Privacy Policy

Last updated: 31 July 2026

This Privacy Policy explains how ESKELIA ("we", "us"), the data controller, processes your personal data when you use MixyLook. ESKELIA is a SASU registered at 10 rue de Penthièvre, 75008 Paris, France (see our Legal notice). We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable French law.

1. Data we collect

• Account data: your name, email address, and authentication identifiers. If you sign in with Apple or Google, we receive the identifiers those providers share with us.
• Content you submit: photos of yourself, garment images you upload, and listing links you paste, together with the images we generate for you.
• Purchase data: records of credits and in-app purchases. Payment card details are handled by the app stores and our payments partner — we do not receive or store your card number.
• Usage and technical data: log data, device and app information, and events needed to operate the Service, prevent abuse, and enforce our free-credit grant.

2. Why we process it, and legal bases

• To provide the Service (creating your account, generating try-on images): performance of our contract with you.
• To process purchases and credits: performance of our contract and compliance with legal obligations (e.g. accounting).
• To prevent fraud and abuse (including limiting the free grant to one per person): our legitimate interest in protecting the Service.
• To maintain security and improve reliability: our legitimate interest.
• For communications you opt into: your consent, which you can withdraw at any time.

To enforce the one-per-person free grant, we store a keyed, irreversible fingerprint of your sign-up identifier — never the identifier itself in clear.

3. Service providers (processors)

We share data with providers who process it on our behalf, under contract and only as needed to run the Service:

| Provider | Purpose | Data | | --- | --- | --- | | Neon | Database hosting | Account, credits, and reference data | | Cloudflare R2 | Image storage | Reference photos and generated images | | Google (Gemini) | AI image generation | The photos and garment images you submit | | Inngest | Background job processing | Job metadata for generation workflows | | RevenueCat | In-app purchase management | Purchase and entitlement data | | Hostinger | Server hosting | Application traffic and logs |

Apple and Google act as independent controllers for app-store payments and, where you use social sign-in, for authentication.

4. Your images

The photos you submit are sent to the AI provider to generate your try-on and are stored so you can access your results. We do not sell your images or use them to advertise to you. We do not use your photos to train third-party models beyond what is required to fulfil your request.

5. International transfers

Some providers are located outside the European Economic Area (for example in the United States). Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Retention

We keep account and content data for as long as your account is active. When you delete your account, we delete or anonymise your personal data within a reasonable period, except data we must retain for legal, accounting, or fraud-prevention purposes — including the irreversible sign-up fingerprint, which is kept to keep the free grant one-per-person.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and object to the processing of your personal data, the right to data portability, and the right to withdraw consent. You can exercise these rights, including deleting your account, from within the app or by contacting us. You also have the right to lodge a complaint with the French data protection authority (CNIL) or your local supervisory authority.

To make a request, contact contact@eskelia.com.

8. Cookies

The website uses only the cookies strictly necessary to operate it, such as maintaining your session. We do not use advertising cookies.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes and contact

We may update this Policy and will revise the date above. For any question about this Policy or your personal data, contact us at contact@eskelia.com.