Privacy Policy

The data controller of the service is ALICECO AI YAZILIM TEKNOLOJİ TİCARET LİMİTED ŞİRKETİ ("Aliceco" / "Rated."), a company registered in Türkiye. Address: Mustafa Kemal Mah. 2127 Cad. No: 21 B İç Kapı No: 1 Çankaya/Ankara, Türkiye. Tax Office: Maltepe, Tax ID: 0511243331. Contact: +90 533 959 83 44 — admin@aliceco.com.tr.

We process personal data in the following categories to provide the service:

• Account info: email address, password hash, date of birth, language preference.
• Selfie images: photos you upload for face analysis (stored in your user folder in Supabase Storage).
• Analysis outputs: face analysis, character readings, mood readings, and aesthetic recommendations generated by AI.
• Usage data: routine check-ins, streak data, push subscription information (device endpoint).
• Technical data: IP address, browser info, device language, session identifiers.

We process your data to (i) provide and improve the service (contractual necessity — GDPR Art. 6(1)(b)), (ii) comply with legal obligations (Art. 6(1)(c)), (iii) generate analyses and character readings based on your explicit consent (Art. 6(1)(a), Art. 9(2)(a)). Processing of facial images is special-category data under GDPR Art. 9 and relies on your explicit consent.

We use the following sub-processors. Each has signed a Data Processing Agreement:

• Supabase Inc. (USA) — authentication, database, file storage. Adequacy via EU-US Data Privacy Framework.
• AI infrastructure provider (USA) — face analysis, character readings, mood readings. Images not retained after processing.
• Kie.ai — AI-assisted simulation image generation (only when explicitly requested).
• Vercel Inc. (USA) — application hosting infrastructure.

Account information and analysis outputs are retained as long as the account is active. When you delete your account, all personal data is permanently removed from our servers within 30 days and from backups within 90 days. Data we are legally required to keep (e.g. invoices) is retained for 5 years per applicable tax laws.

Under GDPR Art. 15-22 (and equivalent regimes): you have the right to access, rectify, erase, restrict processing, data portability, and object to processing. The right to object to automated decision-making is preserved. Exercise these rights via admin@aliceco.com.tr, response within 30 days. You may file a complaint with your local data protection authority.

The service is not intended for children under 13. Users aged 13-17 require parental/guardian consent. Aesthetic recommendations are not provided to users under 18, and all content is age-appropriate.

Material changes to this policy will be announced via email or in-app notification. The current version is always available at /legal/privacy.