Privacy Policy

Pikora is an interactive social platform for fashion, where you build outfits, enter challenges, vote on other people’s looks, discover styles and share what you make. This policy explains what we collect, why we are allowed to, and the choices you have. We keep the amount of data we collect to a minimum.

Who is responsible for your data

Information we collect

Set out below is everything Pikora holds, why we hold it, and whether it is private to you or visible to other people. “Private” means only you and, where necessary to run or moderate the service, us.

Your account

• Email address — to sign you in with a one-time code, and to send you the messages you have asked for. Private.
• Username and profile — the name you choose and anything you put on your profile. Public.
• Notification and email preferences — which messages you want and which you have turned off. Private.

Your wardrobe: private unless you publish

These are the things you import or upload. They stay private. They are not published, they are not added to any shared Pikora catalogue, and other members do not receive copies of them. They become visible to other people only through a look that you deliberately choose to publish, and then only as part of that look.

• Photographs you upload from your device.
• Screenshots you take in the in-app browser, when you tap Take screenshot and then Upload item.
• Source URLs and product links attached to those items — the address of the page you were on, which you can edit or remove before you upload.
• Item details — the category, the shop or brand name, the item name, the colour we read from the picture, and the style we infer from it. Used to sort your wardrobe, suggest pieces and match styles.
• Background-removed images — the cut-out version of a picture. Background removal runs on your device; the result is stored with the item.

What you build and what you publish

• Outfit compositions — the pieces in a look and where you placed them. Private while a look is a draft or marked private; public once you post it.
• Published posts — the look, its title and note, the occasion and style, your username, and the list of pieces shown beneath it. Public. For pieces you imported yourself, that list shows our own category drawing, the category, the shop’s name and your link, and not the shop’s photograph.
• Ratings and written feedback you give and receive. The rating is aggregated; written feedback appears under the look with your username.
• Comments you write. Public, with your username.
• Saves — looks you bookmark. Private to you; the author sees a count, not who.
• Follows — who you follow and who follows you.
• Challenge participation — entries, the votes you cast, and the reasons you pick. Entries are public. An individual vote is not shown to the person voted on.

Safety and moderation

• Reports you make — what you reported, why, and anything you wrote. Private; the person reported is never told who reported them.
• Reports and complaints about you, and the record of what we decided and did.
• Intellectual property cases — where somebody complains that content infringes their rights, we open a case holding the complainant’s name and contact details, the work claimed, the content complained about, our decision, and the actions taken with their dates. See the Copyright and Intellectual Property Policy.
• Blocks you set, and warnings, strikes, restrictions or suspensions applied to an account.

How the app is used

• Activity and analytics — which screens you open, looks you rate or save, challenges you enter, votes you cast, Surprise Look choices, styles you browse, people you follow, and product links you tap. Recorded as events so we can see which parts of Pikora work and so the For You feed and style matching can be any good. Private.
• Basic service data — coins earned and the dates of your activity.
• Device information, if you turn on notifications — the push token iOS issues for your device, the device type and the app version, so a notification reaches the right phone and we can tell an old app from a current one.
• Affiliate and product-link clicks — at the time of writing Pikora takes part in no affiliate programme and earns no commission. If that changes, clicks on those links may be recorded and shared with the affiliate network, and we will update this policy before it starts.

We do not ask for your real name, address, phone number, or payment card details, and we do not collect precise location.

What is public and what is not

A look you post is public: your username goes on it, and other people can see it in the feed, rate it, save it, remix it or vote on it in a challenge. A look you keep private stays private, and the pieces in your wardrobe are yours alone unless you publish something that uses them. Your profile — your username, your picture and your public looks — can be seen by anyone using Pikora, and shared outside it by link. Before you publish anything, the app shows you which of the two you are doing.

Notifications

Pikora can send notifications to your phone about challenges you entered, reactions to your looks, rewards you have earned, and new things to take part in. These are off until you allow them, twice over: your phone asks you first, and nothing can be sent unless you say yes there.

If you allow them, you can then choose which kinds you want in Profile → Settings → Notifications, and turn any category off without turning off the rest. Turning a category off stops the interruption only — whatever happened is still waiting for you in the app. To stop all of them, use iOS Settings, which is the only place a phone lets an app’s permission be withdrawn.

