Subprocessors
Last updated: 2026-05-23. We notify users at least 30 days before adding new subprocessors via an in‑app banner.
The following third parties process personal data on behalf of Stailist to deliver the Service. Each subprocessor is bound by a Data Processing Agreement (DPA) or equivalent contractual safeguards, and — for transfers outside the EEA/UK — by the European Commission's Standard Contractual Clauses.
| Vendor | Purpose | Data categories | Region | DPA available | Web |
|---|---|---|---|---|---|
| OpenAI | Text + vision AI for item analysis, outfit generation, and stylist conversations (gpt-4o-mini and related models) | Photos (transient, not stored), text prompts | United States | Yes — openai.com/policies/data-processing-addendum | openai.com |
| fal.ai | Image generation for virtual try‑on and mannequin rendering (flux-2-pro/edit, flux-2/flash) | Photos (transient, not stored), text prompts | United States | Yes — fal.ai/dpa | fal.ai |
| RevenueCat | Subscription state, entitlements, receipts | RevenueCat customer ID, plan tier, store receipts | United States | Yes — revenuecat.com/dpa | revenuecat.com |
| Google AdMob | Advertising on free tier | Advertising identifier (after ATT / UMP consent), interaction events | United States / European Union | Standard Google DPA — admob.google.com | admob.google.com |
| Google Sign‑In | Authentication | Google account email, sub claim | United States / European Union | Google DPA — developers.google.com/identity | developers.google.com/identity |
| Google Play Billing | Android in‑app purchases | Purchase receipts, Play account identifier | United States / European Union | Play Developer Distribution Agreement — play.google.com/console | play.google.com |
| Apple — Sign in with Apple | Authentication | Apple identity token, sub claim | United States / European Union | Apple Developer Program License Agreement — developer.apple.com | developer.apple.com |
| Apple — StoreKit | iOS in‑app purchases | Purchase receipts | United States / European Union | Apple Developer Program License Agreement — developer.apple.com | developer.apple.com |
| Hetzner Online GmbH | Hosting (Postgres + Node app) | Backend operational data | Germany (Falkenstein / Nuremberg) | Yes — hetzner.com/legal/order-processing | hetzner.com |
| Sentry | Crash and error reporting (gated on consent) | Stack traces, user identifier, error context | United States (EU host available) | Yes — sentry.io/legal/dpa | sentry.io |
| PostHog | Product analytics (gated on consent) | Anonymous funnel events, user identifier (if consented) | EU host preferred (eu.i.posthog.com) | Yes — posthog.com/dpa | posthog.com |
Notes
- Photos are not persisted on our backend. They pass through in memory during AI inference and are discarded after the response is returned to your device. The wardrobe (the list of items, with metadata and image references) lives in a local SQLite database on your device only.
- AI training opt‑out. As of the date above, OpenAI does not train its models on API content by default (effective since 2023‑03‑01), and fal.ai operates under similar API terms. We do not opt in.
- Consent gating. Sentry and PostHog are initialized only after the user resolves the Google UMP consent form (on Android in the EU/EEA/UK) and, on iOS, only after the App Tracking Transparency prompt has been answered. If consent is declined, no diagnostic or analytics data is sent.
- Standard Contractual Clauses (SCCs). Where personal data is transferred from the EU/EEA/UK to the United States or other jurisdictions without an EU adequacy decision, we rely on the European Commission's SCCs in their most recent form, together with the supplementary measures recommended by the European Data Protection Board.
Adding a new subprocessor
We notify users via an in‑app banner at least 30 days before a new subprocessor begins processing personal data. The notification names the vendor, the purpose, and the data categories. Continued use of the Service after the notice period constitutes acceptance.
If you disagree with a planned change, you may delete your account in Settings → Account → Delete Account at any time.
Removing a subprocessor
We update this page promptly when a subprocessor is removed from our processing chain. We retain historical versions of this page on request.
Questions: privacy@stailist.io
← Back to home