Privacy Policy

For the CuratedCart mobile application and the stylme.co.za website.

1. About this policy and our products

This Privacy Policy explains how StylMe (Pty) Ltd ("StylMe", "we", "us" or "our") collects, uses, shares and protects your personal information when you use:

• The CuratedCart mobile application (available on Google Play and the Apple App Store), and
• The stylme.co.za marketing website.

About the brand names: "StylMe" is the trading name of our company and the brand under which we promote the product on our website. "CuratedCart" is the public name of our mobile application as it appears on Google Play and the Apple App Store. Both names refer to the same product, operated by the same company. This policy applies to both.

By using CuratedCart or the stylme.co.za website, you agree to this Privacy Policy. If you do not agree, please do not use our products.

2. What information we collect

2.1 Information you give us directly

• Account information: name, email address, password (stored hashed, never in plain text), and a unique user ID generated when you sign up.
• Profile information: body shape, skin tone selection (chosen from a colour palette), height, weight, and styling preferences. You provide these to receive personalised outfit recommendations.
• Photos you upload: photos used for the virtual try-on feature and for adding items to your digital wardrobe.
• Voice input: when you use voice search, your speech is converted to text on your device. We process the resulting text, not the audio recording.
• Communications: if you contact us by email or via the contact form on stylme.co.za, we receive your message and any details you choose to share.

2.2 Information collected automatically

• Device and app information: device model, operating system version, app version, language, time zone, and a Firebase installation ID.
• Usage information: features you use, outfit requests you make, items you save, and search history within the app.
• Approximate and precise location: only when you grant location permission, used to suggest nearby stockists. You can disable this at any time in your device settings.
• Diagnostics and crash logs: technical reports generated when the app encounters an error, used to improve stability.

2.3 Information about your subscription

When you subscribe to CuratedCart Premium or Pro:

• Payments are processed by Google Play Billing (Android), Apple In-App Purchase (iOS), or PayFast (web). These providers handle your payment details directly. We never see, store or transmit your full card number, CVV or banking credentials.
• We receive only the result of the transaction (e.g. "subscription active"), the product purchased, and a transaction reference, which we use to grant you access to your subscription tier.

2.4 Data types disclosed to Google Play and Apple

3. How we use your information

We use the information described above to:

• Operate the app and the website (sign you in, save your profile and wardrobe, sync across devices).
• Generate personalised outfit recommendations based on your body shape, skin tone, occasion and preferences.
• Power the virtual try-on feature.
• Suggest South African and international retailers where you can buy items.
• Provide customer support when you contact us.
• Detect and prevent abuse, fraud, and violations of our Terms of Service.
• Improve our products through analytics on aggregate usage patterns.
• Comply with legal obligations.

What we do not do: we do not sell your personal information. We do not use your photos or wardrobe data to train AI models for any purpose other than serving you. We do not show third-party advertisements in the app.

4. Legal basis for processing

Under the South African Protection of Personal Information Act, 2013 (POPIA), and where applicable the EU General Data Protection Regulation (GDPR), we rely on the following legal grounds:

• Performance of a contract: to operate the app and provide the service you signed up for.
• Your consent: for optional features such as location, photos, and microphone, which you can grant or revoke in your device settings.
• Our legitimate interests: to keep the service secure, prevent fraud, and analyse aggregate usage to improve the product.
• Legal compliance: where we are required by law to retain or disclose information.

5. How we share your information

We share personal information only in these limited circumstances:

• Service providers acting on our behalf (see Section 6 below). These providers process information solely to deliver the service to us and are bound by contractual confidentiality obligations.
• Legal authorities, when required by law, court order, or to protect the rights, safety or property of StylMe, our users, or the public.
• In connection with a business transfer, if StylMe is involved in a merger, acquisition, or sale of assets, in which case we will notify you before your information is transferred and becomes subject to a different privacy policy.

We do not sell your personal information to advertisers or data brokers.

6. Third-party services we use

Each provider has its own privacy policy, available on its website. We use them under contracts that require them to protect your information.

7. How long we keep your information

• Active accounts: we keep your data for as long as your account is active.
• After deletion: when you delete your account (see Section 10), we delete your personal data within 30 days. Some information may be retained longer where required by law (for example, financial records related to subscriptions, kept as required by SA tax legislation).
• Anonymised analytics: aggregate, non-identifying analytics may be retained indefinitely.
• Backups: deleted data may persist in encrypted backups for up to 90 days before being overwritten.

8. How we protect your information

• All data in transit is encrypted using TLS / HTTPS.
• Passwords are never stored in plain text.
• Database and storage access is restricted by role-based rules and authenticated requests.
• Server-side functions enforce authorisation checks before any data is read or modified.
• We follow industry-standard practices for software development and infrastructure hardening.

No method of transmission or storage is 100% secure. If we ever become aware of a security breach affecting your personal information, we will notify you and the South African Information Regulator as required by POPIA.

9. Your rights

Under POPIA (and GDPR where applicable), you have the right to:

• Access the personal information we hold about you.
• Correct any information that is inaccurate.
• Delete your account and your personal information (see Section 10).
• Object to certain processing.
• Withdraw consent for optional permissions at any time, via your device settings.
• Lodge a complaint with the South African Information Regulator: inforegulator.org.za.

To exercise any of these rights, email support@stylme.co.za. We will respond within 30 days.

10. How to delete your account

You can delete your account at any time:

• From inside the app: open Settings → Account → Delete Account. This deletes your account and associated personal data immediately.
• From the web (no app required): visit stylme.co.za/delete-account and submit the form.

What happens when you delete your account:

• Your profile, photos, wardrobe, saved outfits and request history are deleted within 30 days.
• Your account email is removed from authentication systems.
• Backup copies are overwritten within 90 days.
• Anonymised analytics that contain no personal identifiers may be retained.
• Records required by SA tax law (e.g. invoices) are kept for the legally required period and then destroyed.

11. Children's privacy

CuratedCart is not directed at children under 13 (or under the age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact support@stylme.co.za and we will delete it.

12. International users and data transfers

StylMe operates from South Africa. If you use CuratedCart outside South Africa, your information may be transferred to and processed in South Africa, the United States (where Firebase, Anthropic and FASHN.AI servers are located), or other countries where our service providers operate. We rely on appropriate safeguards, including standard contractual clauses and providers certified under recognised privacy frameworks.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we update the "Last updated" date at the top of this page. For material changes, we will notify you in the app or by email at least 14 days before the change takes effect.

14. Contact us

StylMe (Pty) Ltd
Registration number: 2026/145462/07
Registered office: 957 Jack Klipin Road, Zone 1, Diepkloof, Gauteng, 1862, South Africa
Email: support@stylme.co.za
Website: stylme.co.za