AI Data Processing

Core rule

MedaStaré will not send personal data to an external AI provider for a qualifying feature until the app identifies the data, the purpose and the provider and obtains the required explicit permission. Choosing Not Now cancels that AI request without blocking unrelated functions.

1. Features covered

This Notice applies to external or internal AI processing used by MedAI, Closeté, MedaVision, EraFusion, FashionStare, MedaBody AI, StyleTrack, MuseMatch, MedaStaré Edit, MedArena and future features that link to this Notice. Not every feature uses an external provider and not every provider receives the same data.

2. Data that may be processed

Feature type	Possible input	Purpose
Conversational assistance	Prompt, selected history and preferences	Answer the user request and maintain requested context.
Outfit and wardrobe intelligence	Wardrobe items, notes, preferences, occasion and optional media	Create combinations, organization and style guidance.
Visual analysis	Selected photo or video and related instructions	Analyze garments, appearance, proportions or visual details requested by the user.
Visual generation	Prompt, optional reference media and selected preferences	Create or edit an image or video requested by the user.
Beauty appearance guidance	Selected image and voluntary appearance concerns	Provide cosmetic appearance observations and general care guidance, not medical advice.
Body aware styling	Selected image, measurements or proportions voluntarily provided	Suggest silhouettes, harmony and fit direction.
Voice features	Voice audio and transcript where enabled	Transcribe input and generate the requested response.
Safety and quality	Limited request and output information	Detect abuse, investigate failures and provide support according to access controls.

3. AI providers

The exact provider used for a request is shown in the application before a qualifying transfer. Depending on the feature and current configuration, providers may include OpenAI, Google Gemini, Kling AI or another provider listed on the Subprocessors page. A provider that is not active for the request is not shown as the recipient of that request.

Provider information may change when MedaStaré replaces a model or routing service. A new provider, new data category or materially different purpose requires an updated notice and renewed consent where required.

5. Model training and provider use

MedaStaré policy is not to authorize an AI provider to use private user content for general model training unless the user receives a separate, affirmative choice and the feature notice clearly states that purpose.

Whether a provider technically retains API data or uses it for service improvement depends on the active provider, product plan and contract. MedaStaré does not publish a blanket provider training claim that is not supported by the current contract. The in app notice and Subprocessors page are updated to reflect the active configuration.

MedaStaré may use aggregated or irreversibly anonymized information to understand system performance, provided it cannot reasonably be connected back to a user.

6. Retention and temporary files

MedaStaré keeps temporary processing copies only for the period reasonably needed to complete the request, secure the Service and handle failures.
Saved chats, outputs or wardrobe results remain according to the user account settings until deleted or the account is deleted.
Provider retention follows the active provider contract and is disclosed before the transfer where relevant.
Backups rotate according to the security schedule and are not used for ordinary feature processing.
Content subject to a legal preservation duty may be retained only for that duty.

7. Human access

AI requests are not routinely read by employees. Limited access may occur for support requested by the user, safety review, abuse investigation, incident response, debugging with user permission, quality evaluation using minimized data, or legal compliance. Access is limited by role, logged where appropriate and subject to confidentiality duties.

8. Withdrawal and deletion

Users may withdraw optional AI consent in the app under Privacy and Legal. Withdrawal stops future covered transfers. Features that require an external provider may stop working, but unrelated features remain available.

Withdrawal does not delete earlier outputs automatically. Users may delete saved content separately or request account deletion. Where technically and contractually available, MedaStaré will transmit deletion requests to a provider or remove provider stored data connected with the user request.

9. Output limitations

Outputs are generated predictions, not verified facts.
Outputs may be inaccurate, biased, offensive, incomplete or unsuitable.
Outputs may resemble content generated for another user and may not be unique.
Users must check rights, safety, accuracy and suitability before public, professional or commercial use.
MedaStaré may refuse or modify a request for safety, rights protection or legal compliance.

10. MedaBeaute and appearance guidance

MedaStaré beauty related functions provide cosmetic appearance observations and general beauty guidance. They do not diagnose disease, assess medical risk, prescribe treatment or replace a qualified professional. Do not use the Service for emergencies or medical decisions.

11. Security

Selected media is transmitted over encrypted connections and should be stored in private systems with access controls and short lived links. Secret AI provider credentials must remain on the backend and must not be embedded in the mobile application. MedaStaré limits logging so that prompts, images and tokens are not written to ordinary production logs.

12. Questions

Questions about AI processing or consent may be sent to support@medastare.com.