Privacy Policy

1. Scope and Controller

This Privacy Policy describes how CALSIA LLC ("Calsia", "we", "us" or "our") collects, uses, discloses and protects personal information in connection with the Calsia mobile application, the website at calsiapp.com and related services (collectively, the "Services").

For the purposes of the General Data Protection Regulation and the UK General Data Protection Regulation, Calsia is the controller of the personal information described in this Policy. For the purposes of United States state privacy legislation, Calsia is the business.

This Policy forms part of, and is incorporated by reference into, our Terms of Service. Capitalised terms not defined here have the meanings given in those Terms.

2. Summary

This summary is provided for convenience and does not replace the detail set out below.

1. Calsia collects the information required to operate a garment fit service: account credentials, the sizes you usually wear, body measurements you choose to provide, and the photographs and details you post.
2. Calsia gives you a public profile, seen by other people using Calsia. Outside Calsia only a small part of it can be seen, through one link that you choose to share, and that preview leaves out your height and your usual size.
3. Your electronic mail address, saved items, likes, blocks, mutes, reports and searches never form part of your public profile.
4. A reduced copy of each photograph is submitted to an automated screening service before publication, as described in Section 5.
5. Calsia does not sell personal information, does not share personal information for cross-context behavioural advertising, and does not use personal information to train machine learning models.
6. Website traffic is measured without cookies and without anything that identifies a visitor, as described in Section 15.
7. You may delete your Account, and with it your personal information, at any time from within the application.

3. Categories of Personal Information Collected

Account and identity information. Electronic mail address; password, which is stored by our authentication provider in hashed form and is not accessible to Calsia in plain text; username; and, where you elect to authenticate using Apple or Google, the electronic mail address and unique identifier supplied by that provider.

Physical characteristics and sizing information. Height; waist size; cup; band; garment size you usually wear at specified brands; and other physical aspects. This information is provided voluntarily and may constitute a special category of personal data in certain jurisdictions.

User Content. Photographs and short videos of garments and outfits; the associated brand, item name, size purchased and reported fit; retailer links; notes you post about a brand or item, with any photographs you add; comments you post on Looks and notes, with any photograph you attach; profile photograph; and Instagram and TikTok usernames where supplied.

Activity information. The Users and brands you follow; the Looks, notes and replies to notes you save; the Looks, notes and comments you like; the brand pages you open and the time at which you open them; the questions you type into Search; brands you ask us to add; reports you submit, and any reported post you choose to show again; Users you block or mute; messages you submit through the support and feature request facilities, including the username and electronic mail address you enter on those forms; and counts of these actions, kept for a short period, which we use to limit spam.

Technical information. Internet protocol address, approximate region derived from it, device and browser type, operating system version, and request timestamps, recorded by our infrastructure providers in the ordinary course of delivering an application and a website; and, where you allow notifications, a push notification token identifying your device to the notification service.

Categories not collected. Calsia does not collect precise geolocation data, contact lists, biometric identifiers, government identification numbers, financial account or payment card information, or information concerning racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, health data or sexual orientation. Calsia processes no payments.

4. Sources of Personal Information

We collect personal information directly from you when you register, complete your profile, post a Look, use the Services, or communicate with us; automatically from your device and from our infrastructure providers as described above; and from Apple or Google where you elect to authenticate using those providers.

We do not purchase personal information from data brokers and do not enrich your record with information obtained from third-party sources.

5. Automated Content Screening

Prior to the publication of any photograph, the application generates a reduced-resolution copy and transmits it to an automated content screening service operated by one of our service providers, for the sole purpose of determining whether the image is suitable for publication: for a Look or note, whether it depicts apparel; for a photograph attached to a comment, only whether it contains prohibited content.

Calsia retains the resulting determination and does not retain the transmitted copy. Under our agreement with that provider, the transmitted copy is not used to train its models.

The screening process does not perform facial recognition, does not seek to identify any individual, and does not identify brands.

This measure is implemented in order to maintain the integrity of the Services and to satisfy the content filtering obligations imposed upon applications that permit user-generated media.

6. Your Public Profile

Calsia gives every User a public profile. Your public profile is how other people using Calsia find you, see the garments you have posted and the sizes you bought, and decide what size to buy for themselves.

Outside Calsia, only a small part of it can be seen, and only by people you choose to show it to. Calsia does not publish your profile anywhere. It gives you one link to it, and that link works only for somebody who has been given it, by you or by somebody you gave it to.

That link, at calsiapp.com/u/ followed by your username, opens a preview rather than your profile. The preview shows your username, your profile photograph, your three counts and your four most recent photographs with the brand, size and fit beside each. It does not show your height, it does not show the size you usually wear, and it does not show any other Look.

