Effective Date: April 17, 2026
Welcome to Aesty.ai. This Privacy Policy explains how Aesty Labs Pte. Ltd. (UEN 202526091G), a private limited company incorporated in Singapore (“Aesty,” “we,” “us,” or “our”), collects, uses, shares, and protects your personal information when you visit our website at aesty.ai (including the style quiz at aesty.ai/quiz), use our mobile app, or otherwise interact with our services (collectively, the “Services”). Aesty Labs Pte. Ltd. is the controller of personal data processed in connection with the Services.
In plain English. When you take our style quiz or use the Aesty mobile app, we ask for your email address and the answers to onboarding questions such as your style preferences, occasions you dress for, sizes, and physical characteristics like body shape and skin tone. We use this information to generate your personalized style profile and outfit recommendations.
We also automatically collect technical information about your visit, such as your IP address, browser type, and how you interact with the quiz. We use this to operate the Services, measure performance, and measure the effectiveness of our advertising on Meta (Facebook and Instagram), Pinterest, and other platforms. You can read about your privacy rights and how to exercise them in Sections 9–11.
We collect information in the following categories.
a. Information you provide directly
b. Information collected automatically
_fbp cookie, the Facebook click identifier _fbc, and the Pinterest Tag _epik cookie). See Section 6 for details.We share personal information with the following categories of recipients:
Although we do not sell your personal information in exchange for money, our use of the advertising tools described in Section 5 may qualify as a “sale” or “sharing” of personal information under the California Consumer Privacy Act and similar US state privacy laws. The categories of third parties to whom personal information has been disclosed that may be considered a “sale” or “sharing” under California law are: advertising partners (Meta, Pinterest) and product analytics providers (Amplitude, Vercel Analytics). You have the right to opt out — see Section 9.
The style quiz collects information that may be considered sensitive in some jurisdictions, including measurements of your body (height, weight, body shape, clothing and bra size) and physical characteristics (skin tone, eye color, hair color). We collect this information solely to generate your personalized style profile and recommendations. We do not use it to make decisions about employment, insurance, credit, housing, or healthcare. We do not perform facial recognition and we do not create or store biometric identifiers.
The mobile app's virtual try-on feature processes the full-body photos you upload through third-party AI providers (OpenAI, Google Gemini) to generate styled images. These photos are used only to generate try-on results and are not used for facial recognition or identity matching. You may delete your avatar photos at any time within the app.
We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. The personalized style profile generated from your quiz answers is intended for informational and styling purposes only.
We use the Meta Pixel and the Meta Conversions API on our website to measure the effectiveness of our advertising on Facebook and Instagram, to attribute conversions, and to build audiences for future ads. When you interact with our website, we may share the following with Meta:
_fbp and _fbc (the Facebook click identifier).We hash personal identifiers before sending them to Meta. Hashing is a one-way transformation Meta uses to match users to its own records. It is not the same as anonymization, and Meta processes the resulting data as a joint controller for advertising purposes under its own terms.
For users we detect as residents of California, we send Meta a Limited Data Use signal that instructs Meta to apply restricted processing in line with the California Consumer Privacy Act.
We use the Pinterest Tag and the Pinterest Conversions API in the same way to measure the effectiveness of our advertising on Pinterest. When you interact with our website, we may share the following with Pinterest, Inc.:
_epik cookie and the Pinterest click identifier (epik URL parameter), where present.For users we detect as residents of California, we also send Pinterest a Limited Data Processing signal that instructs Pinterest to apply restricted processing in line with the California Consumer Privacy Act.
We also use Amplitude and Vercel Analytics for product analytics. These tools collect usage events, device information, and identifiers we generate.
We and our partners use cookies, browser local storage, and similar technologies on our website. We group them into the following categories:
Strictly necessary
These technologies are required for the Services to function. They enable core features such as remembering your preferences as you navigate the quiz, ensuring quick page loads, and supporting basic security. Without them, parts of the Services will not work.
Functional
These technologies remember your choices and personalize your experience — for example, storing your quiz progress so you can return where you left off, or remembering an anonymous customer identifier across visits. If disabled, some features such as resuming the quiz on reload may not work.
Performance
These technologies help us understand how visitors use the Services so we can measure traffic, identify popular features, and improve the product. Examples include counting unique visits, identifying referral sources, and measuring time spent on each step. We use Amplitude and Vercel Analytics for this purpose.
Targeting
These technologies, including the Meta Pixel and Conversions API and the Pinterest Tag and Conversions API, allow us and our advertising partners to measure ad performance, attribute conversions, and show you relevant ads on Facebook, Instagram, Pinterest, and other platforms. If disabled, you may see less relevant ads and we will be less able to measure the effectiveness of our advertising. See Section 5 for details on what is shared with Meta and Pinterest.
