Draft — pending legal review.

Privacy Policy

Last updated: 20 October 2026

In short

• Your measurements, height, weight, body twin, analyses and closet are stored only on your phone. We never send them to our server.
• There is no account or sign-in. We don’t ask for your name, email or phone number.
• We use no ads, no analytics and no tracking tools. We don’t sell your data.
• When you look up a product by link or barcode, we ask our server to recognise it. We don’t store that query. For this, your phone gets a random device ID.
• Only if you allow it, we share details of products you confirm and how the size you bought fitted, without any measurements.
• You can export or delete your data in Profile → Privacy and data.

Data controller

The data controller for the Sizemira app is [DATA CONTROLLER NAME], [ADDRESS]. Contact: destek@sizemira.com. Details under the Turkish Personal Data Protection Law No. 6698 (KVKK) are in the KVKK Privacy Notice.

Data that stays on your phone

The following is kept in the app’s storage on your phone. Size recommendations are calculated on your phone. None of this is sent to us and we cannot access it.

• Body twin: department (women/men), height, optional weight, the measurements you enter (such as chest, waist, hip, neck, shoulder, inseam), a size you know (brand, category, size), your fit preferences and zone preferences.
• Analyses: the products you analysed (brand, category, cut, fabric, product name, link, photo address, price, barcodes) and their results. The newest 50 analyses are kept.
• Closet: the items you added, their status (bought, wishlist, returned), the size you bought, your notes and your “How did it fit?” answers.
• Settings and state: language, theme, notification preference, your sharing consent and when you gave it, the dates of new analyses on the free plan, the Plus status the store last reported (plan and end date), items waiting to be shared, and your device ID.

Your phone’s own backups: if iCloud, iTunes/Finder or Google backup is on, your phone may include this data in its own backup. Those backups live in your Apple or Google account and never reach our systems. You can turn them off in your phone’s backup settings.

Data sent to our server

Anonymous device record

The first time the app makes an authenticated request to our server (your first link or barcode lookup, or your first share if you allowed sharing), your phone gets a random device ID and an access token. The server keeps:

• the random device ID,
• only a hash of the access token. The token itself is not stored on the server,
• when the record was created and the last day the device was active,
• if access was stopped because of abuse, when that happened.

This record contains no name, phone model or advertising ID. It is created for link and barcode lookups even if sharing is off.

Link and barcode lookups

When you paste a link or scan a barcode, the app asks our server whether other users have already identified the product. What goes to the server is a simplified form of the link (for example the product address without the language part and “www”) or the barcode number, together with your device token. The server answers and does not store the query. The server’s log lines contain only the request type, the path (e.g. /v1/catalog/lookup), the status code and the duration. Links, barcodes, IP addresses and tokens are not written to them.

Size chart updates

When the app starts or comes back to the foreground, at most once an hour, it downloads the latest size charts from our server. This request carries no device ID.

Only if you allow it: product contributions

If you turned on “Share anonymous product info and fit feedback”, the following is sent for a product you confirm in “Check the product” or link to a barcode:

• the product’s simplified link and/or its barcodes,
• brand (or the brand name as the shop writes it, if our dataset doesn’t know it), category, the product’s department (women/men/unisex), cut,
• if read from the page: fabric composition, product name, the address of the shop’s product photo, price and currency.

The server stores this with your device ID and the time it was sent. For each field, the catalogue shows the value most devices gave. Each device counts once. When other users look up the same link or barcode, they see the product details (not your device ID).

Only if you allow it: fit feedback

When you answer “How did it fit?”, and the brand is in our dataset and the app had recommended a size, the following is sent:

• a random answer ID (so the same answer is never counted twice),
• brand, category, department (women/men), cut,
• the recommended size, the size you bought and the difference between them,
• the outcome (kept, returned, didn’t buy), the fit (much too tight … much too loose), the reasons you picked (size, cut, fabric, length, colour, quality, changed my mind),
• the zones that felt tight or loose (shoulder, chest, waist, hip, thigh),
• the version of the recommendation engine.

Your measurements, height, weight or anything else about your body are never sent. The server stores these answers with your device ID and the time received. Every night, for each brand, category and department group that at least 8 different devices answered, it works out whether that brand’s sizes tend to run small or large. Each device counts once per group. This aggregate result is shipped to all users with the size charts and cannot be linked to anyone.

Without a connection, shares wait in a queue on your phone and are sent once you are online. If you turn sharing off, the queued items are deleted too.

