-in consent, with separate consent for night-time (21:00–08:00) sending, per Network Act Article 50.
• Your rights: access, correction, deletion, suspension of processing, and withdrawal of consent. Contact: jknam@savyx.kr

국외 이전 (Overseas Transfer of Personal Information)

국외 이전의 근거: 「개인정보 보호법」 제28조의8제1항제1호(정보주체로부터 국외 이전에 관한 별도의 동의를 받은 경우) 및 제3호(정보주체와의 계약의 체결 및 이행을 위하여 처리위탁·보관이 필요한 경우). 회사는 최초 이용 전 동의 화면에서 제3자 AI 처리업체 전송 사실을 고지하고 명시적 동의를 받습니다.

이전받는 자	연락처	이전 항목	이전 국가	이전 시기 및 방법	이용 목적	보유·이용 기간
Anthropic, PBC	privacy@anthropic.com 548 Market St, PMB 90375, San Francisco, CA 94104, USA	착장(의류) 사진	미국	이용자가 촬영·분석을 요청한 시점에 HTTPS/TLS 암호화 전송	착장 이미지 AI 분석	분석 직후 즉시 삭제
Supabase, Inc.	privacy@supabase.com	익명 이용 데이터·신고 내역·추천(리퍼럴) 코드	미국 등	앱 실행·기능 사용 시점에 HTTPS/TLS 암호화 전송	백엔드 인프라 운영	12개월(익명)
RevenueCat, Inc.	compliance@revenuecat.com 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA	구독 상태	미국	구독 구매·갱신 시점에 HTTPS/TLS 암호화 전송	구독 관리	구독 관계 종료 시까지
Functional Software, Inc.(Sentry)	compliance@sentry.io 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA	크래시·오류 로그(익명)	미국	앱 오류 발생 시점에 HTTPS/TLS 암호화 전송	앱 안정성 진단	30일

이전을 거부하는 방법·절차 및 거부의 효과

• 착장(의류) 사진: 최초 이용 전 동의 화면에서 동의하지 않으면 이전되지 않습니다. 이 경우 스타일 리딩 기능을 이용할 수 없으며, 그 외 기능은 정상 이용할 수 있습니다.
• 이미 한 동의의 철회: 앱을 삭제하시면 기기에 저장된 동의 기록이 함께 삭제되어 이후의 이전이 중단됩니다(재설치 시 동의 화면이 다시 표시됩니다). 아래 연락처로 철회를 요청하실 수도 있습니다.
• 익명 이용 데이터·크래시 로그: 앱 첫 화면 아래쪽의 [익명 이용·오류 데이터 수집 끄기] 를 누르시면 즉시 수집·이전이 중단되며, 같은 자리에서 다시 켜실 수 있습니다. 끄신 설정은 앱을 다시 실행해도 유지됩니다. 앱을 삭제하셔도 해당 기기에서의 수집이 중단됩니다. 거부하셔도 모든 기능을 그대로 이용하실 수 있습니다. 이미 수집된 데이터는 개인을 식별할 수 없는 익명 형태이므로 개별 삭제 요청의 대상이 되지 않으며, 위 보유기간 경과 시 일괄 파기됩니다.
• 국외 이전 관련 문의: jknam@savyx.kr