Most browsers let you block or delete cookies through browser settings, though some parts of the Services may not work correctly without them.
We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Quiz responses submitted from the website are retained so we can deliver your personalized plan and process refund eligibility. You may request deletion of your data at any time by emailing support@aesty.ai.
We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), gives you the following rights:
Categories of personal information collected and shared in the past 12 months: identifiers (email, name, IP address, online identifiers); commercial information (purchase history); internet or other electronic network activity (interactions with our Services); inferences (style profile); and the sensitive categories described in Section 4 (physical characteristics). We have shared identifiers and internet activity information with the advertising and analytics partners listed in Sections 3 and 5.
Exercising your rights. To exercise the right to opt out of sale or sharing on this device, visit Your Privacy Choices. We also automatically honor the Global Privacy Control browser signal as a universal opt-out request — if your browser sends it (Brave, Firefox with the privacy setting enabled, DuckDuckGo browser, and others), we will not load the Facebook Pixel or the Pinterest Tag, and we will not send events to Meta or Pinterest for your visit. To exercise any of the other rights listed above, email us at support@aesty.ai with the subject line “Privacy Request” and tell us which right you want to exercise. We will respond within 45 days, with one possible 45-day extension if reasonably necessary and we notify you.
Verification. To process your request, we are required to verify that you are the person whose data is being requested. Depending on the type of request, we may ask you to confirm the email address associated with your account, the approximate date you signed up, the date of any subscription purchase, or other information that reasonably identifies you as the account holder. For more sensitive requests, we may send a confirmation link or code to your email.
Authorized agent. You may designate an authorized agent to submit a request on your behalf. We will require written proof of the agent's authority (such as a signed power of attorney) and we may also contact you directly to confirm the agent's authorization and verify your identity.
California Shine the Light
Under California's “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents may request once per calendar year information about the categories of personal information (if any) that we shared with third parties for those third parties' own direct marketing purposes during the preceding calendar year, and the names and addresses of those third parties. To make a Shine the Light request, email support@aesty.ai with the subject line “Shine the Light Request” and include your full name, email address, and California address.
Industry opt-outs
In addition to the rights above, you can opt out of many forms of interest-based advertising through these industry self-regulatory programs:
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other US states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out of targeted advertising and the sale of personal information. You may exercise these rights by contacting us at support@aesty.ai.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the EU General Data Protection Regulation (“GDPR”), the UK GDPR, and the Swiss Federal Act on Data Protection (FADP) apply to our processing of your personal data. The data controller is Aesty Labs Pte. Ltd., 68 Circular Road, #02-01, Singapore 049422.
Legal bases for processing
We rely on the following legal bases under Article 6 GDPR:
Where we process special category data (such as the body measurements and physical characteristics described in Section 4), we rely on your explicit consent under Article 9(2)(a) GDPR, which you provide by submitting your quiz answers and using the personalization features. You may withdraw this consent at any time by emailing support@aesty.ai or deleting your account.
Your rights
Subject to the conditions and exceptions in the GDPR/UK GDPR, you have the right to:
To exercise any of these rights, email us at support@aesty.ai with the subject line “GDPR Request”. We will respond within one month, with one possible two-month extension if your request is complex.
Right to lodge a complaint. You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU/EEA member state, UK, or Swiss canton where you reside, work, or where the alleged infringement took place. A list of EU supervisory authorities is available at edpb.europa.eu/about-edpb/about-edpb/members_en. The UK supervisory authority is the Information Commissioner's Office (ico.org.uk). The Swiss authority is the Federal Data Protection and Information Commissioner (edoeb.admin.ch).
Aesty is established in Singapore and uses service providers located in the United States and other countries outside the European Economic Area, the United Kingdom, and Switzerland (including Vercel, Google Cloud / Firebase, OpenAI, RevenueCat, Amplitude, Meta, and Pinterest). When we transfer personal data of EU/EEA, UK, or Swiss data subjects to a country that has not been recognized by the European Commission (or, for UK data, the UK government) as providing an adequate level of protection, we rely on appropriate safeguards under Article 46 GDPR, including:
You may obtain a copy of the safeguards we rely on for a given transfer by emailing support@aesty.ai.
Our Services are intended for adults. You must be at least 18 years old to use the Services. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, please contact support@aesty.ai and we will delete it.
We may update this Privacy Policy from time to time. The “Effective Date” at the top indicates when it was last revised. Material changes will be communicated through the Services or by email.
For any questions or to exercise your privacy rights, contact us at support@aesty.ai.