Privacy Policy

Effective date: 17 July 2026

We aim to explain things honestly and in plain language. The data controller is Alexei Vasyutin (private individual, Poland), contact: hello@10of10.fit. Sales are carried out by Lemon Squeezy as Merchant of Record — it processes the payment data.

10of10 (Virtual Atelier) is a virtual clothing try-on: you upload photos, our team of AI experts shows the item on you, takes measurements, selects a colour palette and gives advice. So that every subsequent try-on is more accurate, we store your photos and results in your profile. We do not sell your data and do not use it for advertising. Part of the processing is performed by our technical providers (see §5). You can request deletion of your data at any time.

01What data we collect

Data you provide when using the try-on:

Automatically: technical data (device/browser type), user identifier; when signing in via Google — account identifier and email. Cookies / local storage — see §8.

Payment data (card, billing address) is entered not with us but with Lemon Squeezy — see §5.

02Why and on what basis

PurposeLegal basis (GDPR)
To run the try-on, take measurements, give advicePerformance of a contract
To store the profile and photos for the accuracy of future try-onsPerformance of a contract / legitimate interest
Payment processingPerformance of a contract / legal obligation
Protection against abuse (limits, fingerprint)Legitimate interest
Anonymised taste analytics (B2B)Legitimate interest (anonymised data only)

03How and where data is stored

Data and media are stored on the servers of our providers (hosting — Render; AI processing — Google), which may be located in the EU and/or the USA. Photos and try-on results are held in a private zone and are served only upon a secured request to the authorised user. Retention period: as long as you have an account; data of inactive accounts is deleted no later than 24 months; at your request we will delete it sooner.

04Automated AI processing

The atelier is the considered work of a team of AI specialists, but they, like people, can make mistakes. The try-on, measurements, palette, scores and advice are produced by AI models and are of an evaluative, informational nature — please double-check the responses and do not treat them as a guarantee of fit, size or final result. Generated photos and videos are an approximation, not an exact depiction of how the item will fit in reality. We do not make decisions about you that have legal significance based solely on automated processing.

05Whom we share data with (sub-processors)

We do not sell data. To operate the service, it is processed by our providers:

Partner brands (B2B) do not receive customer photos — they have access only to anonymised textual analytics (body type, feedback on an item), without images or personal identifiers.

06International transfers

Our providers (Google, Render, Lemon Squeezy) may process data outside the EU/EEA, including in the USA. In such cases the transfer relies on legally prescribed safeguards — as a rule, standard contractual clauses (SCCs) — within the framework of their own data processing terms.

07Your rights

You have the right to: access your data, rectify it, erase it (the "right to be forgotten"), restrict or object to processing, obtain a copy (portability), withdraw consent. Deletion and a copy of your data are available on a self-service basis directly in the app: on the home screen tap "⋯" → "Privacy and data" → "Download a copy of my data" or "Delete my data" (profile, photos, measurements and history are deleted — on the server and on the device). For other requests — write to hello@10of10.fit. You may also lodge a complaint with the data protection supervisory authority of your country.

08Cookies and local storage

We use the browser's local storage for the operation of the service (profile, settings, sign-in token, remembering your cookie choice). Strictly necessary technologies operate without consent; for optional ones (analytics/marketing, should they appear) we request consent via a banner.

09Children

The service is not intended for persons under 16 years of age. The threshold of 16 years corresponds to the age of digital consent under the GDPR in Poland (Art. 8 GDPR). We do not knowingly collect children's data; if you believe a child has provided us with data, write to us and we will delete it.

10Changes

We may update this policy; we will notify you of material changes on the website or by email. The date of the last update is shown at the top.

11Contact

Privacy questions: hello@10of10.fit
Controller: Alexei Vasyutin (private individual, Poland)