GFGabriel
Gabriel Falis

Privacy Policy

One policy for apps and related services published by Gabriel Falis. Product-specific details below explain how ENSELORA works without requiring a separate legal website or domain.

Effective August 16, 2026

1. Scope and covered products

This Privacy Policy applies to mobile apps, websites, support channels, and related services published by Gabriel Falis that link to this page. It currently provides product-specific disclosures for ENSELORA. New products may be added here before they launch.

ServiceBook maintains its own product website and privacy information. Where an app-specific section conflicts with the general part of this policy, the more specific disclosure applies to that app.

2. Data controller and contact

The controller for products covered by this policy is Gabriel Falis, Slovakia. Privacy questions and requests can be sent to falis.gabriel@gmail.com.

When making a request, include the app name and enough information to identify the relevant account or support conversation. Do not send a password or full payment-card information.

3. General data practices

Information you provide

Depending on the product, this may include account information, content you create or upload, preferences, feedback, and support messages. Each app should request only the information required for a feature you choose to use.

Technical and purchase information

A product may process app version, device and operating-system details, request identifiers, subscription status, diagnostics, or security events needed to operate, protect, and troubleshoot the service. Apple processes App Store payments; Gabriel Falis does not receive full payment-card details.

Purposes and legal bases

Information is used to provide requested features and purchases, maintain security, answer support, comply with legal obligations, and improve a product where consent or another applicable legal basis permits it. Personal information is not sold and is not used for cross-app advertising tracking.

4. ENSELORA privacy details

Data processed by ENSELORA

Depending on the features you use, ENSELORA may process:

  • profile preferences such as name, style, occasions, and reminder time;
  • clothing photos, originals, local previews, masks, and wardrobe-item descriptions;
  • saved outfits, wear history, travel plans, favourites, and feedback;
  • for an optional account, an internal identifier and the email address hidden or provided through Sign in with Apple;
  • approximate location after optional permission, used for local weather through Apple WeatherKit;
  • optionally selected calendar event titles, processed on device to infer the type of activity and not stored by ENSELORA;
  • technical subscription, quota, security, analytics, or crash data as described below; and
  • information you choose to send to support.

Local data, optional account, and cloud sync

Without signing in, the wardrobe, profile, photos, outfits, and history remain stored locally in the iPhone app. Try-On history, including the person photo and result, remains local unless an eligible user separately enables Try-On sync.

Optional Sign in with Apple creates an account through Supabase Auth. If an eligible ENSELORA+ user enables sync, profile, wardrobe, outfit, wear-history, shopping-list and travel-plan records, plus clothing photos, are stored in a private Supabase database and storage bucket. If Try-On sync is explicitly enabled, its source and result photos are stored in a separate private bucket. Access rules restrict an account to its own records and files. Changes are saved locally before transfer over HTTPS.

AI and image processing

Basic foreground separation may run on the iPhone through Apple Vision. If you choose remote clothing recognition, fallback background removal, multi-item or video-frame wardrobe scanning, outfit generation, or virtual Try-On, the information required for that request is sent through the ENSELORA service after the relevant consent. Google Gemini may process clothing recognition and outfit composition. Replicate may process fallback background removal through 851 Labs and virtual Try-On through configured model providers. A higher-quality Try-On request may compare approved model outputs and use Gemini to select the strongest preservation result. Try-On may include a full-body photo and photos of selected clothes.

Submitted photos are not used by Gabriel Falis for advertising or to train a proprietary model. ENSELORA does not create a permanent server photo archive or intentionally log photo content. Technical request caches expire within 15 minutes. Pseudonymous daily or monthly quota counters expire within 32 days. External providers process requests under their own terms, retention rules, and data-processing safeguards.

Weather, location, and calendar

Location is optional. If allowed, approximate location is used with Apple WeatherKit to retrieve local weather. A destination entered for a travel plan may be geocoded and queried through WeatherKit without requesting the device location. Coordinates and forecast details may be retained with that travel plan and included in optional cloud sync. Weather responses are also kept in a time-limited device cache. Location is not used for advertising or cross-app tracking. Optional calendar event titles are processed on device and are not stored by ENSELORA.

Subscriptions

Apple processes purchases through the App Store. RevenueCat helps verify subscription status and consumable Try-On credits and may process a pseudonymous app-user identifier, product, transaction, webhook event, credit-ledger entry, and entitlement information. ENSELORA does not receive the full payment-card number.

Optional analytics and diagnostics

PostHog product analytics and Sentry crash diagnostics are separate, off-by-default choices. After consent, ENSELORA sends only predefined feature events or technical diagnostics needed to understand use and investigate failures. It does not send wardrobe photos, clothing names, outfit text, or the account email. Session replay, automatic screen capture, and cross-app tracking are not used. Consent can be withdrawn in the app under Account & Sync.

The server records pseudonymous AI operation, model, token or unit count, estimated cost, request identifier, and timestamp for quota, abuse prevention, cost monitoring, and operations. It does not store the submitted image or generated image in those cost records. App Attest may store a device-generated public key, receipt, assertion counter, and last-use time to verify genuine app requests.

5. Service providers and transfers

Depending on the selected ENSELORA feature, service providers may include Apple, Supabase, Google Gemini, Replicate and its named model providers, RevenueCat, PostHog, Sentry, and the infrastructure provider hosting the self-managed GFCodes web, API, and private Redis service. They process information only for the relevant hosting, account, purchase, AI, rate-limiting, analytics, diagnostics, or support purpose.

Providers may process information outside the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses, or another lawful safeguard. Apple independently processes information under its own privacy policy when you use the App Store, Sign in with Apple, WeatherKit, or other Apple services.

6. Retention and deletion

Local app information remains until you delete it in the app, remove the app, or erase the device, subject to device backups you control. Optional cloud data remains while the account is active and is removed when the in-app cloud-account deletion completes, except for records that must be retained for security, fraud prevention, or legal compliance.

ENSELORA support correspondence is retained for no longer than 12 months unless a longer period is reasonably needed to resolve the request or required by law. Temporary AI request and quota records use the shorter periods stated in the ENSELORA section above.

7. Your controls and rights

ENSELORA provides controls to export app data, delete local data, withdraw optional analytics or diagnostics consent, sign out, and delete an optional cloud account. Deleting the cloud account removes its cloud records and cloud clothing photos; local data can be deleted separately.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent at any time without affecting processing that was lawful before withdrawal. You may also complain to your local data protection authority, including the Office for Personal Data Protection of the Slovak Republic where applicable.

8. Children, security, and changes

Covered products are not directed to children under 13 unless an individual product says otherwise and provides appropriate safeguards. Reasonable technical and organisational measures are used to protect information, but no system can guarantee absolute security.

This policy may be updated when products, providers, or legal requirements change. The effective date will be revised, and material changes will be communicated in the app where appropriate.