DEMO · no real payments
Draft to be validated by a lawyerThis page describes what we do today, during the test phase. It isn't final yet: a consultant is reviewing it.

Privacy

What we collect, why, who sees it and how long we keep it. In short: the quiz and the suitcase card stay on your phone; for Edit and Travel Edit we ask only for what's needed.

Last updated: 2026-10-10

01Who processes your data

Data controller: being defined. Contact: reply to one of our emails.

02Quiz and suitcase card

Your answers stay on your phone: the card is made in the browser and we don't send it to any server. We only count anonymous totals (e.g. “quizzes completed today”), with no cookies, identifiers or IP addresses stored.

03Optional email

If you leave your email after a card, we use it only to write to you about Idhon, after you confirm. You can stop whenever you like; we keep it until you unsubscribe.

05Why and on what basis

To prepare and deliver the service you ask for (performance of a contract), with your explicit consent for the photos; for anonymous totals, legitimate interest in knowing whether the service works. The consultant confirms the final legal basis.

06Who sees the photos

The photos are read by a third-party artificial intelligence service (we'll name it here before Edit opens), which helps us recognise the pieces; a person always checks the result before it's sent. Photos never end up on the website or on the cards, and we don't use them to train models.

07Providers

Railway (website and database; server logs, with IP addresses, are kept for 90 days and can't be shortened; processing also happens in the United States with the required safeguards) · Cloudflare R2 (photo storage) · Stripe (payments, once active: Idhon never sees your card number) · email service (being defined). We sign a data processing agreement with each one before opening the service.

08How long we keep it

Photos and crops of your clothes: deleted 14 days after delivery (this covers the touch-up). Unpaid requests: deleted after 7 days. The private result link works for 90 days. Payment data: as long as Stripe's and tax obligations require. Anonymous totals: as long as useful.

09Cookies

Technical cookies only: one to remember the request you're filling in (sig_req, 30 days) and, for the panel of whoever works on requests, session cookies. No advertising cookies, pixels or profiling.

10Your rights

You can ask to see, correct, delete or take away your data, or object to processing, by replying to one of our emails or writing to reply to one of our emails. You can also complain to the Italian data protection authority (Garante per la protezione dei dati personali).

11Adults only

The service is for people aged 18 or over. Photos with minors, nudity or other people are refused.

12What we don't do

No selling data, no advertising profiling, no using your photos as examples without your consent (optional and never pre-ticked).