Shyaka
Privacy policy
Shyaka is an iPhone app for keeping a wardrobe, building looks, planning what to wear, sharing looks with friends and placing classified listings. This page explains what the app stores about you, why, where, and for how long. It is written from what the app actually does, not from a template.
Who we are
Shyaka is operated from Egypt. Operator details will be added before public launch. Until then, contact us at ahmednoeman04@gmail.com or on WhatsApp at +20 106 091 7193.
What we collect
- Account details. Your email address, and your name if you give it or if Apple or Google shares it when you sign in. Passwords are handled by our sign-in provider and are never readable by us.
- Your wardrobe. Photos of your clothes (we keep each photo in its original form and, to make the app lighter on data, in a second, smaller form that looks identical), profile photo, looks, plans, wear history, collections, trips, sizes and preferences, and your confirmation that you are 13 or older (and 18 or older, if you sell). These are private to you unless you choose to share a look.
- Things you share. Posts, questions, stories, comments and votes you publish to friends you have accepted.
- Classified listings. If you publish a listing, its photos, description, price and the phone number you give. The phone number is shown to another signed-in person only when they deliberately reveal it. We record that a reveal happened (who, which listing, when) to limit abuse, and tell the seller only how many reveals there were.
- Payments. The listing fee is paid through Apple in-app purchase. We receive Apple's verified transaction record (transaction ID, product, dates). We never see your card details.
- Shopify shops (businesses). If a business connects its Shopify shop, we receive through Shopify's Admin API, with the owner's approval: the shop's name and web address, the shop owner's e-mail address, and for each active product its title, description, vendor, type, price, photos, stock status and web address. We use them to create and run the business's Shyaka account and to show its products to Shyaka members. A member who saves a product's photo to their closet keeps a copy in their own private closet. We do not read orders, customers or payment information, and we hold no customer records. We keep the access token Shopify gives us (it can only read products) in a private store that no phone or other member can read. If a business disconnects its shop, or uninstalls Shyaka in Shopify, we delete the token and the imported products. Shopify's customer-data requests and erasure notices are answered automatically.
- Shop activity. When you open, save to your wishlist, add to your closet or tap Buy on a product from a shop in Shyaka, we record that action against the product, with your account identifier and the time. We use it to show the business simple totals for each product (for example how many people added it to a closet), never who they were, and to count one view per person per hour. These records are kept for 13 months, then deleted; if you delete your account the link to you is removed straight away. Your wishlist is kept until you remove items or delete your account.
- Sign in with Apple. If you sign in with Apple, we keep a token Apple gives us at sign-in. It is used only to tell Apple to end the connection when you delete your account, and it is deleted at that moment.
- Notifications. If you turn on push notifications, a device token for your phone.
- Reports. When you report a post, person or listing: what you reported, the reason you chose and anything you wrote.
- Support messages. What you write in Help and feedback. If you tick "Attach basic app information" we add the app version, platform and mode, and nothing else.
- Crash reports (on unless you turn them off). When something in the app breaks, an error report is sent to our error-reporting service, Sentry: the error, the screen it happened on, the app version, the phone model and iOS version. Before a report leaves your phone the app removes your account, your device name and any e-mail address or phone number in the error text. You can turn crash reports off under Settings → Sharing & data.
- Usage counts (off unless you turn them on). Counts of which features are used and how long a scan takes and whether it worked, also sent to Sentry. They never include your clothes, photos, name, e-mail, phone number, messages or location. Turn them on or off under Settings → Sharing & data.
- Scan log (Settings → Sharing & data → Help improve the scanner, on unless you turn it off; turning it off stops it and deletes anything not yet sent). For each photo you scan while signed in: which scanning method ran, how long each step took, the type of phone (low, mid or high end), how many pieces were found, how sure the scanner was, and whether you kept, changed or discarded the result. No photo, no text you typed and no name. Each record carries a scrambled code made from your account instead of your account itself, so we can count scans per person without knowing who; the records are deleted with your account.
What we do not collect
- No advertising and no tracking across other companies' apps or websites. We do not sell your data.
- Location only if you ask for it. Weather uses a city you search for or pick, or your area if you tap Use my location. Only then does the app ask iPhone for your approximate location; it is rounded to about 1 km on your phone, saved with your private settings and never shared. It is never read in the background.
- No contacts, health data, browsing history or search history.
Why we use it, and the legal basis
- To provide the app you asked for (our agreement with you): sign you in, keep your wardrobe, show your friends what you chose to share, run listings and verify the listing fee, send notifications you turned on, and answer support requests.
