Privacy Policy

Syft ("Syft," "we," "our," or "us") is a personal color analysis and fashion recommendation platform. We help you discover your color season from a photo and surface clothing and style recommendations matched to your personal palette. Syft is operated by [your legal entity name], located at [your address].

For privacy questions or requests, contact us at: hello@syfted.app

This Privacy Policy explains what information we collect when you use Syft's web application, what we do with it, who we share it with, and what rights you have over it. It applies to all users regardless of location, with additional rights for California and EU/UK residents described in Sections 11 and 12.

Account Information

• Email address and password (hashed) when you create an account
• Profile name if provided

Color Analysis and Style Profile

• Photos you upload for color season analysis (see Section 5 for full details)
• Your color season result (e.g., "Autumn Warm") derived from your photo
• Self-reported attributes: skin undertone, skin depth, gender, style preferences, and clothing categories you shop for

Behavioral Data

• Products you save or click within the Syft feed
• Category filters and preference signals within the app
• Pages visited within syfted.app

Device and Technical Data

• IP address
• Browser type and version
• Device type and operating system
• Session duration and referring URL

Affiliate and Purchase Tracking Data

• Clicks on product links that lead to third-party retailers
• Affiliate tracking cookies set by third-party affiliate networks when you click a product link (see Section 8)

• Color analysis: Your uploaded photo is processed by an AI model to detect color characteristics and assign a color season. This is the core function of the service.
• Personalized recommendations: Your color season, style profile, and behavioral data (saves, clicks) are used by Syft's recommendation algorithm to surface fashion content matched to your palette.
• Profile storage: We store your style profile so it persists across sessions and devices.
• Service improvement: Aggregate, anonymized behavioral data helps us improve recommendation quality.
• Communications: We may email you about important service updates. We will not send marketing emails without your explicit opt-in.
• Affiliate commission tracking: When you click a product link, affiliate networks track that click to attribute any resulting purchase commission. This tracking is performed by the affiliate network, not directly by Syft.

When you upload a photo for color analysis, Syft transmits that image to a third-party AI vision API (Google Cloud Vision API) for processing. The image is used solely to extract color characteristics — it is not used for facial recognition, identity verification, or any purpose other than color season analysis.

If you choose to save your photo as your profile picture, we store it in Supabase Storage (our cloud database provider) linked to your account. You can delete your profile photo at any time from your profile settings.

We do not share your photos with advertisers, brands, or affiliate partners. We do not use your photos to train AI models beyond the analysis session unless you have separately given explicit consent.

Illinois Residents (BIPA)

If you are located in Illinois, Syft's color analysis may process visual characteristics derived from your photo that constitute biometric data under the Illinois Biometric Information Privacy Act (BIPA). By uploading a photo for color analysis, you provide explicit written consent to this processing. Syft retains derived color data (your season result and color characteristics) for as long as your account exists or until you request deletion. We do not sell or profit from biometric data. To request deletion of your biometric data, contact hello@syfted.app.

Syft's product feed is generated by an automated algorithm — not by a human stylist or curator. The algorithm matches items to your color season using image and text embeddings, weighted by your behavioral signals (saves and clicks) and your stated style preferences.

Recommendations are not influenced by which brands or retailers pay Syft higher affiliate commissions. The ranking is based solely on color compatibility and preference matching.

You have the right to opt out of algorithmic profiling. To do so, contact us at hello@syfted.app and we will disable behavioral tracking for your account.

We use the following third-party services to operate Syft:

• Supabase — database, authentication, and file storage. Your profile data and photos are stored on Supabase's servers. Supabase Privacy Policy
• Google Cloud Vision API — image analysis for color season detection.
• OpenRouter / AI model providers — processing style analysis queries.
• Skimlinks — affiliate link conversion and commission tracking. When you click a product link, Skimlinks may set a tracking cookie. Skimlinks Privacy Policy
• Vercel — web hosting and performance infrastructure.

We do not sell your personal information to any third party.

Syft participates in affiliate programs. When you click a product link, affiliate tracking cookies may be placed on your device by the affiliate network (e.g., Skimlinks, Amazon Associates, or individual retailer programs). These cookies allow the network to attribute any resulting purchase to Syft and pay us a commission. The commission is paid by the retailer — you pay nothing extra.

These affiliate tracking cookies are placed by third-party networks, not directly by Syft. Their data practices are governed by their own privacy policies, linked in Section 7. You can disable these cookies by declining non-essential cookies in your browser settings, but doing so will not affect your ability to use Syft's core features.

• Account data: Retained until you delete your account or request deletion.
• Profile photos: Retained until you remove them or delete your account.
• Color season and style profile: Retained until you delete your account.
• Behavioral signals (saves, clicks): Retained for up to 2 years for recommendation improvement, then aggregated anonymously.
• Technical/device data: Retained for up to 90 days for security and debugging purposes.

Regardless of your location, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data in your profile
• Delete your account and associated data
• Port your data in a machine-readable format
• Object to algorithmic profiling used for recommendations

To exercise any of these rights, email hello@syfted.app with "Privacy Request" in the subject line. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• The right to know what categories of personal information we collect and why
• The right to delete your personal information
• The right to correct inaccurate personal information
• The right to opt out of the "sale" or "sharing" of your personal information
• The right to limit use of sensitive personal information (including visual data used for color analysis)
• The right to non-discrimination for exercising your privacy rights

Syft does not sell your personal information. We do share behavioral and preference data with Skimlinks (our affiliate network) for commission attribution, which may constitute "sharing" under CPRA. You may opt out by emailing hello@syfted.app.

Categories of personal information collected in the last 12 months: identifiers, visual/biometric characteristics (derived), internet activity, commercial information (purchase signals), and inferences drawn from the above.

If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to your data. Our legal bases for processing are:

• Consent: For photo upload and analysis, and for any marketing communications
• Contract performance: For account creation and service delivery
• Legitimate interests: For fraud prevention, service improvement, and aggregate analytics

You have the right to lodge a complaint with your local data protection authority. Data controller: [your legal entity name], [your address].

Syft is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us at hello@syfted.app and we will delete the account promptly.

We may update this Privacy Policy as the service evolves or as required by law. We will post the updated policy with a revised "last updated" date. For material changes affecting your rights, we will notify you by email if you have an account.

For any privacy questions, requests, or concerns:
Email: hello@syfted.app
Subject line: "Privacy Request"

See also our Affiliate Disclosure and Terms of Service.