Komod Privacy Policy

This Privacy Policy explains how Komod (“Komod”, “we”, “us”, or “our”) collects, uses, stores, and otherwise processes personal data when you use the Komod mobile application, website, and related services (the “Service”).

We are committed to protecting your privacy and processing personal data in accordance with applicable data-protection laws, including the EU General Data Protection Regulation (GDPR) and applicable Dutch law.

1. Who We Are

For the purposes of applicable data-protection law, the controller of your personal data is:

Komod
Legal name: Davood Hanifi
Address: Available on request
Country: The Netherlands
Email: [email protected]

2. Personal Data We Collect

The personal data we process depends on how you use Komod.

2.1 Account Information

When you create or use a Komod account, we may process:

• your name;
• email address;
• Komod user or account ID;
• authentication information; and
• information provided through Apple Sign In or Google Sign-In.

We use this information to create and maintain your account and provide the Service.

2.2 Wardrobe Information and Photos

When you use Komod's wardrobe features, we may process:

• photographs of your clothing;
• wardrobe item information;
• clothing categories;
• clothing attributes;
• selected wardrobe items; and
• information relating to outfits you create or request.

Wardrobe photographs may constitute personal data when they are associated with your account.

You should avoid uploading photographs containing other people unless you have the necessary permission or another lawful basis.

2.3 Location Information

With your permission, Komod may access your device's location to provide location-based functionality, including weather information used for outfit recommendations.

Depending on your device permissions and settings, this may include precise location information, such as geographic coordinates.

We use location information to support requested features such as weather-based recommendations.

We do not use your precise location for advertising or cross-app tracking.

You can disable location access through your device settings. Some weather-related functionality may then be unavailable or less accurate.

2.4 Subscription Information

If you purchase a Komod subscription, we may process information necessary to determine:

• your subscription plan;
• subscription status;
• entitlement status;
• purchase or subscription history;
• renewal status; and
• expiration status.

Payments made through Apple's App Store are processed by Apple.

We do not receive or store your full payment-card number through Apple's App Store payment system.

2.5 Technical and Diagnostic Information

Depending on the technical services used by Komod, we may process information such as:

• IP address;
• device type;
• operating system;
• application version;
• session or authentication information;
• security information;
• technical logs; and
• crash or diagnostic information.

We use this information where necessary to operate, secure, maintain, and troubleshoot Komod.

2.6 Communications

If you contact us, we may process:

• your name;
• email address;
• the content of your communication; and
• information needed to respond to your request.

3. How We Use Personal Data

We process personal data for the following purposes.

Providing the Service

We use personal data to:

• create and manage your account;
• authenticate you;
• store your wardrobe;
• process wardrobe photographs;
• generate outfit recommendations;
• provide personalization;
• provide weather-related functionality;
• provide subscription functionality; and
• maintain the Service.

Personalization

We may process wardrobe information, preferences, selected clothing items, occasion, style, and weather information to generate personalized outfit recommendations.

Security

We may process technical and account information to:

• protect accounts;
• detect unauthorized activity;
• prevent abuse and fraud;
• secure our infrastructure; and
• investigate security incidents.

Service Improvement

Where permitted by applicable law, we may use aggregated or appropriately de-identified information to understand usage patterns and improve Komod.

We do not sell your personal data.

Legal Compliance

We may process information when necessary to:

• comply with legal obligations;
• respond to lawful requests;
• establish, exercise, or defend legal claims; and
• maintain required business, financial, or legal records.

4. Legal Bases for Processing

Depending on the activity, we rely on one or more of the following legal bases under the GDPR:

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. AI Processing

Komod uses artificial intelligence to provide outfit recommendations and related functionality.

Depending on the feature you use, information such as:

• wardrobe photographs;
• wardrobe item information;
• selected clothing items;
• style preferences;
• occasion; and
• weather information

may be processed by AI systems used to provide the requested functionality.

AI processing is used to provide fashion recommendations and does not make decisions about your eligibility for employment, credit, insurance, healthcare, housing, or other similarly significant matters.

AI Training

Komod does not intentionally use your personal wardrobe photographs or personal wardrobe information to train Komod's own general-purpose AI models unless this is separately disclosed to you and we have an appropriate legal basis to do so.

Where third-party AI providers are used, their processing of personal data is subject to applicable contractual and data-protection requirements.

6. Third-Party Service Providers

We may use third-party providers to operate Komod.

