Effective date: 10 October 2026
10of10 (Virtual Atelier) is a virtual clothing try-on: you upload photos, our team of AI experts shows the item on you, takes measurements, selects a colour palette and gives advice. So that every subsequent try-on is more accurate, we store your photos and results in your profile. We do not sell your data and do not use it for advertising. Part of the processing is performed by our technical providers (see §5). You can request deletion of your data at any time.
Data you provide when using the try-on:
Automatically: technical data (device/browser type, language), a user identifier, a device identifier in hashed form and — for visitors without an account — a hash derived from the IP address and browser, used to enforce limits; the country, taken from the network or the browser's language, to show the right prices; diagnostics (error and performance reports of the app). When signing in via Google — account identifier and email. When signing in with Apple — the account identifier only: we do not request your name or email from Apple. Cookies / local storage — see §8.
Payment data (card, billing address) is entered not with us but with Stripe — see §5.
| Purpose | Legal basis (GDPR) |
|---|---|
| To run the try-on, take measurements, give advice | Performance of a contract |
| Processing of photos of your face and body, your measurements and your voice by AI, including by our AI provider | Your consent, given on the first screen of the app; you can withdraw it at any time by deleting your data (§7) |
| To store the profile and photos for the accuracy of future try-ons | Performance of a contract / legitimate interest |
| Payment processing | Performance of a contract / legal obligation |
| Protection against abuse (limits, fingerprint) | Legitimate interest |
| Anonymised taste analytics (B2B) | Legitimate interest (anonymised data only) |
Data and media are stored on the servers of our providers (hosting — Render; AI processing — Google), which may be located in the EU and/or the USA. Photos and try-on results are held in a private zone and are served only upon a secured request to the authorised user. Retention period: as long as you use the service, until you delete your data (§7) or ask us to. Data of guests without an account is deleted within 24 hours. A finished try-on image is also kept in a technical cache for up to 30 days (24 hours for guests) so that the same picture is not generated twice. A crop of the garment used for visual product search is placed at a temporary address for up to an hour, so that the search provider can fetch it.
The experts you talk to in the atelier are AI characters, not people; their voices and the try-on pictures are generated by AI. The atelier is the considered work of a team of AI specialists, but they, like people, can make mistakes. The try-on, measurements, palette, scores and advice are produced by AI models and are of an evaluative, informational nature — please double-check the responses and do not treat them as a guarantee of fit, size or final result. Generated photos and videos are an approximation, not an exact depiction of how the item will fit in reality. We do not make decisions about you that have legal significance based solely on automated processing.
We do not sell data. To operate the service, it is processed by our providers:
Partner brands (B2B) do not receive customer photos — they have access only to anonymised textual analytics (body type, feedback on an item), without images or personal identifiers.
Browser extension. The 10of10 extension has one purpose: to show you whether a piece of clothing on the page you are viewing suits you. It reads a product page only when you start a fitting on it. The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements: the data is used only to provide and improve this feature, is not sold, is not used for advertising or for determining creditworthiness, and is not read by people except with your consent, for security purposes or where the law requires it.
Our providers (see §5) may process data outside the EU/EEA, including in the USA. In such cases the transfer relies on legally prescribed safeguards — as a rule, standard contractual clauses (SCCs) — within the framework of their own data processing terms.
You have the right to: access your data, rectify it, erase it (the "right to be forgotten"), restrict or object to processing, obtain a copy (portability), withdraw consent. Deletion and a copy of your data are available on a self-service basis directly in the app: open your account → "Privacy" → "Download a copy of my data" or "Delete my data" (the account record, profile, photos, measurements, history, cached try-on images and the wallet, including any unused energy, are deleted — on the server and on the device). For other requests — write to hello@10of10.fit. You may also lodge a complaint with the data protection supervisory authority of your country (in Poland — the President of the Personal Data Protection Office, UODO).
We use the browser's local storage for the operation of the service (profile, settings, sign-in token, remembering your cookie choice). Strictly necessary technologies operate without consent; for optional ones (analytics/marketing, should they appear) we request consent via a banner. We do not use advertising or analytics trackers. Some pages load a 3D scene from content delivery networks (unpkg, Spline, gstatic.com); these providers receive your IP address when the page loads.
The service is not intended for persons under 16 years of age. The threshold of 16 years corresponds to the age of digital consent under the GDPR in Poland (Art. 8 GDPR). We do not knowingly collect children's data; if you believe a child has provided us with data, write to us and we will delete it.
We may update this policy; we will notify you of material changes on the website or by email. The date of the last update is shown at the top.
Privacy questions: hello@10of10.fit
Controller: Alexei Vasyutin, private individual
Address: ul. Grębałowska 17/4, 01-808 Warszawa, Poland