In short
- Kombinify shows no ads. We do not sell your data, collect an advertising ID or track you across other apps or websites.
- Your photos, avatar, wardrobe and chats are visible only to you. The app has no public profiles or feeds.
- Data needed for an AI feature is sent to the provider that runs it only when you use that feature, and only for that job.
- You can delete your account in the app at any time; your data is then permanently deleted.
Controller and contact
The Kombinify mobile app and the kombinify.com website are provided by Yusuf Samet Karakurt. Yusuf Samet Karakurt is the data controller under the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).
- Email: info@kombinify.com
This policy is the same for the App Store (iOS) and Google Play (Android) versions of Kombinify.
What data we process
We process only the data you give us or that is created while you use the app:
- Account: your name, email address and password. Your password is stored only as a one-way hash; we cannot see it. If you sign in with Google or Apple, the name, email and account ID that account shares with us. If you hide your email when signing in with Apple, we only receive Apple's relay address.
- Profile: gender, city, style preferences and, optionally, height, weight and body measurements.
- Face photo and avatar: if you choose to create an avatar with your own face, the face photo you upload and the avatar images made from it.
- Wardrobe and outfits: the clothing photos you add, product links you paste, your items' category, colour, pattern and season tags, your outfit images, 360° videos and saved outfits.
- Stylist and suggestions: your messages to the stylist, its replies and the suggestion pages made for you.
- Invites: the invite code you use or share and the credits earned with it.
- Purchases: your plan, subscription status, one-time packs and the transaction IDs issued by the store. Apple or Google take the payment; your card details never reach us.
- Technical and security logs: which feature was used when, its result, duration and error messages. Your IP address is kept in these logs only as a salted, one-way hash.
- Language and region: your app language and region, to choose the stylist's reply language and the country of store searches.
We do not collect location, contacts, microphone, health data or an advertising ID. The app contains no third-party analytics, tracking or advertising tools.
Camera and photo permissions
Camera and photo access is requested only when you choose to take or pick a photo. Only the photo you pick is imported; we do not access the rest of your library. Location and device data (EXIF) are removed from your face photo on your phone before upload. You can turn these permissions off at any time in your device settings.
Why we process it and on what legal basis
- To create your account and provide the service (digital wardrobe, avatar, outfit try-on, 360° videos, stylist, suggestions): performance of a contract (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)).
- To apply your plan's allowances, verify purchases and give invite rewards: performance of a contract.
- To prevent abuse, fake accounts and attacks, and to fix errors: legitimate interests (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)).
- Legal obligations such as billing records: legal obligation (GDPR Art. 6(1)(c), KVKK Art. 5(2)(ç)).
- Your face photo and body measurements: only with your explicit consent (GDPR Art. 6(1)(a) and 9(2)(a), KVKK Art. 5(1) and 6). You can withdraw your consent at any time by deleting your avatar or measurements.
We do not use your data to build advertising or marketing profiles. AI only creates the images and suggestions you ask for; no automated decision with legal effects is made about you.
Your face photo and avatar
- Your face photo is used only to create your avatar and to show your outfits on it.
- It is not used for face recognition, identification, biometric templates or advertising; it is never sold or shared for these purposes.
- Before uploading, you are asked to confirm that the photo is of you and that you are over 18. Photos are also automatically checked to show a real adult (Google Gemini).
- The photo is stored in a private area that only your account can access. It is sent to the AI provider (fal.ai) only through a link that expires shortly after, to create your avatar.
- Deleting your avatar deletes your face photo and all avatar images. Closing your account deletes them too.
AI and service providers
The avatar, outfit try-on, background removal, clothing tagging, stylist and suggestions run on third-party AI services. When you use a feature, only the data that feature needs is sent over an encrypted connection to these providers:
- Supabase: account, sign-in, database and file storage. Your data is stored here.
