Esta página é um documento jurídico e fica em inglês de propósito: a tradução aproximada de um compromisso é outro compromisso. Mande suas dúvidas para o endereço de suporte, e respondemos em português.
Privacy policy
Last updated 25 October 2026.
1. Who we are
MondeStyle is provided by Individual Entrepreneur Rustam Alibekov, trading as Muffin Studio, Tsintsadze Street 12, Tbilisi, Georgia. We decide what happens to the personal data this page describes, which makes us its controller. Write to us at support@mondestyle.com.
Payments are handled by Paddle, our reseller and merchant of record, which is the controller of the payment details it collects – and in the iPhone app by Apple, which is the controller of the payment details it collects there. See section 5.
We have not yet appointed a representative in the EU (GDPR Article 27) or in the UK. Until we do, write to us directly at the address above; every request is answered by us.
2. What we collect
| What | Why | Basis | Kept |
|---|---|---|---|
| Your quiz answers – eye, hair and skin colour, hair length, jewellery, contrast, outline, build, height, optional weight, styles, woman or man – and the colours you tell us suit you; your palette, outline and direction; the name you give, if you give one; and what you do in the app: your wardrobe list, the outfits you save, the days you mark, when you first had five pieces in your wardrobe, which screen you started a trial from, on how many days you opened the app, the screens you open, the questions you ask the stylist, the city your weather is for, and the events you plan an outfit for – what kind of event, its day and its dress code, never its time, place or who is there. Kept on your device, and – since 17 October 2026 – on our server with the random id of your browser session and the country your connection is in | To work out your palette, outline and direction and keep them for you, and to learn which answers, screens and outfits help readers, so we can improve MondeStyle | Contract, and our legitimate interest in improving the service | On our server, 24 months after your last visit, then deleted. On your device, until you delete it. “Delete my data” in Settings deletes both at once |
| Your quiz answers, without your email – only if you press “Show my code” to move your subscription into the app or onto another device | To open your subscription and your result where you type the code | Contract | Deleted when the code is used, when you ask for a new one, or 24 hours after you asked. We keep a one-way hash of the code, never the code itself |
| If you give or use a gift week: a one-way hash of the code, and the random ids of the two browser sessions – the one that gave it and the one that used it | To open the week on the device that used the code, once per device and for three friends per subscriber | Contract | The code, 30 days after it was made. Which session gave a week to which, for as long as the code’s three-friend limit has to be kept. Neither names a person |
| Email address, if you ask for your result by email | To send it to you, once each time you ask, and to keep it with your answers, so we know which result is yours when you write to us | Contract, and our legitimate interest in keeping your record together | With your answers, as above: 24 months after your last visit, or until you press “Delete my data”. We send nothing else to it unless you tick “Send me three letters”. For that day we also keep a one-way hash of it and a count, so the form cannot be used to mail strangers |
| Email address, your language, the names of your palette, outline and direction, and when you agreed – only if you tick “Send me three letters” | To send you three letters about your colours over about ten days, and to stop them if you subscribe | Consent, withdrawn with the link in every letter | The place on the list of letters is deleted when the third letter is sent, when you unsubscribe, or when you subscribe – about ten days at most. The address itself stays with your answers, as above |
| Your answer to “Does this match you?” – yes, partly or no, the reason you pick, which of the twelve palettes you were given and whether it was a close call | To learn how often the result is right, and where it goes wrong | Legitimate interest | Only as a daily count, with no address, account or device attached. For that day only we keep a one-way hash of your connection and a count, so the count cannot be flooded |
| Which step of the way you reached – the first page, the first question, the end of the colour questions, of the shape questions and of the ones on what you would rather cover, the first outfit you are asked about, the end of the questions on your taste, the last question, your result, the screen that offers to save it, that you gave an address there, the price, the payment button, that you checked a piece with the camera (that it happened, not what it saw), the page after paying – with the page’s language, whether it was the website or one of our apps, and, if you came from an advert, which network it was on (TikTok, Meta or Google), read from the link you followed. Never the campaign, the advert or anything else in that link | To see where people stop on the way from the first page to a result and a subscription | Legitimate interest | Only as a daily count per step, with no address, account or device attached. Your browser remembers for that visit only which steps it has already counted, so a reload is not counted twice. For that day only we keep a one-way hash of your connection and a count, so the count cannot be flooded |
