Privacy Policy

1. Who We Are

WEARON STUDIO TEKNOLOJİ ANONİM ŞİRKETİ ("Wearon", "we"), MERSİS no. 0800129634800001, SANAYİ MAH. TEKNOPARK BLV. NO: 1/4C İÇ KAPI NO: Z08 PENDİK/İSTANBUL, Türkiye, is the data controller for the processing described in this Policy. Contact: kvkk@wearon.ai. This Policy covers visitors to wearon.ai and account holders on app.wearon.ai (the "Platform").

2. Data We Collect

Identity and contact: name, e-mail address, phone number (optional, with verification status). Account and transaction data: credit balance and movements, generation history and preferences, texts you enter, notifications, support requests. Visual content: garment/product photos and reference images you upload, generated images, your profile photo. Billing data: payment and invoice details, receipts. Card details are not stored by Wearon; they are processed by the payment institution. Security and usage data: session and system logs, device type, session identifier, error records, in-Platform usage events, signup attribution. Website forms: name, e-mail and message if you use the contact/waitlist form. Cookie details are described in our Cookie Policy.

3. Purposes and Legal Bases

Creating your membership; providing generation, gallery, credit and other Platform services → performance of a contract. Processing uploaded images with AI models to generate images → performance of a contract. Invoicing, accounting and statutory record-keeping → legal obligation. Account and system security, abuse prevention, error diagnosis → legitimate interests. Measuring service quality and improving the Platform (usage statistics) → legitimate interests. Responding to support requests; mandatory service notices → performance of a contract. Optional phone verification → performance of a contract / legitimate interests. Commercial electronic messages (campaigns, promotions) → consent (separate opt-in; withdrawable at any time). Non-essential cookies and analytics → consent (cookie banner). Handling legal claims and defence → legal obligation / establishment of legal claims.

AI and model training: Content that contains no personal data (product/garment images and generated images) may be used to improve the Service and its AI capabilities. Content containing the image of a real person is never used for model training. Uploaded images are not used for identification, authentication or biometric matching, and no biometric templates are created. We do not make fully automated decisions producing legal or similarly significant effects about you.

4. Sharing and International Transfers

Personal data may be transferred, in compliance with Article 9 of the Turkish Data Protection Law (KVKK) and, where applicable, Chapter V of the GDPR (appropriate safeguards), to the following categories of recipients: — Cloud database, authentication and file storage provider (primary hosting — your account and content data) · EU (Germany) — AI image generation and editing model providers (uploaded images and generation instructions are transmitted solely to perform the requested generation; transferred files are retained by providers for a limited time) · USA — E-mail delivery provider (sending service e-mails) · USA — Application hosting and content delivery provider · USA/Global — SMS provider (phone verification, domestic) · Türkiye — Competent authorities, where legally required · Türkiye

Our agreements with AI model providers are based on the principle that transmitted data is not used to train the providers' own models. Transfers are limited to the data necessary for the relevant service. You may request detailed information about the recipients of your data at any time (Section 8).

Third parties in your uploads: For personal data of third parties (e.g. models) appearing in images you upload, you are the data controller and Wearon acts as your processor. Informing those persons and obtaining their consent where required is your responsibility.

5. Retention

Account and content data are retained for as long as your account is active; you may delete any content at any time. If you delete your account, your personal data and content are permanently deleted, except for records we must retain by law for their statutory periods and aggregate statistics retained in anonymous form. Wearon reserves the right to delete old content subject to reasonable prior notice by e-mail. Deleted data may remain in encrypted backups until the ordinary backup cycle completes. System and security logs are kept for the reasonable period necessary for security and legal defence.

6. Your Rights

Under KVKK Article 11 and, where applicable, the GDPR, you have the right to: learn whether your data is processed; request information; learn the purpose of processing; know the third parties to whom data is transferred in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction; request notification of these actions to recipients; object to results produced exclusively by automated analysis; and claim compensation for damage caused by unlawful processing. Where processing is based on consent, you may withdraw it at any time. You may also lodge a complaint with the Turkish Personal Data Protection Authority or, where the GDPR applies, your local supervisory authority.

7. Cookies

See the Cookie Policy. Non-essential cookies run only with your consent, and your choice can be changed at any time via "Cookie Preferences".

8. Contact and Requests

Send requests to kvkk@wearon.ai from your registered e-mail address, or in writing to our postal address above. Requests are answered free of charge within 30 days at the latest.

9. Changes

Updates to this Policy are published on this page with a new version and effective date; material changes are additionally announced by e-mail or in-Platform notice.