Privacy Policy

1. Who We Are

Svolta is operated by Palma Wilson Ltd, a company registered in England and Wales.

Data Controller contact: ciao@svolta.app

2. Your Photos Are Private

Svolta processes all photos entirely within your browser. Your photos are never uploaded to our servers, never stored in the cloud, and never shared with third parties. AI pose detection runs locally using MediaPipe. We have no access to the images you work with.

3. Information We Collect

We collect the following data when you create an account or use Svolta:

• Account data: Email address and authentication tokens (via Supabase Auth). If you sign in with Google or Apple, we receive your email and display name from those providers.
• Usage data: Number of exports per month (used to enforce free plan limits). We do not record what you export or which photos you use.
• Technical data: IP address, browser type, and device type — collected automatically by our hosting provider (Vercel) for security and performance purposes.
• Payment data: Billing is handled entirely by Stripe. We never see or store your card details. Stripe may store payment data in accordance with their own privacy policy.

4. How We Use Your Information

• To provide and maintain your Svolta account
• To track your monthly export usage and enforce plan limits
• To process subscription payments via Stripe
• To respond to support enquiries
• To improve the service (aggregated, anonymised analytics only)
• To send transactional emails (e.g. magic link sign-in, receipt emails)

We do not sell your data. We do not use your data for advertising.

5. Cookies

We use essential cookies to keep you signed in and maintain your session. We may use analytics cookies to understand how Svolta is used in aggregate. See our Cookie Policy for full details.

6. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Supabase — authentication and database (EU data region)
• Stripe — payment processing
• Vercel — hosting and CDN
• Resend — transactional email delivery

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days. Export usage records are reset monthly and are not retained beyond the current billing period.

8. Your Rights (GDPR)

If you are in the UK or EEA, you have the following rights:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — request deletion of your account and data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, email ciao@svolta.app. We will respond within 30 days.

9. Children's Privacy

Svolta is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by a prominent notice in the app. Continued use of Svolta after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests:

Palma Wilson Ltd
Email: ciao@svolta.app