Privacy Policy

1. What GYST collects

• Your account: your email address and display name, and your date of birth when you sign up, to confirm you are 16 or older. Signing in with Apple can share a private relay email instead of your own.
• What you add: photos and details of your clothes, outfits and capsules, what you mark as worn, your answers to the style questionnaires and quiz, anything you write about your style, and your likes and dislikes of suggested outfits.
• SwapMeet: your listings and their photos, your messages, the meeting places you agree, ratings you give and reports you file. If you allow location when listing, an approximate position, rounded to about a kilometre, is saved with the listing.
• Location: when you allow it, to look up the weather, to show how far away listings are, and to suggest public meeting places. It is not tracked in the background.
• Use of the app: daily counts of which features you use, stored with your account, to understand what works; counts of AI requests per day, not their content; and, with feedback you send, your device model, system version and app version.
• Notifications: if you allow them, a device token so GYST can send them.

2. How it is used

To run the app: to show your wardrobe on any device you sign in on, suggest outfits, work out what you wear, list items on SwapMeet, and send the reminders you have allowed. GYST shows no advertising.

3. Services that receive your data

• Google Gemini (AI): AI Identify, Get AI Suggestions and outfit photo matching send the photo. The Stylist sends descriptions of your clothes (not photos), what you asked for and the forecast. The Weather tab's AI picks and daily outfits chosen by AI send descriptions of your clothes and the forecast, with your style answers and notes, how often and how lately you have worn each piece, your recent outfits, and the suggestions you liked or turned down and why. Only when you use those features, and never with AI Insights turned off.
• GYST's own servers: AI requests and weather lookups pass through GYST's servers, hosted by Railway, on their way to Google and Apple. The address a request comes from is recorded when a request is refused, as a security record.
• Apple WeatherKit: your location, sent from GYST's servers, to look up the forecast.
• OpenStreetMap: your location, when you ask for safe meeting places on SwapMeet, to find public places nearby.
• Google Firebase: where your account, data and photos are stored, encrypted in transit and at rest.
• Expo: delivers notifications to your device, using its token and the text of the notification.
• On your phone only: background removal, colour detection and the default daily outfit run on your phone and send nothing.

You can turn AI off at any time in the app's Settings, under AI, with AI Insights. The first time you use an AI feature, GYST tells you what it sends and asks before sending it.

4. Sharing

GYST does not sell your personal data, and does not share it for advertising.

Your wardrobe is private to your account. On SwapMeet, a listing is public: its photos, description, price, approximate location and your display name can be seen by anyone, including people without an account. Your profile is shown to other people only if you turn on Public Profile. Messages are seen by the person you are writing to. Reports, and messages flagged by the automatic filter, are reviewed by the developer.

The services above may process data in the United States and other countries. Each handles it under its own terms.

5. Age

GYST is for people 16 and older. An account cannot be created by anyone who gives a birthday under 16, and SwapMeet is closed to them.

6. Your choices and rights

• Get a copy: in the app, Settings, Your Data (GDPR), Export All Data. Photos are included as links.
• Delete: in the app, Settings, Danger Zone, Delete Account. This deletes your account, your data and your photos. Security records and abuse reports may be kept.
• Correct: edit any item, outfit or profile detail in the app, or write to the address below.
• Say no: turn off AI Insights, location or notifications at any time, in the app's Settings or your phone's settings. The rest of the app keeps working.

You can also exercise any of these rights, including under the GDPR and CCPA, by email. You will get an answer within 30 days. joe@jamelna.com

7. Security

Data is sent over encrypted connections and stored in Firebase. Access to your data is limited to your account, and to the developer for running the service.

8. This website

gyst.store is hosted by Vercel and shows no advertising. A cookie remembers your language, and your browser keeps your answer to the cookie notice.

Unless you decline in that notice, the site counts your visit for GYST's own statistics: the page, the page you came from, your browser, device type and screen size, language, time zone, and approximate location from your IP address (country, region and city). Visits are grouped by a short code made from those browser details, not by a cookie, and by a code kept for as long as the tab is open. The records stay in GYST's Firebase and are not shared. Requests that look like attacks are logged for security.

9. Contact

For questions about your data or to make a request: joe@jamelna.com

10. Changes to this policy

When this policy changes in a way that matters, the app and this page will say so.