To send a notification we store the push token your phone issues, tied to your account. Delivery is handled by Apple’s Push Notification service; Apple receives the token and the message in order to deliver it. When you sign out, or a token stops working, we delete it.

Email

We treat two kinds of email as different things, because they are.

• Service email — your sign-in code, security notices, and anything we are obliged to tell you about changes to these terms or this policy. These are part of having an account, they are not marketing, and they are not something you can switch off while keeping the account: without the sign-in code you could not get in.
• Product and community email — new features, challenges, and Pikora news. This is marketing, it is off unless you switch it on, and agreeing to our Terms has never counted and will never count as agreeing to it. We ask separately, in a box that is not ticked for you, and creating an account works exactly the same whether you tick it or not.

You can withdraw at any time, with no reason and no consequence, in Profile → Settings → Email or from the unsubscribe link at the bottom of any marketing email we send. The unsubscribe link needs no password and does not expire. We record when you gave consent and when you withdrew it, together with the exact wording you were shown, so that we can show you what you agreed to and when.

Challenges, voting, coins and badges

Entering a challenge makes your outfit public and puts it in front of other members to vote on. Voting is anonymous to the people being voted on: an entrant sees how their look scored, never who scored it that way. You cannot vote on your own entry. If you win, your username and the winning look are shown as the result, and a Challenge Winner badge appears on your profile.

We record what you earn — coins, badges, streaks, Stylist status, referrals — because those numbers are the feature. Coins are a way of recognising participation inside Pikora. They have no cash value, cannot be exchanged for money, and we do not sell them.

Product links and shopping

Pikora shows items with links to the shops that sell them. Tapping one takes you to that retailer’s own website, at which point you are their visitor rather than ours: what they collect, and what they do with it, is governed by their privacy policy and not by this one. Anything you buy is a transaction with them — payment, delivery and returns are theirs, and Pikora is not a party to it.

Pikora is not currently part of any affiliate programme and earns no commission from these links. If that changes, we will say so here before it starts.

Invitations and referrals

You can invite people to Pikora, and it works by giving you a link to send however you like — your own messages, your own choice of who receives it. Pikora does not email or message anyone on your behalf, and we do not ask you for your contacts or upload your address book. Somebody who has not signed up has given us nothing and hears nothing from us.

How we use it, and why we are allowed to

European data protection law requires us to have a legal basis for everything we do with your data. Ours are:

• To create your account and sign you in — we cannot provide the app without it. Legal basis: performance of our contract with you.
• To show your looks in the feed, challenges, and templates, credited to your username — this is the service you signed up for. Legal basis: performance of our contract with you.
• To operate community features such as ratings, saves, following, reporting, and blocking. Legal basis: performance of our contract with you.
• To recommend looks, styles, challenges and people, and to decide what appears in your For You feed, using the activity described above. Legal basis: performance of our contract with you — a feed that recommends nothing is not the service you signed up for.
• To measure how the app is used so we can fix what is broken and improve what is not working. Legal basis: our legitimate interest in understanding our own product. We use our own code for this rather than a third-party tracker, and the results are only ever seen in aggregate by us.
• To run challenges, voting, coins and badges, including excluding you from voting on your own entry and deciding who won. Legal basis: performance of our contract with you.
• To send you marketing email, if and only if you have asked for it. Legal basis: your consent, which you can withdraw at any time without giving a reason and without losing anything else.
• To keep the service safe, to review reports, and to prevent abuse and fraud. Legal basis: our legitimate interest in running a community that is safe to be in.
• To keep limited records where the law requires it. Legal basis: compliance with a legal obligation.

Searching the web inside the app

When you tap Search the web, Pikora opens an in-app browser on Google. From that moment you are using Google, and then whichever website you go to. What you type, the pages you open and your IP address are seen by Google and by those websites, under their own privacy policies and not this one. We do not receive your searches and we do not record where you browsed.

The only thing that comes back to us is what you deliberately bring back: the screenshot you take, and the address of the page you took it from, and only after you tap Upload item. If you would rather not attach the address, you can edit or remove it on the review screen before uploading.