Because a link can be passed on, treat anything on the preview as capable of reaching anybody, and keep that in mind when deciding what to post and which photographs to use.

We currently prevent search engines from indexing preview pages. Should that change, we will give notice through the Services before it takes effect.

The following never form part of your public profile, are not visible to other Users, and are used only as described in Section 8:

1. Your electronic mail address and password.
2. Your cup size, band size, and hip measurement, unless you choose to show them on your profile.
3. The Looks, notes and replies to notes you have saved, and which Looks, notes and comments you have liked. Other Users see only how many likes each has received, never who gave them. They are used to shape what Calsia shows you, and nobody else is told what you liked.
4. The questions you type into Search.
5. The Users you have blocked. A blocked User is not notified.
6. The Users you have muted. Muting hides a User's Looks and notes from you only, and a muted User is not notified.
7. Reports you submit, and any reported post you choose to show again. The subject of a report is not informed of the identity of the reporting User.
8. The brand pages you open.
9. Messages you submit to us.

7. Your Connections with Other Users

Calsia records which Users you follow, which Users follow you, and which brands you follow.

We use those connections, together with your activity within the Services, to decide what to show you, including the order of your feed and of the replies to a note. Information about other Users is used for this only in aggregate and is never attributed to any individual.

We also compare the garment sizes you have given us with those given by other Users, automatically, to show you Looks and statements relevant to your size. No other characteristic of any User is taken into account in that comparison.

Those you follow and those who follow you form part of your public profile. Those you block or mute, those you report and what you save do not. Blocking a User hides your profile and content from that User, who is not informed; beyond that, none of these is used to decide what any other User is shown.

We use your activity within the Services to choose which sponsored Looks you see.

8. Purposes of Processing and Legal Bases

We process personal information for the purposes set out below. Where the General Data Protection Regulation or the UK General Data Protection Regulation applies, the legal basis for each purpose is stated.

1. To create and administer your Account and to authenticate you. Legal basis: performance of a contract.
2. To display your User Content and to operate the social features of the Services. Legal basis: performance of a contract.
3. To derive fit labels, comparisons and aggregate statistics from sizing information. Legal basis: explicit consent, which you may withdraw at any time by deleting the relevant information or your Account.
4. To screen photographic content prior to publication, to review reports, to give effect to blocks and mutes, to prevent spam and to detect and prevent abuse and fraud. Legal basis: legitimate interests in maintaining the safety and integrity of the Services, and compliance with legal obligations.
5. To respond to your support requests and other communications. Legal basis: performance of a contract and legitimate interests.
6. To send service communications, being confirmation of your electronic mail address, password reset messages and confirmation of a change of address. We do not send marketing communications to registered Users. Legal basis: performance of a contract.
7. To send push notifications when another User comments on your Looks or notes or replies to your comments, when your Looks or notes reach a number of likes, and occasional updates about Calsia itself, where you allow notifications on your device. Legal basis: consent, which you may withdraw at any time in your device settings.
8. To answer the questions you type into Search, from the Looks posted on Calsia and from reviews published elsewhere on the web. Legal basis: performance of a contract.
9. To produce aggregate statistics concerning use of the Services, in a form that does not identify any individual. Legal basis: legitimate interests.
10. To comply with legal obligations and to establish, exercise or defend legal claims. Legal basis: compliance with a legal obligation and legitimate interests.

We do not engage in automated decision-making producing legal or similarly significant effects concerning you.

9. How We Share Personal Information

We share personal information as described in this Policy, and not otherwise.

Service providers. We share personal information with vendors and service providers who perform services on our behalf. These include providers who host our website and the application, store data and manage sign-in, send email, deliver push notifications, screen photographs before they are published, help answer questions typed into Search, and measure traffic to our website. They may use personal information only to provide those services to us, and only on our instructions.

Questions typed into Search are sent to those providers without your name, username or any other identifier.

Sign-in providers. If you choose to sign in with Apple or Google, we exchange the information needed to do so with that provider.

Professional advisers. We may share personal information with our lawyers, accountants and other professional advisers, where needed for the advice they give us.

Legal requirements and safety. We may disclose personal information where required by law, legal process or a governmental request; to enforce our Terms of Service or investigate suspected breaches of them; and to protect the rights, property or safety of Calsia, our Users or the public.

Business transfers. If Calsia is involved in a merger, acquisition, financing, reorganisation or sale of assets, personal information may be transferred to the purchaser or successor, which will be bound by this Policy or will give notice before applying different terms.

With your consent. We share personal information in any other way only with your consent or at your direction, for example when you share a link to your profile.

We do not sell personal information and we do not share it for cross-context behavioural advertising.

10. International Transfers

Calsia operates from the United States, and our service providers store and process personal information in the United States and in other jurisdictions.