| If you turn on the Monday reminder: the address your browser’s push service gives for notifications, which names no person, and the page’s language | To send one notification a week, on Monday morning | Consent, withdrawn with “Stop the reminders” or in your browser’s settings | Until you stop the reminders, or the push service tells us the address no longer works. The notification we send is empty: the outfit it shows was written on your phone, from your clothes, and none of it is sent to us |
| If you turn on the morning reminder: the address your browser’s push service gives for notifications, which names no person, the page’s language, and the hour of the day, in UTC, that is eight in the morning where you are | To send one notification a day, at eight in the morning, with your colour for the day – or, with a subscription, your outfit for the day from your clothes: its pieces and the day’s forecast | Consent, withdrawn with “Stop” or in your browser’s settings | Until you stop the reminder, or the push service tells us the address no longer works. The notification we send is empty: what it shows was written on your phone by this page, and none of it is sent to us |
| Payment record – from Paddle, or from Apple in the iPhone app | To bill, refund and answer “what was this charge?” | Contract and law | 7 years |
3. What we do not collect
- No face geometry, face templates or biometric identifiers. Nothing here falls under the Illinois Biometric Information Privacy Act, by design.
- No health information. No symptoms, no well-being tracking. Outline, height and weight are physical descriptions used for clothing fit and nothing else.
- No cross-site tracking.
4. Photographs
We do not receive them. No photograph leaves your phone: there is no upload and no image of you anywhere in this product.
One screen uses your phone’s camera: “Does this piece suit me?”, for a piece of clothing in a shop. The camera turns on only when you press “Turn on the camera” on that screen, and off when you close it. It asks for the back camera and never for the microphone. The colour in the middle of the picture is read on your phone; no picture is sent. If you choose a photo there instead, it is read the same way, on your phone, and is not uploaded.
When you add a piece of your own clothing to My wardrobe from the camera, or add your own photo of a piece, a small copy of that picture is kept on your phone, in this site's storage in your browser or app, so that your wardrobe shows your own clothes. It never leaves your phone: it is not uploaded, synced or seen by us. It is deleted when you remove the piece, and with the rest of this site's data when you clear it.
- We do not detect, measure or store the geometry of your face.
- We do not generate an image of you wearing anything else.
- We hold no photograph of you to train anything on.
5. Who else sees it
Paddle, for payments. Paddle is our reseller and the merchant of record: you pay in Paddle's own window, which opens over our payment page, and Paddle receives your name, email, card and billing country under its own privacy policy. Paddle's script loads on that one page, once you have pressed a button to pay, and on no other. From Paddle we receive what you bought, whether your subscription is active, and the id Paddle gives you as a customer – never your card details. We keep those on our server with the random id of your browser session, so that what you paid for opens for you.
Apple, for payments in the iPhone app. In the iPhone app you subscribe in Apple’s own purchase sheet and pay from your Apple account, under Apple’s privacy policy. Apple has your Apple account and payment details; we never see them. Apple gives the app a signed record of the purchase, and the app passes it to our server: which subscription, the transaction number Apple gives it, the dates it started and renews on, whether it is in its first week, whether it was refunded, and whether it was made in Apple’s test environment. Apple also tells our server itself when the subscription renews, is turned off, ends or is refunded. We keep that record on our server with the random id of your session, so that what you paid for opens for you – on a new phone too, after “Restore purchases”. No name, email or card reaches us from Apple.
Resend, for the email you ask for. When you ask for your result by email, we send it through Resend, Inc., an email delivery service, from its servers in Ireland. Resend receives your email address and the letter itself – your palette, your outline and your direction – and keeps a record of the delivery under its own privacy policy. It is sent only when you ask, once each time you ask, and we keep the address with your answers (section 2). If you also tick “Send me three letters”, the email asks you to confirm, and only once you do does Resend send those too, two, five and nine days later, until the third has gone, you unsubscribe or you subscribe. Without a confirmation within seven days, no letter is sent.