Pikora does not embed anything else of Google’s. The app carries its own copy of the typeface it uses, so opening Pikora contacts nobody but us.

Images you import

You can import images by photographing something, by choosing a picture from your device, or by searching the web inside the app and taking a screenshot of a page you found. Nothing is imported until you tap Upload item.

Background removal runs entirely on your device — the image is never uploaded to us or to anyone else for processing. The first time you use it, your device downloads the removal model from IMG.LY (staticimgly.com, a provider based in Germany), which means IMG.LY briefly sees your device’s IP address.

What you import is stored privately in your own wardrobe. It is not added to Pikora’s shared catalogue, and no other member receives a copy of it. It becomes visible to other people only as part of a look you deliberately publish.

Taking a screenshot of something does not make it yours. Only import and publish images you have the right to use — see the Terms of Service and the Copyright and Intellectual Property Policy.

Sharing and service providers

We don’t sell your data or use it for third-party advertising. We rely on a small number of providers purely to run the app: hosting and serverless functions (Netlify), our database (Neon), email delivery (Resend), delivery of notifications to your phone (Apple’s Push Notification service), and the background-removal model download described above (IMG.LY). These providers process data only on our instructions and are not permitted to use it for their own purposes.

Where your data is stored

Netlify, Neon and Resend are based in the United States, so your data is transferred outside the European Economic Area. Where that happens we rely on the safeguards European law provides for such transfers — the European Commission’s standard contractual clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for details of the safeguards that apply.

Community safety

Every look and every profile can be reported from a menu on the item itself, and you can block any user so their content no longer appears to you. We review reports and remove content that breaks our rules. There is no tolerance for objectionable content or abusive behaviour, and we may suspend an account, which ends that person’s sessions immediately.

Your rights

Because we are established in Italy, European data protection law gives you the following rights over your data. You can exercise any of them by writing to privacy@pikora.co, and we will respond within one month.

• Access — ask for a copy of the data we hold about you.
• Rectification — have anything inaccurate corrected. You can also edit your username yourself in the app at any time.
• Erasure — have your data deleted. You do not need to ask us: Profile → Delete account removes your account, your looks, your ratings, saves, follows and notifications immediately, and signs you out of every device. You can also delete individual looks whenever you like.
• Restriction — ask us to pause our use of your data while a question about it is resolved.
• Objection — object to processing we carry out on the basis of our legitimate interests.
• Portability — receive the data you gave us in a machine-readable format, or ask us to send it to another service.
• Withdraw consent — where we rely on your consent, as we do for marketing email, you can take it back at any time. It is as easy to withdraw as it was to give: one switch in the app, or one tap in any email we send. Withdrawing affects nothing else about your account.

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, or to the authority in the EU country where you live.

Children

Pikora is not directed to children. You must be at least 16 to use it, which is at or above the age of digital consent everywhere we operate. We do not knowingly collect data from anyone below that age. If you believe a child has provided us data, contact us and we will delete it.

How long we keep things, and how deletion works

We keep your account data for as long as your account exists.

• Your wardrobe and your looks — kept until you delete them, or until you delete your account.
• Deleting your account — write to privacy@pikora.co, or use Delete account in the app. We remove your personal data straight away rather than after a delay: your account, your wardrobe, your looks, your ratings, your saves and your follows go with it.
• Pieces on the shared catalogue — a piece an administrator approved onto the shared shelf may remain if other people’s outfits depend on it, but it is no longer connected to you or your username.
• Analytics events — kept in a form tied to your account while the account exists, and removed with it.
• Moderation and intellectual property records — kept after the content itself has gone, and after an account has closed, for as long as we may need to account for a decision: to answer a complainant, to justify a removal, or to know that something has happened before. This is the one category we deliberately keep beyond deletion, and we keep only the case itself — what was complained about, what we decided, what we did and when.
• Where the law requires us to keep limited records, we keep only what it requires and no longer.

Changes

We may update this policy as the app evolves. We’ll revise the date above and, for significant changes, let you know in the app.

Questions or requests about your data: privacy@pikora.co · Terms of Service