Last updated: 2026-06-14

Wersja polska →

Privacy Policy

This privacy policy explains what personal data the NextOutfits app collects, why we process it and what rights you have as a user. We try to write in plain language. If anything is unclear, please email us at kontakt@nextoutfits.pl.

1. Data controller

The controller of your personal data is:

NEXT REAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Gdańska 13, 50-334 Wrocław, Poland
KRS: 0001242343
NIP: 8982334148
REGON: 544812952

Contact for matters related to personal data: kontakt@nextoutfits.pl

You can write to this address at any time with questions about your data. We respond within a reasonable time, usually within 14 days.

2. What data we process

We process, in particular, the following categories of data:

• Account data — your email address and the internal user identifier assigned by the authentication system.
• Style profile from onboarding — information you provide during the first launch of the app: gender, style preferences, sizes, favourite colours and similar data used to better match outfit suggestions to your taste.
• Wardrobe — clothing photos you upload, automatically generated tags (category, colour, material, season, etc.) and names you assign to items.
• Outfits, plans and in-app activity — outfits you build in the app, plans for specific days, ratings, swipe decisions, inspiration likes and other interactions with app features.
• Technical and diagnostic data — server logs (IP address, request time, device type), security and feature-usage events.

The categories of data we process may evolve as the app evolves; we will inform you of material changes as described in section 9.

Social features data

If you enable a public account, we additionally process:

• Public profile — your handle (username) and avatar (profile photo), visible to other users.
• Published outfits and clothing photos — outfits and photos you choose to publish become visible to other users of the app.
• Following — information about who you follow and who follows you.
• Age declaration — to enable a public account, we require confirmation that you are at least 16 years old. We store whether this declaration has been made (yes/no), without collecting your date of birth.

Social features data (public profile, published content, following relationships) is deleted when you delete your account or turn off your public account. Published outfits stop being visible to other users immediately after you turn off your public account.

3. Photos and AI analysis

The app is built around automated analysis of your clothing photos. We want you to understand how this works:

• Photos you add to your wardrobe are sent for automated analysis using artificial intelligence models. The models recognise what is in the photo, generate tags (category, colour, material, season, style), remove the background and may be used to generate outfit suggestions and other recommendations.
• The analysis is performed with the help of external AI model providers (listed in section 5). A photo is shared with a provider for the purpose of performing a specific operation.
• Data uploaded to the app (including photos, tags and interactions) may also be used to improve and develop the service and our algorithms, and to create anonymised or aggregated datasets which, once anonymised, are no longer personal data.
• We recommend that you do not upload photos showing other people. The app is designed for photos of clothing only. If your face or someone else's face is in the photo, our models focus on the clothing, but we cannot control how the AI provider processes the image.
• Your photos are privatein the sense that other users of the app do not have access to them through the app's interface.

4. Purposes and legal bases

We process data, in particular, for the following purposes and on the following legal bases:

1. Providing the service (Article 6(1)(b) GDPR) — processing necessary to perform the agreement for the provision of services by electronic means that you enter into with us when you create an account. Without this data the app cannot work.
2. Legitimate interest of the controller (Article 6(1)(f) GDPR) — keeping the system secure, diagnosing errors, preventing abuse, improving and developing the app and its algorithms, running statistical analyses, creating anonymised/aggregated datasets, and establishing, exercising or defending legal claims.

5. Recipients (data processors)

We rely on external technology providers. Each of them processes data under a data processing agreement (or equivalent mechanisms):

• Supabase Inc. — database and user authentication.
• Cloudflare Inc. — storage of clothing photos (Cloudflare R2) and content-delivery services.
• AI model providers via the kie.ai platform — analysis of clothing photos (item recognition, tag generation, further AI features).
• WaveSpeed — automatic background removal from clothing photos.

The list of specific providers may change as the app evolves. We currently do not sell personal data and do not share it with third parties for marketing purposes.

Where a provider processes data outside the European Economic Area, we put in place appropriate safeguards (Standard Contractual Clauses approved by the European Commission or equivalent mechanisms).

6. Retention period

We keep your data for as long as your account exists and for a period necessary after account deletion — in particular for the purposes of managing backups, complying with legal obligations, and establishing, exercising or defending legal claims.

In a typical scenario, standard operational backups are overwritten within 30 days of account deletion. Technical data (logs) is kept for as long as needed for the purposes set out in section 4, typically up to 12 months.

Anonymised or aggregated data that does not allow you to be identified may be retained and used without time limitations.

7. Your rights

You have the following rights under the GDPR at any time:

• Right of access — you can find out what data we process about you.
• Right to rectification — you can request correction of inaccurate data or completion of incomplete data.
• Right to erasure(“right to be forgotten”) — you can request deletion of your data. The easiest way is to delete your account in the app.
• Right to restriction of processing — you can request a temporary pause on processing in specific situations.
• Right to data portability — you can receive your data in a structured format and transfer it to another service.
• Right to object to processing based on legitimate interest.
• Right to lodge a complaint with a supervisory authority — the President of the Polish Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise any of these rights, write to kontakt@nextoutfits.pl. We may ask you to confirm your identity to make sure we are not sharing data with an unauthorised person.

8. Account deletion

You can delete your account in the app at any time:

1. Open the Profile tab.
2. Select Delete account.
3. Confirm in the dialog that appears.

Once your account is deleted, you lose access to your data and photos in the app. Permanent removal from our systems takes place in the manner and within the timeframes described in section 6. Anonymised or aggregated data, and data that we are required to keep under applicable law, may continue to be processed.

9. Changes to this policy

We may update this policy as the app develops, when the law changes, when our providers change or when our service model changes. We will inform you of material changes in the app or on the website.

The current version is always available at https://nextoutfits.pl/privacy/en.

Nothing in this policy limits any rights you have under mandatory provisions of applicable law, including the GDPR and consumer law.

Last updated: 2026-06-14.

NEXT REAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Gdańska 13, 50-334 Wrocław, Poland
KRS: 0001242343 | NIP: 8982334148 | REGON: 544812952
kontakt@nextoutfits.pl