Vowella

Vowella · Selcora Mobile

Privacy Policy

Last updated: 19 October 2026

This text is a draft under legal review. Fields in square brackets will be completed before publication.

Vowella is an iPhone app by Selcora Mobile that lets you try on wedding dresses virtually with AI. This policy explains what data we process when you use the Vowella app and the vowella.selcoramobile.com website, why we process it, how long we keep it and what your rights are.


01

In short

  • You don’t need an account; we don’t ask for your name, email address or phone number.
  • The photo you upload is used only to create your try-on and is deleted from our servers as soon as processing ends.
  • Your try-ons are stored on your iPhone and in your own iCloud account; we cannot access them.
  • Only two kinds of images are kept temporarily on our servers: a locked first try-on result (at most 24 hours) and the Bridal Council images you choose to share (at most 7 days).
  • We don’t sell your data or build advertising profiles.

02

Data controller

The controller of your personal data is [Company name — to be added] (Selcora Mobile).

Address: [Address — to be added]
Email: info@selcoramobile.com


03

Data we process

Your photos and try-on inputs

The photo you take or upload for a try-on; the gown and studio options you choose (veil, hair, jewellery, venue); gown images you upload yourself; the description you type or dictate to the AI Designer. Light, focus and pose checks on your photo run on your device; no data is sent to our servers for them.

Results you create

Try-on images, studio edits, pose variations, moving try-ons and designs.

Your profile preferences

The name, wedding date, silhouette, style choices and Style DNA you enter to personalise the app. These are kept on your device and in your iCloud account; when you use the style advisor, the relevant part is added to the request to personalise the answer.

Style advisor messages

Sent to our AI provider to generate a reply. Message contents are not stored on our servers; we only count messages per day to enforce the daily limit.

Device and usage data

A random device identifier the app creates on first launch and keeps in your device’s Keychain; an Apple App Attest key; app version, language and region; your credit balance and credit history; in-app events (e.g. a try-on started, the purchase screen was viewed); crash reports.

Purchase data

Transaction identifiers, product, date, environment and subscription status sent to us by Apple. Apple takes the payment; we never see your card or bank details.

Notification and advertising data

A push token if you allow notifications. For ads, your consent choices and, only if you allow it, Apple’s advertising identifier (IDFA).

Bridal Council data

The result images and question you choose to share; voters’ choices and one-way (salted) hashes of their browser identifier and IP address; the name and comment entered by commenters.

Support emails and server logs

Your email address and message if you write to us. Server logs kept for security and abuse prevention (IP address, request time, error details).


04

Purposes and legal bases

  • Providing the service: creating try-ons, edits, videos and designs; delivering results to your device; verifying credits and purchases. Basis: performance of our contract with you. Before your first upload, the app also asks for your explicit consent to process your photo with AI.
  • Security and abuse prevention: content safety checks (nudity, minors, violence), App Attest, rate and budget limits. Basis: legitimate interests and legal obligations.
  • Improving the app: crash reports, aggregate usage statistics and A/B tests. Basis: legitimate interests.
  • Notifications: telling you when a try-on is ready or a council has finished. Basis: the iOS notification permission (consent).
  • Advertising: showing ads in some parts of the app; personalised ads only with your permission. Basis: consent and legitimate interests.
  • Accounting and legal obligations: keeping purchase records. Basis: legal obligation.

Users in Türkiye can find more detail in our KVKK notice.


05

Retention

DataWhereHow long
Original photo uploaded for a try-onServer memory, during processingDeleted when processing ends; never written to permanent storage
Paid try-on resultServerDeleted as soon as it reaches your device
Locked first try-on resultServer (encrypted)At most 24 hours; deleted immediately when unlocked
Bridal Council images, votes and commentsServerAt most 7 days
Personal fields in job recordsServer30 days
Style advisor messagesNot storedOnly a daily message count is kept
Try-ons, wardrobe and profile preferencesYour device and iCloud accountUntil you delete them
Credit and purchase recordsServerFor as long as legally required
Support emailsEmailAs long as needed after your request is resolved

When a period ends, data is removed by automatic clean-up jobs. See the next section for short-lived records in our providers’ own systems.


06

Service providers and international transfers

We work with the providers below to run the service. Each processes data only to provide its own service, under its own contract and privacy terms.

ProviderPurposeData
fal.aiImage and video generationPhoto, choices, generated results
OpenAIContent safety checks, style advisor, AI DesignerPhoto (for checks), advisor messages, design descriptions
AppleApp Store purchases, iCloud, App Attest, push deliveryPurchase records, iCloud data, device attestation
Google (Firebase, AdMob)Crash reports, ad delivery and ad consentCrash data, consent choices, advertising identifier with permission
OneSignalPush notificationsPush token, device identifier
Hece (HeceSDK)Purchase flow, subscription screens, A/B tests, event measurementDevice identifier, in-app events, purchase status
HostingOur servers and database[Hosting provider — to be added]

Some of these providers are located outside Türkiye and the European Economic Area, mainly in the United States. These transfers rely on the safeguards provided for in Article 9 of the KVKK and in the GDPR (for example, standard contractual clauses).


07

Bridal Council and our website

When you create a council, the images you choose are resized and uploaded to our server, and you get a link. Anyone with the link can see the images and the question, vote and comment. Share it only with people you trust. A council and all its votes and comments are permanently deleted after at most 7 days.

Our website uses no analytics or advertising cookies. The council page sets a single functional cookie (vw_voter, 30 days) holding a random identifier so the same browser can’t vote twice. Neither this identifier nor your IP address is stored in raw form; we keep only one-way hashes. You don’t have to use your real name in comments.


08

Ads and tracking

Some parts of the app may show ads through Google AdMob, and you can earn credits by watching an ad. If the app wants to track you across other companies’ apps and websites, it asks through Apple’s App Tracking Transparency prompt; if you decline, your advertising identifier is not shared and ads are not personalised. In the European Economic Area and the United Kingdom, ad consent is also collected through Google’s consent form. You can change your choice at any time in iOS Settings › Privacy & Security › Tracking.


09

Children

Vowella is not designed for anyone under 18. Uploading photos of minors is prohibited, and content safety checks try to reject such content. If you believe we have processed a child’s data, write to us and we will delete it right away.


10

Your rights and deleting data

  • Data on your device and in iCloud is under your control: delete try-ons in the app, or remove everything in Settings › your name › iCloud › Manage Storage › Vowella.
  • Data on our servers is short-lived already. To delete the credit and purchase records linked to your device identifier, write to info@selcoramobile.com with the support ID from the app (Profile › Support). Records we are legally required to keep may be retained for that period; deletion means losing any remaining credits.
  • Depending on where you live, you have the right to access, correct and delete your data, restrict or object to processing, data portability, and to withdraw consent. Rights in Türkiye are detailed in our KVKK notice.
  • We answer requests within 30 days. You may also complain to your data protection authority.

11

Security

All traffic between the app and our servers is encrypted (HTTPS). Locked results are stored encrypted in our database, council images are served only through signed, expiring links, and expensive operations are accepted only from genuine copies of the app verified with Apple App Attest. No system is perfect; if a breach occurs we will notify you as the law requires.


12

Changes

We update this policy as the service changes. We announce significant changes in the app or on this page; the date at the top shows the latest update.


13

Contact

For questions and requests, write to info@selcoramobile.com. Support page: vowella.selcoramobile.com/support.