Privacy Notice — Maison Raqiya

1. About this notice

This notice applies to the Maison Raqiya web app (app.maisonraqiya.com) and the showcase site (maisonraqiya.com).

Data controller: Uğur Arı, Evliya Çelebi Mahallesi, Hızırreis Caddesi, Ecehan Sokak, No: 15 D: 3, Tuzla, İstanbul, Türkiye. You can reach us at [email protected].

This notice is information. At your first sign-in you are asked to confirm that you have read it; the version you confirm is recorded.

2. What data we process

During the pilot, accounts are opened by invitation only. We ask for the least data the service needs. We do not ask for an e-mail address, a phone number, a full address, a date of birth or an occupation.

As you use the service, the following data is created:

Account and sign-in: the one-time invitation code our studio gives you (only an irreversible digest is kept), the username you choose and an irreversible digest of your password (not the password itself).
First sign-in details: your country, city, preferred language and how you usually wear your hair (open, covered or both); the version, content digest and time at which you accepted this notice and the Terms of Use.
Photos: face photos our studio adds to your account for the colour analysis and previews; photos of the pieces you add to your wardrobe.
Your colour profile: the season, colour features and palette our studio prepares.
Wardrobe and Looks: your pieces, their colours and names; the Looks you create (including, for each Look, whether your hair is open or covered), your favourites; previews approved by the studio.
Feedback: the notes you write to us, your optional 1–5 rating and the screen you wrote from.
Security and operation: session details, recognised-device information, sign-in attempts, processing and error records. Your IP address is used to limit misuse.

3. Why we use it

To open your account, recognise you and let you sign in securely.
To prepare your colour profile, organise your wardrobe and prepare Looks and previews.
To offer the service in your language using your country, city and language, and to understand how the pilot is used in different regions.
To use your hair preference to decide in which context your new Looks start and which options are shown first.
To improve the service with your feedback.
To protect your account and prevent misuse.
To meet our legal obligations.

4. Your hair preference

At your first sign-in we ask whether you usually wear your hair open, covered or both. This is only a styling preference: it decides in which context your new Looks start and which options are shown first.

It is not asked or used as information about religion, origin or identity. It is never derived from your country or language; it is only your own answer. You can change it at any time in your Profile; changing it does not change your existing Looks or approved previews.

We do not share this preference with advertising or analytics services.

5. Photos and appearance analysis

Our studio carries out the colour analysis and an expert reviews the result; the approved result is added to your colour profile. If AI services are used in the analysis, section 6 applies.

Our studio adds your face photo to your account; we agree with you during the invitation how you send it to us. You add photos of your pieces yourself in the app.

Your photos are stored on our server, in a private area of your account only. Information embedded in a photo, such as location (GPS) and device details, is removed before the photo is stored.

Previews (the pieces you chose shown on your photo) and compatibility suggestions are produced on our own server, without being sent to an outside AI service. Our studio reviews every preview before you see it.

We do not use your photos to identify you or for face recognition; they are used only for colour and style assessment.

We do not use your photos for promotion, social media or as sample work. Such use would only be possible if we later asked for, and you gave, your separate and explicit permission.

6. AI and outside service providers

The Maison Raqiya app itself (your account, wardrobe, Looks, previews and feedback) does not call any AI service.

When AI services are used in the colour analysis, our studio sends your face photos that are usable for the analysis to Google's Gemini service through its paid API. If Gemini's assessment is inconsistent or unclear across the photos, only one of your photos may be sent to OpenAI for a second opinion; this does not happen in every analysis and happens at most once per analysis. You do not receive the result before an expert in our studio has reviewed it.

These providers process the photos under their own terms. Under their current terms, data sent through their paid APIs is not used to train their models; to prevent misuse, Google may keep it for up to 55 days and OpenAI for up to 30 days. These periods are the providers' terms, not ours, and may change.

7. Feedback

You can write short notes to us with the "Send feedback" link in the app. Your note, your optional rating and the screen you wrote from are stored in your account and read only by our studio.

We use feedback to improve the service. It is not sent by e-mail and not shared with advertising or analytics services. It is deleted together with your account.

8. Cookies and sessions

We use only cookies that the service needs to work and to stay secure: a session cookie, a recognised-device cookie and your language preference.

Your session lasts at most 12 hours and ends earlier after 2 hours without activity. The recognised-device cookie shows that you have signed in from this browser before and is kept for 90 days. The language preference is kept for 1 year.

We do not use cookies or tracking tools for advertising, marketing or analytics, so we do not ask for cookie consent.

10. International transfers

Our server is in Germany. Some of our providers may also process data outside Türkiye and the European Economic Area, for example in the United States (Cloudflare, Google, OpenAI).

11. Retention

Your account, first sign-in details, hair preference, photos, colour profile, wardrobe, Looks, previews and feedback are kept while your account is open.

Data you ask us to delete is removed from our active systems. It may remain for a while in the encrypted backups kept for security and disaster recovery: the backups on our server are kept as the last few copies only, and the encrypted off-server backups are kept for at most 30 days. Backups are not restored for normal use.

Processing and error records are kept so that the service runs and stays secure. They may contain your account's internal number; they contain no photos, passwords or free text.

12. Your rights and requests

Depending on where you live and the applicable law (for example KVKK in Türkiye, the GDPR in Europe), you may have the right to:

know whether your data is processed and ask for a copy,
have incorrect data corrected (you can also change your country, city, language and hair preference yourself in the app),
receive your data in a portable format,
ask for your data and your account to be deleted,
object to processing or ask for it to be restricted where the conditions are met,
object to a result against you that comes only from automated analysis (the colour analysis result is reviewed by an expert before you receive it),
claim compensation if you suffer damage from unlawful processing,
complain to us or to a data protection authority.
During the pilot there is no self-service export or account deletion button in the app. You can ask for a copy of your data or for the deletion of your account by writing to [email protected]; after confirming your identity, our studio carries out your request.
These rights are not absolute in every case; exceptions such as legal retention duties may apply.

13. Children

Maison Raqiya is only for people aged 18 or over. We send pilot invitations to adults only. If we learn that someone under 18 has an account, we close it.

14. Security

We take reasonable technical and organisational measures to protect your data: encrypted connections, passwords stored as irreversible digests, accounts kept separate from each other, access restrictions, removal of embedded information from photos and encrypted backups.

No system is entirely free of risk. If we become aware of a security incident, we act as the law requires.

15. Changes

We may update this notice. When we publish a new version, we tell you at your next sign-in to the app and ask you to confirm the new version. The version and date are shown at the top of this page.

16. Contact

Uğur Arı — Evliya Çelebi Mahallesi, Hızırreis Caddesi, Ecehan Sokak, No: 15 D: 3, Tuzla, İstanbul, Türkiye

E-mail: [email protected]