Privacy Policy
Last updated: October 19, 2026
1. Who We Are
Tryvio is a virtual try-on application for Shopify stores, operated by MiYoMi OOD (МиЙоМи ООД), UIC BG207348449, 26 Yantra St, Golyamo Vranovo, Slivo Pole, Ruse Region, Bulgaria. This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with our services — as a merchant (a Shopify store owner) or as a shopper (a visitor who uses the try-on widget).
Our role. When you use the try-on on a store's website, the store decides to offer it and we carry it out on the store's behalf. For your photo, your result and your email address the store is the controller and MiYoMi OOD is its processor (in US terms, its service provider). For the account and billing data of store owners who use our app, and for visitors to tryvio.ai, MiYoMi OOD is the controller.
For questions or to exercise your rights: tryvioai@gmail.com
2. Data We Collect
From Shoppers (widget users)
| Data | Purpose | Legal Basis |
|---|---|---|
| Uploaded photos | Virtual try-on generation | Consent, given on the try-on screen |
| Hand measurements (ring try-ons only) | Drawing the ring on the right finger; discarded within seconds, never saved | Consent |
| Generated try-on images | Displaying, sending and sharing your result | Consent |
| Record that you agreed (date, store, version of the text) | Proof of your consent | Legitimate interest |
| Email address | Optional — only if submitted via email capture form | Consent |
| Anonymous session ID | Analytics, fraud prevention | Legitimate interest |
| Shopify Customer ID | Linking try-on to customer account (only if logged in) | Legitimate interest |
We do not collect names, addresses, payment data, or any other data from your Shopify account.
From Merchants (Shopify store owners)
| Data | Purpose |
|---|---|
| Store domain | App functionality |
| Shopify access token | Making API calls on your behalf |
| Product catalog | Populating the try-on widget |
| Analytics events | Merchant dashboard metrics |
| Subscription plan & usage counters | Billing management (plan tier, try-ons used, overage) |
We do not collect or store credit card numbers or any payment instrument data. All payments are processed exclusively by Shopify through the Shopify Billing API. See our Terms of Service for billing details.
3. How We Process Photos
When a shopper uploads a photo:
- The photo passes through our servers in the United States (Vercel) and is stored in our private cloud storage in the European Union (Supabase, Ireland).
- It is sent to one of our AI providers in the United States (KIE.AI or FAL), which creates the try-on image. For ring try-ons we first locate your hand in the photo so that the ring is drawn on the right finger; those measurements are discarded within seconds and are never saved.
- The generated image is saved back to our storage.
- The uploaded photo is deleted within 7 days and the generated image within 30 days.
We do not use shopper photos for AI model training, we do not create a faceprint or any other identifier from them, and we never use them to identify anyone. We may look at a small number of photos and results, before they are deleted, to find and fix errors in how results are created.
AI-generated images. Every try-on result is generated by AI. It is a preview of how a product may look, not a photograph of you wearing it, and it may differ from the real product in fit, size, colour and detail.
Age. The try-on is for people aged 14 or older. We do not knowingly collect a photo of anyone younger. Stores may not offer the try-on on websites directed to children.
The full schedule, and how photos are destroyed, is in our Photo and Biometric Data Policy. The terms a shopper accepts with the try-on are the Try-On Terms.
4. Third-Party Sub-Processors
| Processor | Purpose | Data Shared | Where · Their Retention |
|---|---|---|---|
| KIE.AI (NEXUSAI SERVICES LLC) | AI try-on generation | Shopper photos, product images | United States · uploaded photos 24 hours, results 14 days, request logs 2 months |
| FAL (Features & Labels Inc.) | AI try-on generation | Shopper photos, product images | United States · request data 30 days; no fixed period published for the images it stores |
| Anthropic PBC | Helps us check the quality of results | A shopper photo and its result, when that result is reviewed | United States · per Anthropic's commercial terms |
| Supabase Pte. Ltd | Database and file storage | All app data | European Union (Ireland) · per our retention policy below |
| Vercel Inc. | Hosting — runs our servers | All app traffic, including shopper photos in transit | United States · not stored |
| Resend | Sends our emails | Email addresses and email content | United States · per Resend's Privacy Policy |
| Shopify | E-commerce platform | Standard OAuth data | Per Shopify's Privacy Policy |
| The store's email tool (Klaviyo), if the store connects it | Sends the store's emails | A shopper's email address and result, with the shopper's consent | Per the store's own policy |
| Google Ireland Limited (Google Analytics) | Visitor analytics on tryvio.ai — only with your consent | Pages viewed, device, approximate location | At most 14 months |
| Meta Platforms Ireland Limited (Meta pixel) | Ad measurement and audiences — only with your consent | Pages viewed and actions on the site | Per Meta's Privacy Policy; audiences at most 180 days |
We do not sell personal data, and we do not share it for advertising aimed at shoppers.
