Privacy Policy
Last updated: 25 September 2026
Sartor is made by Horus Teknoloji ve Dijital Hizmetler A.Ş. ("Horus Studios", "we"), which decides how the data described here is used (the data controller). Questions: hello@horusstudios.com.
The short version
- No account. Sartor never asks for your name, email or phone number. The app is tied to a random identifier created on your phone.
- Most of Sartor stays on your phone. Your measurements, your wardrobe list, your style answers and your closet photos are kept and read on the device.
- Two kinds of picture leave it, and only when you use them: the full-length photo you choose in order to see yourself in an outfit, and the cut-out of a garment you scan (never the photo it was cut from). They go to our storage and to the AI service that makes the picture.
- You can delete them. Profile → Delete my data removes every photo and cut-out you uploaded from our servers, and clears the phone.
- No advertising and no cross-app tracking. No ad networks, no advertising identifier, no data sold.
What stays on your phone
- Body measurements and sizes, whether you type them or they are estimated from a photo. The estimate runs on your phone.
- Your wardrobe list, saved outfits, the week plan, the log of what you wore, favourites and your style answers.
- Closet photos you scan. The garments are found and cut out on the phone.
- The pictures Sartor makes for you, once downloaded.
What leaves your phone, and why
| Data | When | Why | Where it goes |
|---|---|---|---|
| A random installation identifier | First launch | To hold your tokens and purchases without an account | Our servers |
| The full-length photo you choose | Only when you ask to see yourself in an outfit | To make that picture | Our storage, and the AI image service |
| Cut-outs of garments you scan or link | When you file a scanned garment or use a shop product in a picture | The image service reads garments by web address | Our storage, and the AI image service |
| What you ask for (the outfit, the scene, a note you type) | When you make a picture | To make that picture | Our servers, and the AI image service |
| Token records: purchases, the trial, what each token was spent on | When it happens | So a picture is never charged twice, and for accounting | Our servers |
| Purchase details | When you buy | To confirm the purchase and grant tokens | Apple, and Adapty (our purchase service) |
| Usage events: e.g. "opened an outfit", "tapped a shop link", with the product, shop and market | As you use the app | To see what is useful and improve suggestions | Our servers |
| A one-way hash of your IP address | When the app first connects | To stop the free trial being claimed over and over from one network. The address itself is not stored | Our servers |
| Your approximate location, rounded to about 11 km | Only if you switch on Local weather | To fetch today's forecast | Sent from your phone directly to Open-Meteo. Never to us |
We do not collect contacts, your photo library beyond the photos you pick, precise location, health data, or anything from other apps.
Who processes data for us
- Supabase — our database, file storage and server functions, hosted in Frankfurt, Germany (EU).
- Wiro (wiro.ai) — the AI image service. It receives the photo, cut-outs and request above and returns the pictures. The pictures it makes are held by Wiro under its own terms until your phone downloads them; we cannot delete copies on Wiro's side.
- Adapty — handles subscriptions and purchases. It receives purchase and receipt information, basic device information (model, OS, app version) and the installation identifier.
- Apple — processes all payments. We never see your card or Apple Account details.
- Open-Meteo — weather forecast, only if you switch local weather on.
- Shops — when you tap a product, the shop's page opens inside Sartor. What you do there is between you and the shop, under its own privacy policy. We do not add affiliate tracking.
We do not sell personal data, and we do not share it for advertising.
Legal bases (EEA, UK and Türkiye)
- To provide what you ask for (making pictures, keeping your tokens): performance of a contract.
- Your photo and your location: your explicit consent, given when you choose a photo or switch on local weather. You can withdraw it at any time.
- Usage events and trial-abuse protection: our legitimate interest in running and improving the service and preventing fraud.
- Token and purchase records: our legal obligations under accounting and tax law.
Under the Turkish Personal Data Protection Law No. 6698 (KVKK), the same purposes and grounds apply (Articles 5 and 6), and data transferred abroad (to Supabase in Germany and to our service providers) is transferred on the basis of your explicit consent and the safeguards those providers offer.
How long we keep it
- Photos and cut-outs you uploaded: until you delete them with Delete my data, or ask us to.
- Usage events: until you delete them with Delete my data, or ask us to.
- Token and purchase records: as long as accounting and tax law requires (up to 10 years in Türkiye). They contain no photos and no name.
- The IP hash for trial protection: kept by day and not linked to your identifier.
Your rights
You can ask to access, correct, delete or receive a copy of your data, to restrict or object to its use, and to withdraw consent. The quickest way to delete is in the app: Profile → Delete my data. For anything else, email hello@horusstudios.com from any address and tell us the request. We may ask for a detail from the app to find your records, since we do not know who you are.
You can also complain to your data protection authority — in Türkiye the Personal Data Protection Authority (KVKK), in the EU your national authority, in the UK the ICO.
Children
Sartor is not directed at children under 13, and we do not knowingly collect data from them. If you think a child has used Sartor, contact us and we will delete what we hold.
Security
Everything travels over encrypted connections. Uploaded files are stored under unguessable, per-installation names, and your photos on the device are protected by iOS data protection.
Changes
If this policy changes, the date above changes. If the change is significant, we will say so in the app.
Contact
Horus Teknoloji ve Dijital Hizmetler A.Ş. — hello@horusstudios.com