IP address and technical logs

As with any internet request, our server sees your IP address. To limit excessive requests, the server uses the IP address (for IPv6, its first 64 bits) only as a counter in working memory. It does not write it to disk or to logs. It is gone when the server restarts. The web server in front of it (nginx) is configured not to keep access logs for API requests. [VERIFY AT DEPLOY: access_log off in the api block]

The sizemira.com website uses no cookies, no JavaScript and no analytics. The website’s web server may keep technical access logs: [SITE ACCESS LOG: fields kept and retention period]

Shops, Apple, Google and other parties

• Product pages open on your phone. When you paste a link, the product page is fetched directly from the shop’s website by your phone. Some shops (for example Zara, Bershka, Pull&Bear, Stradivarius, Massimo Dutti, Mango, H&M) only show their pages to browsers, so the page is opened in an invisible browser engine on your phone. The shop sees the request and your IP address as if you had visited the page in a browser. The page’s own code (including any measurement tools the shop uses) may run in this engine and set cookies. Images not needed to read the product are not loaded in this engine. Sizemira’s server never fetches shop pages and does not share your link with the shop. This engine’s cookies and site data are kept only while the app is running: they are deleted each time the app starts and by “Delete my data”.
• Product photos load on your phone from the shop’s own servers.
• “Open in store” and the legal pages open in an in-app browser (a Safari view on iOS, a Chrome custom tab on Android). The shop’s own privacy policy applies there.
• Purchases are made through the Apple App Store or Google Play. We never see your payment details. The app only learns from the store whether your subscription is active, which plan it is and when it ends, and keeps that on your phone. This is not sent to our server. Apple and Google handle these transactions independently under their own privacy policies.
• Barcode scanner: on iOS the camera image is processed on your phone. On Android, scanning is done by the Google Play services code scanner on your phone. In both cases the app only receives the barcode number. No image is stored or sent to us. On Android, Google Play services may send Google diagnostic and usage information about the scanner (such as device and app details) under Google’s own privacy policy.
• Hosting: our server runs on Contabo GmbH infrastructure in Germany (see Where the server is).

Camera, notifications and clipboard

• Camera: used only when you choose to scan a barcode, and only to read the barcode. No photos are taken or stored. If you don’t want to use the camera, you can type the barcode number.
• Notifications: when you tap “I bought this size” for an item, one local notification asking “How did it fit?” is scheduled for 14 days later. It is scheduled on your phone. Our server sends no notifications and collects no notification token. Permission is asked for the first time at that moment. You can turn it off in Profile.
• Clipboard: read only when you tap “Paste”.
• Language: your phone’s language setting is read to pick the app language.

Sharing consent and withdrawing it

Sharing is off by default. You can turn it on or off during onboarding or in Profile → Privacy and data. When you turn it off, nothing new is sent and queued items are deleted. What was sent before stays on the server. To delete it, use “Delete my data” (see Deletion). If the consent text changes, your earlier consent no longer counts. Nothing is shared until you turn it on again.

Exporting your data

Profile → “Export my data” creates a JSON file with all your Sizemira data on the phone and the device ID the server knows you by, and opens the share sheet. You choose where to save it or whom to send it to. The file is then subject to the rules of wherever you send it.

Deleting your data

Profile → “Delete my data” does the following:

1. First, sharing is turned off and queued shares are deleted.
2. Your device record, all your product contributions and all your feedback are deleted from the server. Products that only you described are removed from the catalogue together with their links and barcodes. A product other users also confirmed is recalculated without your contribution. A link or barcode you added to such a product may stay in the catalogue, no longer linked to you. Product records hidden by an administrator stay, so the same abuse cannot simply be repeated.
3. On your phone, your body twin, analyses, closet, settings, export files, pending and delivered notifications, and the invisible browser engine’s cookies and site data are deleted.

Two things stay on your phone: the Plus status reported by the store (the subscription belongs to your store account) and the dates of your new analyses in the last 30 days on the free plan (so deleting does not reset the counter). Deleting does not cancel your subscription.

Without a connection, the data on your phone is deleted at once. The server deletion waits, and the app sends it the next time it starts or comes to the foreground. The app tells you when this happens.

The nightly brand calculation is redone without your deleted feedback the next night. Deleted data may remain in backups until their retention period ends (see Retention).

If you uninstall the app without using “Delete my data”, the data on your phone is gone, but your device record and shares stay on the server. Since we don’t know who you are, we can’t find them. If you want them deleted, send the device ID from a file you exported earlier to destek@sizemira.com.

Retention

Where the server is and transfers abroad

Our server runs on the infrastructure of our hosting provider, Contabo GmbH, in Germany [DATA CENTRE LOCATION — confirm in the Contabo panel]. Data sent to our server (the device record, lookups and, if you allowed it, contributions and feedback) is therefore processed outside Türkiye. The legal basis for this transfer under KVKK Article 9 is explained in the KVKK Privacy Notice.

Security

• All traffic between the app and the server is encrypted with HTTPS.
• The device access token is stored on the server only as a hash.
• The server accepts only defined fields. Requests with unknown fields are refused.
• Deleted records are overwritten in the database file.

The data on your phone is protected by your phone’s own security (screen lock, device encryption).

What we don’t do

• We show no ads. We use no advertising or tracking SDKs.
• The app has no analytics or crash reporting service.
• We don’t track you across apps or websites. We don’t read your advertising ID.
• We don’t sell or rent data.
• We never ask for body photos.

Children

Sizemira is not directed at children. If you are under [AGE LIMIT — e.g. 13 or 18; consistent with the store age rating], use the app together with a parent.

Your rights

Your rights under KVKK Article 11 and how to apply are described in the KVKK Privacy Notice. You can use your rights of access and deletion right away with “Export my data” and “Delete my data” in the app.

Changes

We update this policy when our data flows change. The date is shown at the top. If the scope of sharing consent changes, your earlier consent no longer counts and sharing stops until you turn it on again.

Contact

Questions and requests: destek@sizemira.com