Privacy Policy

1. Who we are

Wearly Labs is operated by Bohuslav Poláček, Dobré 13, 517 93 Dobré, Czech Republic. Reg. No. 08831980, VAT ID CZ0011043648. We are the data controller for everything described below. You can reach us at info@wearlylabs.com.

2. What we collect

• Your answers. What you tell us about your coloring, your body, your wardrobe and the styles you wear.
• Your photos. Up to five photos of yourself that you upload during the questionnaire.
• Your finished analysis. The result the engine produces: your season and palette, the verdicts on 50 colors, your body type and cuts, and your six outfit images. This is the thing your page is made of, and we keep it. Section 4 explains what that means.
• Your email address. So we can send you the key to your page, and send it again if you lose it.
• Your order. What you bought, when, and the amount. Payment card details never reach us, they are handled by our payment provider.
• Your answer to our one question. If you click one of the three answers in the email described in section 5, or reply to it, we keep that answer, your reply if you wrote one, and your address, so we can act on it and see how many people answered. Nothing else about that email is stored, and we do not record whether you opened it.
• Whether you told us to stop writing. If you ask us not to send the follow-up email described in section 5, we keep your address on a list whose only purpose is to make sure you never get another one.
• A gift, if you buy one. Your email address and your name, and, if you ask us to send it, the recipient's email address and the words you write to them. We use the recipient's address for one thing: to send them the gift code. They become our customer only if they redeem it, and from then on this policy applies to them like anyone else.

We do not ask for your name beyond what you choose to put in your analysis, and we do not ask for your postal address.

3. Your photos

This is the part most people want to read first.

Your photos are used for exactly one thing: producing your analysis. They are read for your undertone, contrast, hair and eye color and your proportions, and they are used to generate your six outfit images.

• Your photos are deleted after your analysis is generated. Usually within fifteen minutes, always within 24 hours.
• Your photos are never used to train AI models, ours or anyone else’s.
• Your photos are never sold, shared for advertising, or published anywhere.
• After deletion we cannot recover them, and neither can you. Keep your own copies.

We do not use your photos to recognize you. The engine reads coloring and proportion, not identity. We do not run face recognition, we do not build a face template, and we do not try to match you against any other photo or any other person. That matters legally as well as practically: a photograph becomes biometric data under Article 9 of the GDPR when it is processed in order to identify a specific individual, and that is not what happens here.

For the same reason we do not ask for, infer or record your ethnicity. What the analysis stores about your coloring is undertone, value and chroma, which describe how light behaves on your skin, hair and eyes. They are not a racial or ethnic category and they are not used as one.

4. Your analysis, your page and your key

What you buy is a page. Your finished analysis lives on our systems and your page renders from it, which is why this section exists and why it says something different from section 3.

• We keep your analysis. Your key does not expire, and a key that opens nothing is not a key, so we hold the analysis behind it for as long as you want the page. We delete it when you ask us to. See section 9.
• Your key is the only thing protecting your page. There is no account and no password, by design: it means we never hold a password of yours and you never have to make one. The trade is that anyone holding your key can open your page, the same way anyone holding a door key can open a door. Treat it like a password. If you forward the email, you are forwarding the page.
• Your page is not public and not indexed. It is not listed anywhere, it is not linked from any other page on the site, and we ask search engines not to index it. Nobody finds it by guessing: the key space is large enough that trying keys at random is not a realistic way in, and repeated wrong attempts are rate limited.
• If you think your key got out, email us and we will issue you a new one and retire the old one.
• The one page that is public is the sample analysis, which is a made up analysis of nobody. No real customer’s page is used as an example, ever.

You can download your Markdown profile from your page at any time. It is generated in your browser, so that download does not pass through us, and the copy you save is yours whatever happens to us later. Section 6 of the Terms explains why that is worth doing.

5. Why we are allowed to process this

• To deliver what you bought. Processing your answers, your photos and your email is necessary to perform the contract between us, and so is keeping your analysis for as long as your page is meant to open. That is Article 6(1)(b), and it is the basis for everything in sections 3 and 4.
• To meet legal obligations. Invoices and tax records have to be kept, see section 9.
• Because we have a legitimate interest in knowing whether the analysis was any good. Two days after your analysis is delivered we send you one email that asks a single question: did the result match what you already suspected. That is the only way we find out what to fix, and it is a legitimate interest under Article 6(1)(f). It is one email, it is never repeated, and it contains no offer and nothing to buy. The only links in it are the three answers to that one question, and clicking one records that answer and nothing else: no tracking pixel, no record of whether you opened it. If you write a reply instead, we keep what you wrote for two years, because a note saying the result was wrong is only useful next to the next ten like it. There is no list to leave, but if you would rather we never wrote again, reply and say so, or write to us, see section 12, and we will put your address on a list whose only purpose is to make sure of it.
• With your consent, and only where we say so, for example if you ask us to keep your email for future updates. You can withdraw that consent at any time.

