Privacy Policy

1. About this policy

This policy covers the AYNA website, its account services and the AYNA iPhone preview, including supported photo import, sharing and generation features. References to AYNA, we, us and our mean the team operating these services. Third-party stores, sign-in services and apps have their own privacy notices for information they collect independently.

Features differ between versions. The public website displays prepared styling examples; its comparison slider does not upload your photos or create a new image. An iPhone build connected to the generation service can send the photos you submit to a server and an external AI provider. A demonstration build may instead show sample results and keep its working photo state on the device.

This notice describes the current preview. The legal operator’s identity and a dedicated public privacy contact have not yet been published. Those details, together with the final production data-handling arrangements, need to be added before public launch.

2. Information you provide

The information involved depends on the features you choose. Browsing prepared examples does not require you to provide a portrait or body photo. Creating a personalised look requires the images needed for that request.

• Account information: your email address, account identifier and the name or profile image supplied by an enabled sign-in provider, together with session and authentication records. AYNA does not receive your sign-in provider’s password.
• Photo and outfit content: selected portraits, full-body images, studio references, garment images and imported outfit material. Images can reveal your face, physical appearance, surroundings and other personal details visible in the frame.
• Creative choices and results: your outfit description, scene, lighting and pose choices, generated studio images and looks, and the identifiers needed to associate them with your requests.
• Feedback: ratings, report reasons and any details you choose to submit about an image. In a connected build, feedback and reports can be stored with the relevant generation and account identifier.
• Communications: information you voluntarily share when communicating with the AYNA team. Avoid including passwords, identity documents or unrelated sensitive information in a report or message.

3. Technical information and preferences

Operating the website and account service involves network and request information, which can include an IP address, browser or device information, request timestamps and error records. The website can use browser language and a country code supplied by its hosting infrastructure to choose a language. This does not require access to your device’s precise GPS location.

The connected generation service stores job identifiers, status, timestamps, selected generation options, allowance balances and allowance adjustments. These records let a request continue in the background and let the app retrieve progress and completed results.

If you enable supported completion notifications, the service registers a device notification token, installation identifier, account association and notification language. These are used to route a completion alert to the appropriate installation.

4. How information is used

AYNA uses information to deliver the features you request and to operate the preview. For example, a photo is needed to generate a personalised visual, while an email address is needed to deliver an email sign-in link. Choosing not to provide required information may prevent the corresponding feature from working; you can still browse publicly available content.

• Create and maintain accounts, authenticate access and keep sessions working.
• Prepare and process image requests, deliver results, maintain generation history and manage the associated allowance.
• Import outfit material you select, remember preferences and support export or sharing that you initiate.
• Deliver requested sign-in messages and, where enabled, generation-completion notifications.
• Investigate failed jobs, quality feedback and reported content; diagnose errors and protect the service against misuse.
• Handle applicable legal obligations and requests, and establish or defend legal rights where necessary.

5. Photos, face checks and AI processing

The iPhone app can check whether a selected studio photo contains a visible face using Apple Vision on the device. This check is used to assess whether the image is suitable for the feature. It does not verify identity, prove ownership of a photograph or authenticate you by your face.

When you submit a request in the connected test version, the selected reference images and generation instructions are sent to the AYNA generation service. The current test service uses OpenAI image generation through Codex. The AI provider receives the material needed to generate the requested image, including visible facial and body characteristics. Submitting a photo for this feature is therefore not an exclusively on-device operation.

AYNA’s current application code does not include a model-training pipeline using your uploads. This is not a promise about an external provider’s retention or training practices: those depend on the provider agreement and the account configuration used for processing. A production no-training or fixed-retention commitment is not established by this preview notice.

Only submit images of yourself and outfit references you are entitled to use. Avoid photos containing other people, children, private documents or sensitive details in the background. You can choose not to use generation if you do not want the selected images processed by an external provider.

6. Services involved in delivering AYNA

Information is passed to the services involved in the feature you use. A provider being listed here does not mean that every visit sends information to that provider; for example, browsing a prepared example does not submit that image to the generation provider on your behalf.

• Sign-in providers: Microsoft, Apple or Google, when enabled and selected, process the sign-in request and return permitted account information. Email sign-in, when configured, uses Resend to deliver a temporary access link.
• AI processing: the connected test generation service sends reference images and instructions to OpenAI through Codex and receives the generated output.
• Hosting and storage: the configured application server and database hold account and operational records. Generated originals and previews in the connected service are stored in private Cloudflare R2 storage; older results may also exist in the database.
• Live progress: Pubb carries generation-change events so the app can refresh progress. The current event contains a change signal on an account-associated channel, rather than the photo, prompt or generated image.
• Notifications: Apple Push Notification service delivers supported completion alerts. The notification includes information needed to open the relevant generation, rather than the image itself.

7. Sharing, exports and external websites

Importing an outfit through the iPhone share extension places the selected material in an inbox on your device. Resolving a shared link or loading its preview can contact the source website, which may receive ordinary request information under its own privacy practices.

Saving an image to Photos or sharing it with another app creates a separate copy outside AYNA’s control. The recipient, destination app and any photo-backup service you use may retain that copy. Clearing data in AYNA does not delete exported images, messages or copies held by someone else.

Retailer links take you to independent websites. AYNA does not process a clothing purchase made there. We may also disclose relevant information where legally required, or where necessary and lawful to investigate misuse or protect people and legal rights. This does not give third parties unrestricted access to your photo library.