- To keep the app safe and working (our legitimate interest, which you can object to): crash reports, the scan log (to find and fix where the scanner gets clothes wrong; switch it off at any time), the phone-number reveal record, reports and moderation, and limits that stop abuse.
- Only with your permission (consent, which you can withdraw at any time in Settings): usage counts, push notifications, accurate clothing recognition, and cloud photo cutouts if they are ever switched on.
- Because the law requires it (legal obligation): payment records.
Where it is stored
Your account, wardrobe, photos, listings and the scan log are stored by Supabase in Frankfurt, Germany (European Union). Crash reports and usage counts go to Sentry (Functional Software, Inc.) in its European Union data region (Germany). This means your data is transferred from Egypt to the European Union, where it is protected by European data protection law (the GDPR).
Who else processes it
- Supabase hosts the database, file storage and sign-in.
- Sentry receives crash reports and, if you turned them on, usage counts.
- Shopify provides the connection to a business's shop and sign-in with Shopify. We only receive what the business approves on Shopify's own page.
- Apple provides Sign in with Apple, push notifications and in-app purchase. Google provides Sign in with Google if you choose it.
- MET Norway (the Norwegian Meteorological Institute) provides the weather. Our server asks for it, not your phone, and the request contains only the coordinates of your chosen place rounded to about 1 km, never your precise location, your device or your account. Weather data: MET Norway, licensed under CC BY 4.0.
- OpenStreetMap Nominatim answers city searches. Our server sends it only the city name you typed, never your location, device or account. Search data © OpenStreetMap contributors (ODbL).
- Accurate clothing recognition (off unless you allow it, on the scan screen or under Settings → Sharing & data): for each scan, the photo and the cut-out piece are sent through our server to OpenAI, which names the piece and its colour. The photo is used only to answer, is not stored by Shyaka, and is sent with OpenAI's no-storage setting; OpenAI does not use API data to train its models. We keep only a count of how many pieces you had named that day, for two days, to limit costs.
- Cleaner cutouts (part of the same permission): the photo is also sent through our server to Replicate, which runs a cutout model and returns the piece's outline. When someone is wearing the piece, this happens only after you tap the piece you want, and the spot you tapped is sent with the photo. Replicate deletes the photo and the outline within an hour; Shyaka does not store them. We keep only a count of these cutouts per day, for two days, to limit costs.
- If cloud photo cutouts are ever switched on, a photo you choose to scan is sent to Photoroom for background removal, and only after you give separate consent.
How long we keep it
- Your account, wardrobe, photos, looks, posts and profile: until you delete them or your account.
- Listings: until you delete them or your account. Listing photos that were never published are removed after 7 days.
- Phone-number reveal record: 90 days.
- Reports and moderation notes: 90 days, then deleted.
- Support messages: while your account exists; deleted with your account.
- Scan log: 180 days, or until you delete your account if that is sooner.
- Crash reports and usage counts: up to 90 days at Sentry.
- Notification device tokens: 30 days after your phone last checked in.
- Data exports: the ZIP file is deleted after 24 hours.
- Payment records: 5 years after the payment, for tax and accounting law. They survive account deletion, but without your name, email or any link to your account: only Apple's transaction ID, the product, the environment and the purchase and check dates.
- Backups: our hosting provider may keep backup copies of the database for up to 7 days. Data you delete leaves the backups when they roll over.
Deleting your account
You can export your data and delete your account from Settings. Deleting removes your wardrobe, photos, plans, profile, listings, phone number, support messages, scan log and sign-in. If you signed in with Apple, we also tell Apple to end the connection. Only the anonymous payment records described above remain.
Children
Shyaka is for people aged 13 and over. Selling in Market is for people aged 18 and over. We ask you to confirm your age once when you start, and again before your first listing. If you believe someone younger has an account, tell us and we will remove it.
Your choices and rights
You can edit or delete anything you added, turn notifications, crash reports and usage counts on or off, block or report people, and export or delete your data from the app. You can also ask us to see, correct or delete your data, or object to how we use it, by writing to us. If you are not happy with our answer, you can complain to the data protection authority where you live (in Egypt, the Personal Data Protection Centre).
Changes and contact
If this policy changes in a way that matters, the app will tell you before it applies. Questions: use Help and feedback in the app (Settings, then Support), email ahmednoeman04@gmail.com, or WhatsApp +20 106 091 7193.