MET Norway, for today’s weather and the week ahead. Today’s outfit takes the weather where you are into account, so a coat does not come on a warm day. With a subscription, today’s outfit and your week of outfits also show that weather, for today and the six days after. The place is the city of your internet connection, as our hosting provider already sees it; we round its coordinates to about ten kilometres and ask the Norwegian Meteorological Institute (MET Norway) for that place’s forecast, from our server. MET Norway receives those rounded coordinates and nothing about you. We keep the name of the city with your answers; your browser keeps the forecast on your device until the next day. “Turn off the weather”, under the outfit, turns this off.
A shop – Amazon for now – only if you press a link to it. Under “What your wardrobe is missing”, on the pieces to get in Today’s look, in the stylist’s answer when you ask what to buy, and under the pieces an article shows in its colours, each piece links to a search on amazon.com. When we add another shop, it is named here before its first link. The search holds the kind of piece, the cut we suggest for your outline and style, a plain colour, and “women’s” or “men’s” – “women’s navy straight pants”, for example – with our associate tag. Amazon also sees that you came from mondestyle.com, but not which page. Nothing else of yours is in the link: no other answer, no measurement, no id. Until you press a link, Amazon receives nothing from this site. As an Amazon Associate we earn from qualifying purchases. On Amazon, Amazon sets its own cookies, records that you came through our link, and handles what you do there under its own privacy notice.
The hosting provider, because the files and our database sit on their disks. Meta and Google, if you allow their advertising counters (below). Nobody else. We do not sell your answers, share them with advertisers or use them to follow you anywhere else.
The hosting provider also counts page views. Cloudflare adds a small script of its own to every page it serves for us, and that script reports which page you opened, the site you arrived from, your country, and what kind of browser and device you are reading on. It sets no cookie – the one cookie this site sets is on the cookie page – it gives you no identifier that outlives the visit, and it does not follow you to any other site. We read the counts to see which pages are read.
Advertising counters, only if you allow them. The first time you open the site in a browser a line at the foot of the screen says we use cookies. Press “Allow”, and the Meta pixel and Google’s advertising tag load and learn that this browser opened the site, perhaps from one of our adverts, and which steps it reached: the quiz started and finished, the result, the subscription screen, payment opened, a payment made and its amount. They also see the address of each page, which never holds your answers. They never receive your answers, your result, your photograph or your email. Meta and Google handle this under their own privacy notices, and we use it to see which adverts bring readers who stay. Close the line with its cross, or read us in our Android or iPhone app, and neither loads; closed, it asks again on your next visit. You can change your answer on the cookie page. There is no Google Analytics and no session recorder.
Nothing you answer in the quiz reaches that counter. Your answers go to our own server only, as section 2 says, and they are never written into the address of a page – so the only thing that counter counts is that a page was opened.
A payment, told to Meta by our server. When you pay after pressing “Allow”, our server also tells Meta of that payment directly: what was bought, its amount, the two Meta cookies this browser carries and the kind of browser – so that a script your browser blocked does not hide it – and, while the subscription runs, of each renewal. It sends no email, no name and no answer, and nothing at all for a payment made without “Allow” or in our apps.
6. Your rights
Access, correction, deletion, portability, restriction, objection and withdrawal of consent. “Delete my data” in Settings, or on this page, deletes what our server keeps about you and what this device keeps, immediately. For a copy of what we keep, write to us. We answer within 30 days. You may complain to your national authority.
7. Changes
If we change this in a way that affects you we email you before it takes effect and keep the previous version linked here. Continued use will not be treated as agreement to something you were never shown.
17 October 2026. Until this date your quiz answers and what you did in the app stayed on your device, the address you gave for your result was used once and not kept, and we set a cookie only if you paid or asked for letters. Since this date we keep your answers, what you do in the app and that address on our server, as section 2 says, and set the cookie when you start the quiz. If you used MondeStyle before, nothing of yours is sent to us until the app has shown you a note saying so.
MondeStyle is published by Muffin Studio.
Muffin Studio: muffinstudio.co
support@mondestyle.com