6. How the verdict is reached

Your season and your body type come out of a scoring engine that follows fixed rules. The same answers and the same photos always produce the same result. AI is used to read the photos and to write the explanations, and it does not decide your type. Where a photo is unclear, your own answers outrank it.

So the result is produced automatically, and we say so plainly. It is styling advice: it does not decide anything about your money, your rights or your access to anything, so it is not the kind of automated decision Article 22 of the GDPR restricts. Either way, if you think your result is wrong, a person here will look at it. Email us and say so. That is section 12, and it is also how we improve the rules.

7. Who else processes your data

We use a small number of providers. Each one only gets what it needs.

We do not use these providers to train their models on your data, and their API terms reflect that.

8. Sending data outside the EU

Some of the providers above are established in the United States. Where that is the case, transfers are covered by the European Commission’s standard contractual clauses or by the EU US Data Privacy Framework, depending on the provider. If you want the specifics for a particular provider, email us and we will send them.

Your finished analysis is stored in the EU. The providers outside the EU are involved while it is being produced, not in holding it afterwards.

9. How long we keep things

The row that surprises people is the third one, so it is worth saying in a sentence: your photos go, your analysis stays. The photos are what we needed to work it out. The analysis is what you bought, and deleting it would delete your page.

10. Analytics and cookies

We use Google Analytics to see how many people visit which pages. It sets cookies, so it only runs if you accept them in the banner shown on your first visit. Decline and no analytics identifiers are set at all, nothing is requested from Google, and the site behaves exactly the same.

You can change your mind at any time through the Cookie settings link in the footer, which brings the banner back.

Google Analytics never sees your photos, your answers or your analysis. Those never leave the systems listed in section 7. There is no analytics on your own page at all.

Separately from that, we measure how the questionnaire itself is used, on our own servers and without any cookies: which question was on screen, how long it took, whether an upload failed, and which of the offered options was selected. It carries no name, no photo, no measurement and nothing you typed in your own words, and no IP address is stored. It is attached to the random session number the questionnaire already needs, and it is deleted on the schedule in section 9. We do this because a question that quietly loses half the people who reach it is something we can only fix if we can see it, which is a legitimate interest under Article 6(1)(f).

One thing in that record is not a statistic: your email address. From the moment you type it into the questionnaire we store it there, whether or not you go on to buy, so that an analysis you started but did not finish is not simply lost and we can reach you about it. It is the same address you would give us at the end anyway. It is deleted on the schedule in section 9, you can ask us to delete it sooner at any time under section 12, and it is never sold or passed to anyone outside the providers listed in section 7.

If your browser sends a Global Privacy Control or Do Not Track signal, we record nothing at all, your address included.

11. Keeping it safe

Everything travels over an encrypted connection and is stored encrypted at rest by the providers in section 7. Access to the systems that hold your data is limited to the people who run the service, which today is a very short list. Photos sit in a private bucket that is not reachable without a signed link, and they are deleted on the schedule in section 3.

If a breach ever puts your rights at risk, we will tell the Czech data protection authority within 72 hours and we will tell you, directly, without waiting to be asked.

12. Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to someone else. You can object to processing based on legitimate interests, and you can withdraw consent where you gave it.

Deleting your analysis deletes your page. That is the one right with a consequence worth spelling out: ask us to erase your analysis and your key stops opening anything, for good, and we cannot bring it back. Download your Markdown profile first if you want to keep the result. We will say this to you once before we do it, and then we will do it.

Email info@wearlylabs.com and we will answer within 30 days. In practice, much faster.

If you think we handled your data badly, you can complain to the Czech data protection authority, Úřad pro ochranu osobních údajů, at uoou.gov.cz, or to the authority in the country where you live.

13. If you are not in the EU

We run one process for everybody, and it is the European one. We do not keep a weaker version of this policy for countries with weaker rules, so the rights in section 12 are offered to you wherever you live, whether or not your own law requires them.

• United Kingdom and Switzerland. The UK GDPR and the Swiss FADP give you the same rights described in section 12. Use the same address. You can also complain to the ICO or to the FDPIC.
• California. We do not sell your personal information and we do not share it for cross context behavioral advertising, under any definition, including the CCPA as amended by the CPRA. We do not offer financial incentives for data. You can ask us what we hold, ask for it to be deleted, and ask us to correct it, and we will not treat you differently for asking. The Global Privacy Control signal is honored automatically, see section 10.
• Everywhere else. Write to us. The answer will be the one in section 12.

14. Age

Wearly Labs is for adults. You must be 18 or older to buy an analysis and to upload photos. We do not knowingly analyze photos of children. If we find out that an analysis was ordered for or by a minor, we delete the data and refund the payment.

15. Changes

If we change this policy, we update the date at the top and, for anything material, we say so on the site. We do not change it quietly.

16. Contact

info@wearlylabs.com
Bohuslav Poláček, Dobré 13, 517 93 Dobré, Czech Republic

See also our Terms & Conditions.