Privacy Policy

At What2Wear, we are committed to protecting the privacy and security of our users. This privacy policy explains how we collect, use, and share your personal data when you use our mobile app. By using our app, you agree to the collection and use of your personal data as described in this policy.

Data Controller

The data controller for What2Wear is May Seven, which is located at Israel, Tel-Aviv. If you have any questions or concerns about this policy, you can contact us at maysevenlab@gmail.com

2. Personal Data We Collect

We collect the following types of personal data when you use our app:

Full name
Email address
User ID
Profile pictures
Pictures of clothes that users upload to our servers
Information about your device, such as device type, operating system, and device identifiers
Usage data, such as how you use our app, the pages you visit, and the features you use
Your location data if you grant us permission to access it
IP address

We collect this data through the following services:

Firebase Authentication: We collect your full name, email address, and user ID when you create an account using Firebase Authentication.
Firebase Cloud Storage: We collect profile pictures and other users' pictures that you upload to our servers using Firebase Cloud Storage.
Google Analytics: We collect usage data and information about your device using Google Analytics.
Push Notifications: We collect your device's token for push notifications to send you relevant updates.
Firebase Realtime Database: We collect pictures of clothes that users upload to our servers using Firebase Realtime Database.
Users Camera and Photo Gallery: We collect pictures of clothes that users take with their device camera or select from their photo gallery.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To provide you with access to our app and its features.
To maintain and improve our app, including fixing bugs and enhancing features.
To personalize your experience in our app.
To analyze usage of our app and improve our marketing efforts.
To send you push notifications for relevant updates.
To comply with legal obligations and protect our legal rights.

4. Legal Basis for Processing Your Personal Data

We process your personal data based on the following legal bases:

Your consent: We collect and process your personal data with your consent when you use our app.
Legitimate interests: We process your personal data for our legitimate interests in maintaining and improving our app, analyzing usage, and marketing our app.
Legal obligations: We process your personal data to comply with legal obligations, such as responding to legal requests and protecting our legal rights.

5. How We Share Your Personal Data

We do not share your personal data with third parties except as follows:

With our service providers who process your personal data on our behalf, such as Firebase and Google Analytics. We ensure that these service providers are GDPR-compliant and have appropriate security measures in place to protect your personal data.
If required by law, such as in response to a legal request.
In connection with a merger, acquisition, or sale of all or a portion of our assets, in which case your personal data may be transferred to the acquiring entity.

6. How We Store Your Personal Data

We store your personal data on secure servers located in the United States and other countries. We take appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction.

7. Your Data Protection Rights

You have the

following data protection rights:

Right to access: You have the right to request access to the personal data we hold about you and receive a copy of it.
Right to rectification: You have the right to request that we correct or update any inaccurate or incomplete personal data we hold about you.
Right to erasure: You have the right to request that we delete your personal data in certain circumstances, such as if it is no longer necessary for the purposes for which we collected it or if you withdraw your consent.
Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as if you contest the accuracy of the data or if you object to our processing of the data.
Right to data portability: You have the right to request that we provide you with a copy of your personal data in a structured, commonly used, and machine-readable format and transfer that data to another data controller.
Right to object: You have the right to object to our processing of your personal data in certain circumstances, such as if we are processing your data for direct marketing purposes or if we are relying on our legitimate interests to process your data and you believe your interests override ours.
Right to withdraw consent: If we have collected and processed your personal data with your consent, you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal data conducted on a different legal basis.

If you wish to exercise any of these rights, please contact us at maysevenlab@gmail.com.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which we collected it, unless a longer retention period is required or permitted by law.

9. Changes to this Privacy Policy

We may update this privacy policy from time to time to reflect changes in our data processing practices or legal obligations. If we make any material changes, we will notify you by email or by posting a notice in our app before the changes take effect. We encourage you to periodically review this privacy policy for any updates or changes.

10. Contact Us

If you have any questions or concerns about this privacy policy or our data processing practices, please contact us at maysevenlab@gmail.com.

11. GDPR

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). As a data controller, we are committed to complying with the GDPR and protecting the privacy of our users.

Under the GDPR, we process your personal data only if we have a legal basis to do so. Our legal bases for processing your personal data are:

Your consent: We will process your personal data if you have given us your consent to do so for a specific purpose. You have the right to withdraw your consent at any time.
Performance of a contract: We will process your personal data if it is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract.
Compliance with legal obligations: We will process your personal data if we are required to do so by law.

If we transfer your personal data outside of the EU/EEA, we will ensure that adequate safeguards are in place to protect your privacy rights.

We are committed to fulfilling your data protection rights under the GDPR. If you have any questions or concerns about our data processing practices or your privacy rights, please contact us at maysevenlab@gmail.com.