Depending on the implementation, these may include providers for:

• authentication;
• cloud hosting and infrastructure;
• databases and storage;
• AI processing;
• weather information;
• subscription management;
• security;
• diagnostics; and
• customer support.

Examples may include:

• Apple — authentication and App Store payments or subscriptions where applicable.
• Google — authentication where applicable.
• RevenueCat — subscription and entitlement management.
• OpenAI — AI processing.
• Supabase — storage and infrastructure services.
• Open-Meteo and BigDataCloud — weather and geocoding services.

These providers may process personal data on our behalf.

Where required by applicable law, we enter into appropriate data-processing arrangements with processors and require appropriate confidentiality and security protections.

7. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we use an appropriate legal mechanism under applicable data-protection law.

Depending on the circumstances, this may include:

• an adequacy decision by the European Commission;
• Standard Contractual Clauses; or
• another legally recognized transfer mechanism.

Where required, we also consider appropriate supplementary safeguards.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account data

We generally retain account information while your account remains active.

Wardrobe data and photographs

We retain wardrobe information and photographs for as long as necessary to provide the wardrobe and styling functionality you use.

Subscription information

Subscription and transaction information may be retained for as long as reasonably necessary for subscription management, accounting, legal, tax, audit, and dispute-resolution purposes.

Support communications

Support communications may be retained for as long as reasonably necessary to handle your request and maintain appropriate records.

Backups

Deleted information may remain temporarily in encrypted backups until those backups are overwritten in accordance with our normal backup-retention processes.

When determining retention periods, we consider the nature and amount of personal data, the purpose for which it is processed, legal obligations, security requirements, and the need to establish or defend legal claims.

9. Your GDPR Rights

Depending on your circumstances and applicable law, you may have the right to:

• access your personal data;
• correct inaccurate personal data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• receive certain personal data in a portable format;
• withdraw consent where processing is based on consent;
• object to processing based on legitimate interests; and
• lodge a complaint with a supervisory authority.

These rights are subject to the conditions and exceptions established by applicable law.

10. How to Exercise Your Rights

To exercise your privacy rights, contact [email protected].

Please include enough information for us to understand your request.

We may need to verify your identity before completing certain requests to protect your account and personal data.

We will respond within the timeframe required by applicable law.

11. Account and Data Deletion

You may request deletion of your Komod account and associated personal data.

Where account deletion is available directly within the app, you may use that functionality.

When your account is deleted, we will delete or anonymize personal data that we no longer have a lawful reason to retain.

We may retain certain information where required by law or where reasonably necessary to establish, exercise, or defend legal claims.

Deletion of your Komod account does not necessarily cancel an App Store subscription. You must cancel an Apple subscription separately through your Apple Account subscription settings.

12. Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, disclosure, or unlawful processing.

Depending on the data and circumstances, these measures may include:

• encryption in transit;
• authentication controls;
• access controls;
• least-privilege access;
• secure infrastructure;
• security monitoring;
• logging; and
• software updates.

However, no internet-based service can guarantee absolute security.

13. Tracking and Advertising

Komod does not sell personal data.

Komod does not use personal data for cross-app targeted advertising or cross-service advertising tracking.

We do not intentionally use your:

• wardrobe photographs;
• precise location;
• email address; or
• account identifier

to track you across other companies' apps or websites for advertising purposes.

If our practices change, we will update this Privacy Policy and obtain consent where required.

14. Children

Komod is not directed to children where use of the Service would be unlawful.

We do not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided personal data to us inappropriately, please contact us at [email protected].

15. Third-Party Services and Links

Komod may contain or rely on integrations with third-party services.

Third parties may have their own terms and privacy policies.

Where a third party processes personal data on our behalf, we take appropriate measures required by applicable law.

Where you interact directly with a third-party service, that third party's own privacy terms may also apply.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to Komod;
• new features;
• changes to our data-processing activities;
• changes to service providers; and
• changes in applicable law.

When we make material changes, we will provide appropriate notice where required by law.

The “Last updated” date at the top of this Privacy Policy indicates when it was most recently updated.

17. Complaints

If you have concerns about how we process your personal data, please contact us first at [email protected].

If you are located in the Netherlands, you may also contact the Dutch supervisory authority: Autoriteit Persoonsgegevens.

You may also have the right to complain to the data-protection supervisory authority in the EU or EEA country where you live, work, or where you believe a violation occurred.

18. Contact

For privacy questions, requests, or complaints:

Komod
Data Controller: Davood Hanifi
Privacy Email: [email protected]
Website: komod.app