Privacy policy

Effective November 7, 2026 · Tavlum by Capyka LLC

This policy covers the Tavlum mobile apps and tavlum.com. Contact [email protected] about privacy or your data.

Data we process

• Account information: an account ID, sign-in provider identifiers, email address, and an optional profile name and avatar. Android supports Google sign-in; iOS also supports Sign in with Apple.
• Content you choose to submit: person and garment photos, room and reference images, edit masks, written instructions, and generated results. Live try-on transmits camera video and a clothing reference for real-time AI processing. The Android app does not request microphone access.
• Service records: generation status and timestamps, credit balances and transactions, live-session records, and reports or feedback you send.
• Security information: an app-generated device identifier and network information used for authentication, free-credit limits, abuse prevention, and service delivery. We use hashed identifiers for some anti-abuse checks.

Why we use it

We use this information to sign you in, deliver requested AI previews, manage profiles and credits, respond to reports, prevent abuse, and keep the service working. Photos, wardrobe items, and saved looks can remain on your device; selected content leaves your device when you request cloud processing, update your profile, or choose to share.

AI and service providers

Depending on the selected feature, images and instructions are processed by OpenAI, fal.ai/FASHN, or Decart. Cloudflare provides hosting, storage, and service infrastructure. Apple and Google handle their respective sign-in flows. These providers receive the data needed for their service and may process it in other countries. Their processing and retention are also subject to their applicable terms and privacy policies. We do not promise that provider retention is identical to Tavlum's own retention.

We do not sell personal data or use submitted images for advertising. Tavlum does not include a third-party advertising SDK. We do not run a model-training feature using your uploads.

Sharing

Sharing is initiated by you. If you create a public result link, anyone with that link may view the image until it is removed or expires; links are configured to expire after 30 days. Copies saved by recipients are outside our control. We may also disclose information when legally required or necessary to protect users and the service.

Storage and retention

We retain account and credit information while needed to provide the service. Temporary generation files are removed after processing, result retrieval, cancellation, or scheduled cleanup. Server generation records are configured for seven-day cleanup; public share links for 30-day expiry. Actual removal may depend on completion of cleanup jobs. AI providers may have separate retention requirements.

Deleting an account removes its profile and avatar, sign-in links and email, temporary generation content, public shares, generation records, reports, and live-session records, and clears its remaining credits. A de-identified account marker and bare credit ledger, and hashed anti-abuse grant records, may remain for accounting, security, and abuse prevention. These records have no fixed automatic expiry in the current service; request review of retained records by email. Any retention required by law also applies.

Your choices and deletion

In the app, open Profile → Privacy & Data to export your data, delete your data while keeping your account and credits, or delete your account. You can also request deletion without installing or opening the app: follow our account deletion instructions or email support from the address linked to your account. We may ask for limited information to verify ownership. Never send us a password or sign-in code.

Deleting server data does not erase copies you exported or shared with other people. Deleting an account does not cancel a subscription managed by an app store.

Security and website

Data is encrypted in transit using secure network protocols. No storage or transmission system is completely secure. This website does not use advertising cookies or an analytics tracker; the hosting infrastructure processes ordinary request data such as IP addresses for delivery and security.

Children and changes

Tavlum is not designed for children under 13. Do not submit children's photos without appropriate permission. Contact us if you believe a child has provided personal information. We may update this policy as the service changes and will update the effective date here.