If you access the Services from outside the United States, your personal information will be transferred to, stored in and processed in the United States, where data protection law may differ from that of your own jurisdiction.

Where personal information is transferred from the European Economic Area, the United Kingdom or Switzerland, the transfer is made pursuant to the European Commission's Standard Contractual Clauses or another lawful transfer mechanism, as incorporated into our agreements with the relevant service provider. A copy of the relevant mechanism may be requested at the address in Section 17.

11. Retention

We retain personal information for so long as your Account remains active, save as set out below.

Upon deletion of your Account, your profile and your User Content cease to be accessible to any person immediately, and are permanently erased, including photographic files held in storage, after 30 days. That interval exists solely to permit the reversal of an accidental or erroneous deletion.

A registration that is not confirmed by the User is deleted automatically within a short period of registration.

We retain for longer only such information as is necessary: records relating to reports, safety determinations and enforcement action, in order to prevent the return of a User removed for abuse and to defend legal claims; and any information we are required to retain by law. Backup media are overwritten in the ordinary course of their rotation.

12. Security

Personal information is transmitted over encrypted connections and is stored by providers that apply encryption at rest.

No method of transmission or storage is wholly secure, and we do not warrant absolute security. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities as required by applicable law.

13. Your Rights and Choices

Irrespective of your location, you may:

1. Access and correct your profile information, your sizing information and your User Content from within the application.
2. Delete an individual Look or note from the menu accompanying it, and a comment you have posted by holding it.
3. Delete your Account, and with it your personal information, from the Contact support page within the application.
4. Request a copy of the personal information we hold concerning you, or request its correction or erasure, by writing to admin@calsiapp.com. We respond to verifiable requests within thirty days, or within such shorter period as applicable law requires.

Service communications are integral to the operation of an Account and cannot be disabled independently; deletion of the Account discontinues them. Push notifications can be turned off at any time in your device settings.

European Economic Area, United Kingdom and Switzerland. You have the rights of access, rectification, erasure, restriction of processing, objection to processing and data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You have the right to lodge a complaint with your national supervisory authority.

California. You have the right to know the categories and specific pieces of personal information collected, the sources from which it was collected, the purposes for collecting it and the categories of third parties to whom it is disclosed; the right to request deletion; the right to request correction; the right to limit the use of sensitive personal information; and the right not to be subject to discrimination for exercising any of these rights. The categories collected and disclosed are set out in Sections 3 and 8. We do not sell personal information and do not share it for cross-context behavioural advertising, and accordingly no opt-out is required.

Other United States jurisdictions. Residents of states including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana hold comparable rights. We extend the rights described in this Section to all Users irrespective of residence.

We may require information sufficient to verify your identity before responding to a request. You may submit a request through an authorised agent, in which case we may require evidence of that authority.

14. Children's Privacy

The Services are not directed to, and may not be used by, any person under the age of 13. We do not knowingly collect personal information from any person under that age.

If we become aware that we have collected personal information from a person under the age of 13, we will delete that information and terminate the associated Account. A parent or guardian who believes that a child has provided personal information to us should write to admin@calsiapp.com, and we will act promptly.

15. Cookies, Measurement and Similar Technologies

The website uses only those cookies that are strictly necessary to maintain an authenticated session and to protect the security of the site. It sets no advertising cookies.

We measure website traffic with a privacy-focused analytics service provided by our hosting provider. It records which pages are visited, the page a visitor arrived from, an approximate location, and the type of device and browser.

That service sets no cookies. It does not record or store your internet protocol address, and it does not assign you any persistent identifier. It cannot reconstruct your activity across different websites or applications, and we cannot identify you from it.

Because the address of each page is recorded, a visit to a public profile is recorded together with the username in that address, for example calsiapp.com/u/ followed by a username. That record concerns the page visited and not the identity of the visitor.

We use this information solely to understand how many people visit Calsia and which pages they arrive at. It is not used for advertising, is not combined with your Account, and is not disclosed to any advertiser.

The mobile application does not use cookies and does not include this measurement service.

Because we do not track Users across third-party websites or applications, we do not respond differently to Do Not Track or Global Privacy Control signals; there is no cross-context sharing to suppress.

16. Changes to This Policy

We may amend this Policy from time to time. Where an amendment is material, we will revise the effective date shown at the head of this document and provide notice through the Services or by electronic mail prior to the amendment taking effect. Where an amendment materially expands the purposes for which previously collected personal information is processed, we will obtain your consent where required by applicable law.

17. Contact and Complaints

CALSIA LLC

Electronic mail: admin@calsiapp.com

Enquiries concerning this Policy, and requests to exercise any right described in Section 13, should be addressed as above. We respond to every enquiry.