- fal.ai: avatar, outfit image, background removal and 360° video generation. Sent: your face photo (for the avatar only), your avatar image, your clothing photos and an image description built from your profile's body details (gender, height, weight).
- Google Gemini (Google LLC): the safety check of your face photo, clothing tagging, stylist replies, suggestion pages and content safety. Sent: the photo to be checked, your clothing photos, your stylist messages and the parts of your wardrobe and profile (gender, city, style preferences, measurements) the stylist needs.
- Serper: store product search. Only the search phrase, language and country are sent; not who you are.
- Jina Reader and wsrv.nl: to fetch the public page and product image of a product link you paste. Only the product link is sent.
- RevenueCat, Apple and Google: managing and verifying subscriptions and purchases. RevenueCat receives your in-app user ID and purchase details.
- Apple and Google sign-in services: if you sign in with them.
These providers process your data only on our behalf and to provide the service. We do not use your data to train AI models and do not give it to anyone for that purpose. Your personal data is not sent to any AI provider unless you choose to use the feature concerned.
We do not share your data with anyone else except where required by law, for example by a court order, and we never sell it.
International transfers
Some of our providers have servers outside Türkiye (for example in the United States and the European Union). Your data is transferred there only to provide the service, over encrypted connections and based on the safeguards provided for by the GDPR and KVKK Art. 9 (standard contractual clauses or your explicit consent).
How long we keep it
- Account, profile, wardrobe, outfits, avatar and chats: as long as your account exists or until you delete them.
- Face photo: until you delete your avatar or your account.
- Technical and security logs: at most 90 days.
- Messages blocked by the stylist: their text is never stored; only the block category is kept for 30 days.
- After account deletion: a keyed, one-way hash of your email address is kept. It is used only to stop a new account with the same email from claiming the welcome gift again. Cost and revenue records are kept with the link to you removed.
- Purchase and billing records: with Apple and Google, for their legally required periods.
Deleted data is also removed from server backups automatically within the backup cycle.
Deleting your account and data
- In the app: My profile → Delete account. Your profile, avatar, face photo, wardrobe, outfits, chats and invite details are permanently deleted. If you signed in with Apple, the app's access to your Apple account is revoked too.
- If you cannot reach the app: follow the steps on kombinify.com/en/delete-account to ask us by email to delete your account.
- Without closing your account, you can delete your avatar, wardrobe items and stylist chats one by one in the app.
Deleting your account does not cancel your subscription. Cancel it in your App Store or Google Play subscription settings.
Your rights
Under the GDPR and KVKK you have the right to know whether your data is processed and to access it, to learn the purpose of processing and who it is shared with, to have incomplete or incorrect data corrected, to have your data deleted, to restrict and object to processing, to receive your data in a portable format, to withdraw your consent, and to claim compensation for unlawful processing.
You can edit your details and delete your account in the app. For any other request write to info@kombinify.com. We answer free of charge within 30 days at the latest. We may ask you to write from the email address registered to your account to confirm your identity. You also have the right to complain to the data protection authority where you live or to the Turkish Personal Data Protection Board.
Children
Kombinify is not intended for children under 13, and we do not knowingly collect data from children under 13. If we learn of such an account we delete it and its data. Parents who believe their child is using the app can contact us. Creating an avatar with your own face is only for people aged 18 or over.
Security
All connections are encrypted (HTTPS). Data is protected by per-account access rules; every user can reach only their own data. Photos are stored in private storage and your session is kept encrypted on your device. No system is perfect; if a data breach occurs we will inform you and the authorities within the legal deadlines.
Changes
We may update this policy. We will announce important changes in the app or on this page. Last updated: 28 October 2026.
Este sitio web
Este sitio web no usa cookies, no incluye herramientas de análisis ni de publicidad y no recoge datos mediante formularios. Para servir el sitio de forma segura, el proveedor de alojamiento puede guardar durante poco tiempo registros técnicos estándar, como direcciones IP.