Nimbèa Privacy Policy
Last updated: 28 October 2026. This is a translation: the Italian version prevails.
This policy explains which personal data the Nimbèa app processes, why, who it is shared with and what your rights are, under Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003.
1. Data controller
Giulia Nigi
Email for privacy requests: privacy@nimbea.app
2. What data we process
Data you give us
Account: email address, password (stored encrypted by the authentication provider), or the basic data of your Google or Apple account if you sign in with them.
Profile: name or nickname, gender chosen for outfit suggestions, city, style preferences, dress codes (for example for work), language.
Wardrobe: photos of your pieces, descriptions, brand, colours, sizes, prices and other details you enter or that the app reads from the photos or from an online shop link.
Outfits, trips and calendar: saved looks, outfits worn, outfit photos, trips, destinations, activities, packing lists.
Avatar and virtual try-on: if you use the feature, the body and face photos you upload and the images generated.
Voice messages and Stylist chat: the text and, if you use your voice, the audio recording, only to transcribe it.
Reports: the text and screen you send when you report a problem.
Data collected with your permission
Location: the device location, only if you allow it, to know the weather and your city. No movement history is kept.
Calendar: if you connect Google Calendar, Outlook or iCloud, we read your events to suggest outfits suited to your plans.
Notifications: a device identifier to send you push notifications.
Technical data
Screens visited, app opens, technical errors, device type and app version, to run the app, fix errors and understand which features are used.
A log of the use of AI features (which feature, when, estimated cost), to manage plan limits and costs.
The date and version of the privacy policy and terms you accepted, to prove your acceptance.
Purchases
Today the app is free and processes no payment data. If paid plans become available in the future, this policy will be updated before they go live.
3. Why we process it and on what legal basis
Create and manage your account, save wardrobe, outfits, trips and preferences · Performance of a contract (art. 6.1.b GDPR): the app's terms of use
Suggest outfits, combinations, piece analysis, purchase advice, packing lists with artificial intelligence · Performance of a contract
Weather and city from your location · Consent (art. 6.1.a), which you can withdraw in your device settings
Reading your calendar · Consent, withdrawn by disconnecting the calendar
Virtual try-on on the avatar with body and face photos · Explicit consent, withdrawn by deleting the avatar
Push notifications · Consent, withdrawn in settings
Shared library (making the product photos of your pieces visible to other users) · Consent, switched on and off in Settings › Privacy
Usage statistics, technical errors, security and abuse prevention · Legitimate interest (art. 6.1.f) in running and improving the app
Answering reports and requests · Performance of a contract and legitimate interest
Anonymous, aggregated statistics on pieces, brands, styles and prices, which we may share with brands, shops and resale sites · Legitimate interest; you can object in Settings › Privacy
Nimbèa news and offers by email · Optional consent, withdrawn in Settings › Privacy
Sharing your style data with selected partners (shops and resale sites) for personalised offers · Optional, separate consent, withdrawn in Settings › Privacy
Body and face photos are used only to generate the virtual try-on images. We do not use them to recognise or identify you.
4. Your optional choices
Beyond what is needed to run the app, you decide, separately and at any time in Settings › Privacy:
News and offers by email: we write to you about new features, tips and Nimbèa offers. Off until you switch it on.
Partner offers: we share with selected partners (shops and resale sites) your style preferences, sizes, favourite brands and the pieces you choose, so they can offer you deals or services that suit you. We never share face or body photos, your email or your password. Off until you switch it on; before adding a new kind of partner we will update this policy.
Anonymous statistics: we use aggregated data that cannot be traced back to you (for example which brands or styles are most common and at what prices they resell) to improve the app, and we may share it with brands, shops and resale sites. You can ask for your data to be left out.
Saying no to these choices does not limit your use of the app in any way.
Affiliate links: some links to shops or resale sites may earn us a commission if you buy something. The shop only learns that you came from Nimbèa, not your personal data.
5. Who we share data with
We do not sell your data or use it for advertising. We share it only with providers needed to run the app, which process it on our behalf as data processors:
hosting, database and photo storage;
artificial intelligence to analyse photos and suggest outfits and advice;
weather and maps;
sign-in with external accounts and calendar, only if you connect them;
sending emails and notifications.
We share data with commercial partners only if you chose to (section 4). The list of providers is available on request at the address in section 1.
Some providers are located outside the European Union, for example in the United States: the transfer relies on the European Commission's adequacy decisions or on the standard contractual clauses provided by the GDPR.
6. How long we keep it
Account and content (wardrobe, outfits, trips, avatar): as long as you keep your account. When you delete it, we delete your data and photos.
Voice recordings: not kept; used only for transcription.
Technical data and errors: up to 12 months.
Reports: up to 24 months after closing.
Longer only where the law requires it.
7. Your rights
At any time you can ask to:
access your data and receive a copy;
correct it;
delete it;
restrict its processing;
receive it in a readable format (portability);
object to processing based on legitimate interest;
withdraw consent, without affecting processing already carried out.
You can delete your account and all your data from Settings in the app. For other requests write to privacy@nimbea.app: we reply within 30 days.
If you believe the processing breaks the law you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country.
8. Minimum age
Nimbèa is meant for people aged at least 14. Under 14, in Italy, the consent of a parent or guardian is required.
9. Cookies and device storage
The app only uses the local browser or device storage it needs to work: keeping you signed in, remembering your language and preferences, loading images faster. We use no advertising cookies or third-party tracking tools.
10. Security
Data travels over encrypted connections (HTTPS). Each user sees only their own data, protected by access rules in the database. Private photos are reachable only through temporary links.
11. Changes
If we change this policy we update the date at the top. If the changes are important we tell you in the app and may ask you to accept them again.