Skip to main content

Privacy Policy

Effective date: April 18, 2026

1. Data Controller

The data controller is TryNova (“TryNova”, “we”). This Privacy Policy explains what data we collect, how we use, store, and protect it when you use the TryNova app and website try-nova.shop.

2. Data We Collect

2.1 Account data

  • Username, email address;
  • Password hash (we never store your raw password);
  • Social auth identifiers (Google ID, Apple ID, phone number via Firebase).

2.2 Profile data

  • Gender, height, body measurements (voluntary); style preferences; profile photo.

2.3 Photos

  • Twin reference photos — up to 5 full-body photos. Retained for reuse.
  • Try-on body photos — automatically deleted immediately after processing.
  • Clothing photos — retained until you delete them or close your account.

2.4 Usage data

  • Product analytics (PostHog) — only with your explicit consent. We send an account identifier plus safe product events (which action, on which surface, how long it took, whether it succeeded) and subscription outcome metadata. Never photos, body measurements, message text, email, phone number or Telegram id.
  • Stored in PostHog Cloud (US region) for 12 months. IP addresses are discarded.
  • Declining or withdrawing consent never limits access, and analytics data is included in data-access and deletion requests.
  • Device info; crash logs (Firebase Crashlytics on mobile, Sentry on web).

2.5 Payment data

Card data is processed directly by YooKassa. TryNova stores only the subscription identifier and payment status.

3. Purposes of Processing

  • Delivering virtual try-on and digital wardrobe services;
  • Creating and storing your digital twin;
  • Processing payments and managing subscriptions;
  • Account security and fraud prevention.

4. Third-Party Sub-Processors

ServicePurposeCountry
Google Cloud / Vertex AIVirtual try-on (VTO), Firebase AuthUS / EU
fal.aiDigital twin generation (FLUX)US
OpenAI / AnthropicClothing recognition, descriptions, AI stylistUS
YooKassaPayment processingRussia
Amazon S3Media file storageEU
PostHogProduct analytics (consent-gated)US

5. Retention Periods

  • Try-on body photos — deleted automatically within 24 hours;
  • Account data — retained until account deletion, then permanently erased within 30 days;
  • Payment history — retained for 5 years as required by tax regulations.

6. Your Rights

You have the right to access, rectification, erasure, and withdrawal of consent. Contact: privacy@try-nova.shop. We will respond within 30 days.

7. Security

  • All data is transmitted over TLS 1.2+;
  • Media files are stored in encrypted storage (S3 SSE-S3);
  • Passwords are stored as bcrypt/argon2 hashes.

8. Contact