8. Cookies and device storage

The website uses session cookies for sign-in and a language-preference cookie when you choose a supported language route. The language cookie is configured to last up to one year unless you clear it earlier. Your browser can block or remove cookies, although blocking session cookies can prevent account features from working.

The iPhone preview stores preferences and feature state on the device. Some settings, including language, can remain after sign-out. The current website implementation does not include advertising pixels or session-replay analytics. A sign-in provider or a retailer you visit separately may use its own cookies.

If optional tracking is introduced, the applicable notice and any legally required choices must be provided before that tracking is used. Accepting the Terms of Use is not a substitute for any consent that privacy law requires.

9. Storage and retention

Different types of information have different lifecycles. In the connected generation service, input images are stored while a job is queued or running. The application removes those image inputs from the active job record when it records completion, failure or cancellation. Temporary working files are also removed during normal generation cleanup. An interrupted process or a backup can have a different lifecycle; this is not a guarantee of immediate deletion from every system.

While your account is active, generated results, job history, feedback, reports and allowance records are retained to provide saved results and account features. Account and session data are held by the authentication service. Deleting your account deletes all data associated with you from AYNA’s systems and makes it inaccessible, as explained below.

No fixed inactivity-based retention period is specified for active accounts. Account deletion is a separate action and does not depend on waiting for an inactivity period to expire. External services may independently hold information under their own privacy notices, such as a retailer’s purchase records or a sign-in provider’s account; deleting AYNA does not close those independent accounts.

10. Account deletion and permanent loss of access

When you delete your AYNA account, all data associated with you in AYNA’s systems is deleted and made inaccessible. This includes your account and profile information, submitted photos, studio references, generated looks, generation history, saved content, feedback, reports, allowance records and account-linked notification information.

Account deletion is permanent. Your deleted data cannot be viewed, retrieved or restored through AYNA, and signing in again or creating a new account does not recover it. Save any images you want to keep before completing account deletion.

Signing out, uninstalling the app or clearing only local device data is different from deleting your account. Those actions alone do not initiate account deletion. Make sure you use the account-deletion action when you intend to remove all account-associated data.

Images you previously exported to your own photo library, sent to someone else or shared on another platform are separate copies outside AYNA’s control. You must manage those copies with their recipients or through the relevant device or service. Deleting AYNA also does not delete an independent Microsoft, Apple or Google account used for sign-in.

11. Your device controls

You can choose which photos to provide through supported system pickers and manage AYNA’s available permissions in iOS Settings. Withholding photo access can limit import or export features. Changing a device permission does not recall information you have already submitted to the generation service.

You can turn off notifications in your device settings. Notification previews may be visible on the lock screen depending on your settings. Disabling alerts does not necessarily cancel a generation that has already started, and closing the app does not automatically cancel a server job.

12. Security and access

The connected image service uses private object storage and time-limited image links. Account and image access checks, limited notification payloads and restrictions on uploaded files help reduce unnecessary exposure. A valid image link can still be used by someone who obtains it before it expires, so avoid forwarding private links unintentionally.

No internet service or storage system can guarantee complete security. Protect your sign-in account and device, keep software current and use particular care with photographs you would not want another person to see. Development and preview systems should not be treated as a permanent archive for your only copy of an image.

13. International processing

The services used for authentication, generation, storage and notifications may process information in countries other than the one where you live. AYNA does not promise that the current preview keeps all information in the United Kingdom, the European Economic Area or any other single region.

Where data-protection law restricts an international transfer, an appropriate legal mechanism is required. The final production provider arrangements, processing locations and applicable safeguards have not yet been published; this notice should not be read as confirmation of a particular transfer certification or contractual safeguard.

14. Privacy rights and legal grounds

Depending on your location and the applicable law, you may have rights to access your personal information, correct inaccuracies, request deletion, restrict or object to certain processing, and receive eligible information in a portable form. These rights can be subject to conditions and exceptions. You may also complain to the relevant data-protection authority, including the Information Commissioner’s Office in the UK where applicable.

Where UK or European data-protection law applies, processing needs an appropriate legal basis. Providing requested account and generation services may rely on performance of a contract; proportionate security and troubleshooting may rely on legitimate interests; legally required recordkeeping may rely on legal obligation. Processing that requires consent must rely on a valid, separate choice. The final operator must establish the applicable basis for each production activity.

If processing relies on your consent, you may withdraw it without affecting the lawfulness of earlier processing. Verification may be needed before a request involving account information can be fulfilled, to avoid disclosing or deleting another person’s data. The missing public contact details described above do not remove your statutory rights.

15. Adults only

AYNA’s preview is intended for people aged 18 and over. Do not use the service to submit photographs of children. A face-presence check does not establish age, and AYNA should not be used as an age-verification tool.

If you believe a child’s information has been submitted, avoid sharing it further and raise the issue with the AYNA team through an existing communication channel, if you have one. A dedicated public reporting contact remains to be published.

16. Changes to this policy

This page may be updated as AYNA’s features, providers and data-handling arrangements change. The date above identifies the latest revision. Material changes that require notice or a new choice under applicable law must be communicated accordingly; simply updating this page does not replace any required consent.

Read the version applicable to the feature you are using. A future production release may have different processing arrangements from the connected local test version described here.