Colorella Privacy Policy

Who we are

The controller responsible for your data is:

Dumke Ventures UG (haftungsbeschränkt)
Ebersprung 2
16321 Bernau, Germany
Email: tom@colorella.app

Full company details, including our registry entry, are in the Impressum.

The short version

Your colour measurement runs on your phone. The calibration photos are never uploaded. Three features are different, and we name them: the daily look, the Check second opinion, and the daily line send data to our AI provider to be read. Two of them send a photo. The daily look says so on the screen before the camera opens, and section 2 sets out exactly what Check sends and when. This website sets no cookies and runs no analytics.

1. What Colorella does with the camera

Colorella takes calibration photos of your face to measure your colouring, and reads garment colours through the camera and from photos you choose. The colour measurement itself happens on your device. The extra calibration frames are deleted as soon as your palette is derived. One photo per measured person is kept on your phone, because your season card and the try-on are built on it. It never leaves the device through this path, and you can delete it at any time in Settings → Measurement → Remove my photo.

2. What leaves your phone, and when

Three features send data to our servers (Google Cloud Functions) and on to our AI provider, OpenAI, L.L.C., in the United States:

• Daily look: the photo you take is downscaled and sent so the model can read your outfit. The screen says so before the camera opens.
• Check: up to two photos you choose are downscaled and sent, together with your question.
• Daily line and shopping colour names: no photo. Your season, your undertone and depth words, six of your palette colours, and your answers to the in-app questions are sent, because the model has to know your colours to say anything useful about them.

Each of these also carries your anonymous user ID. We do not store the photos on our servers, and our provider does not use them to train its models under our API agreement. Nothing is sent when you are offline or when the day's limit is spent.

3. What we keep

• Your measurement: a small set of colour coordinates (CIELAB values) for your skin, hair and eyes, the derived axes, and your colour palette. The coordinates themselves are never sent anywhere. What can leave is narrower and named where it happens: the derived summary in section 2, and, if you correct a colour on the confirm screen, the before-and-after value of that correction in section 4.
• Saved scans: the colour read from a garment and its verdict, never a photo of the garment. Stored on your device.
• Your kept photo: the one calibration photo described in section 1, stored on your device only.
• An anonymous account: we create an anonymous sign-in (Firebase Authentication) so your purchases can be restored. It contains no name, email or password unless you later provide one.

If you measure someone else, their photo and their measurement are stored on your phone the same way yours are, under their own profile, and deleting the profile deletes their photo with it. Ask them first, and do not send someone else's photo to the AI features without telling them.

4. Analytics in the app

We collect usage analytics in the app: which screens are used, whether a measurement completed, how features perform. We use Google Analytics for Firebase, Firebase Crashlytics (crash reports) and our own event store (Google Cloud Firestore). Events carry a device ID, our anonymous user ID, and, so we can tell whether the engine is getting people's colours right, your season, the colour values you corrected on the confirm screen, and the answers you gave in the intake questions. They never contain a photograph.

You can turn all of it off in Settings → Your data → Share anonymous usage data, which stops collection at the source.

5. Purchases

Subscriptions and purchases are processed by Apple's App Store or Google Play and managed through RevenueCat, which receives your purchase history and our anonymous user ID, never your measurement. Cancellation happens in your store account, on the same screen as every other subscription you have.

6. Shopping links

The in-app shopping browser opens retailers' own websites. Some links are affiliate links: when you tap a retailer link it passes through Sovrn Commerce's redirect, which sees your IP address, your browser details and the retailer you are going to, and may set its own cookie in the in-app browser. If you buy something, the retailer may pay us a commission. This costs you nothing, is disclosed in the app whenever it applies, and has no influence on any colour verdict. The verdict code cannot see which retailer pays. Retailer websites you browse have their own privacy policies.

7. This website

colorella.app is a static site hosted on Cloudflare Pages (Cloudflare, Inc.). It sets no cookies, runs no analytics and loads nothing from third parties; even the fonts are served from our own domain. When you visit, Cloudflare processes your IP address and standard request data (browser type, requested page, timestamp) as technically necessary to deliver the site and defend it against attacks. This is based on our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). We do not receive or store personal server logs ourselves.

8. What we never do

• We never upload your calibration photos, and we never store the photos the AI features send.
• We never sell your personal data.
• We never use your data to train AI models, and our provider does not train on what we send it under our API agreement.
• We never track you across other companies' apps or websites.

9. Legal bases

Where the GDPR applies: the anonymous account, purchase handling and the AI features you actively use are necessary to perform our contract with you (Art. 6(1)(b)). App analytics and website delivery rest on our legitimate interests in understanding usage and operating securely (Art. 6(1)(f)); for analytics, Firebase stores an app-instance identifier on your device, and you can object at any time with the switch described in section 4, which stops collection at the source.

Colorella measures the colour of your skin, hair and eyes. We use those measurements only to produce your palette and never to identify you or to infer anything about your background.

10. How long we keep things

On your phone: your measurement, your palette, your saved scans, your looks and your kept photo stay until you delete them or delete the app. On our servers: your anonymous account, your event records and your purchase records stay while your account exists and are erased when you delete your account. Photos sent to the AI features are not stored by us at all; our provider may hold a copy briefly for abuse monitoring under its own terms. Crash reports and analytics identifiers are kept for the standard Firebase retention periods (currently 90 days for crash reports and at most 14 months for analytics identifiers).

11. Your rights

In the app, under Settings → Your data, you can export everything we hold about you as a machine-readable file (Art. 15/20 GDPR) and delete everything on your phone. Settings → Account → Delete my account erases your records on our servers and your device (Art. 17 GDPR). If anything fails, contact us and we will complete it manually.

You also have the right to rectification (Art. 16), restriction (Art. 18), objection (Art. 21) and the right to lodge a complaint with a data protection supervisory authority (Art. 77), for example the authority of the German federal state where you live or where we are based (Brandenburg).

12. Data processors

Google Ireland Ltd. / Google LLC (Firebase: authentication, database, analytics, crash reporting, and the cloud functions our AI features run in), OpenAI, L.L.C. (the model that reads your look photo, your Check photos and writes the daily line), RevenueCat, Inc. (purchase management), Sovrn, Inc. (affiliate link routing, as described in section 6), Cloudflare, Inc. (website hosting). Each processes data only on our instructions under a data processing agreement. Transfers to the United States are covered by the EU-US Data Privacy Framework where the recipient is certified, and otherwise by the EU standard contractual clauses. Write to tom@colorella.app for a copy of the safeguards that apply to a particular transfer.

13. Children

Colorella is not directed at children. If you are under 16, please use it only with the agreement of a parent or guardian. We do not knowingly collect data from children under 16.

14. Changes and contact

If this policy changes materially, the app will tell you before the change applies. Questions and requests: tom@colorella.app.