Transfers outside the EU and the UK. Creating a try-on image means sending the photo to the United States — to our servers and to an AI provider, as the table shows. For a shopper's photo this happens only after the shopper has agreed to it on the try-on screen, and we send only what the image needs.
Shopify Partner API. When a store installs Tryvio, we ask Shopify's Partner API whether that shop has installed our app before. We read only the install events Shopify records for our own app, we store nothing new from that read, and we use the answer for one purpose: to apply the "one free trial per store" rule in our Terms.
5. Cookies and Analytics on tryvio.ai
This section is about our website, tryvio.ai — not the try-on widget in our merchants' stores, which never loads these tools.
The cookies the site needs to work are always set. Analytics and marketing cookies are set only if you accept them in the cookie banner; until then Google and Meta receive nothing from the site. You can change or withdraw your choice at any time with Cookie settings at the bottom of every page — withdrawing deletes their cookies from your browser.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
tryvio-site-locale | Tryvio | Remembers the language you picked (necessary) | 1 year |
ttn_consent | Tryvio | Remembers your cookie choice (necessary) | 6 months |
ttn_attr | Tryvio | Only after you follow a link from one of our emails or partners: which link led to an app install | 30 days |
_ga, _ga_* | Google Analytics — only with your consent to analytics | Counts visits, which pages and languages are read, and whether visitors go on to our Shopify App Store listing | 13 months |
_fbp, _fbc | Meta pixel — only with your consent to marketing | Measures our ads and builds audiences of site visitors to show them to | 90 days |
We also keep a few settings in your browser's local storage — for example that you closed our offer pop-up. They never leave your device.
Google Analytics
Google Ireland Limited processes the analytics data on our behalf, as our processor. It sees the pages you view, your approximate location, your device and browser, and the buttons you use (for example “Install on Shopify”); Google Analytics 4 does not store IP addresses. User- and event-level data is kept for at most 14 months. Legal basis: your consent (Art. 6(1)(a) GDPR). Google may transfer data to Google LLC in the United States under the EU–US Data Privacy Framework.
Meta pixel
For the pixel, we and Meta Platforms Ireland Limited are joint controllers for collecting the data and sending it to Meta, under Meta's Controller Addendum; what Meta does with it afterwards is governed by Meta's Privacy Policy. The pixel sees the pages you view and what you do on them (viewing pricing, clicking install, sending a contact form), which lets us measure our ads and show them to people who visited. Audiences built from site visits keep a visitor for at most 180 days. Legal basis: your consent (Art. 6(1)(a) GDPR). Meta may transfer data to Meta Platforms, Inc. in the United States under the EU–US Data Privacy Framework.
Besides Cookie settings, you can also opt out with Google's browser add-on and in your Meta ad preferences.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Shopper uploaded photos | Up to 7 days, then permanently deleted |
| Hand measurements (ring try-ons) | A few seconds; never saved |
| Generated try-on images | Up to 30 days, then permanently deleted |
| Record that a shopper agreed | Up to 5 years |
| Email addresses | Until deletion request |
| Analytics events | While the store uses the app; deleted with the store's data |
| Merchant store data | While app is installed + 30 days after uninstall |
| Shopify access tokens | Deleted immediately on app uninstall |
7. Your Rights
Wherever you live, you may ask what we hold about you, ask for a copy, ask us to delete or correct it, and withdraw an agreement you gave. We do not charge for this and we never treat you differently for asking. If we refuse a request you may ask us to review the refusal.
Shoppers. To have a try-on photo or result deleted before its scheduled date, tell us the store and the date and time of your try-on, or send the link to your result, so that we can find it. You may also ask the store.
If you are in the European Economic Area (EEA) or the United Kingdom, the GDPR gives you the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your personal data.
- Restriction — ask us to restrict how we process your data.
- Data Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
To exercise any right, email tryvioai@gmail.com with your email address or store name and the specific request. We will respond within 30 days.
8. Security
- All data is transmitted over HTTPS/TLS.
- Shopper photos are kept in private storage and are reached only through short-lived signed links. A try-on result is reached through a direct link, so that it can be shown, sent and shared; anyone who has that link can open the image until it is deleted. A copy made for sharing is kept for up to 30 days after it is made, then deleted.
- Access tokens are encrypted at rest.
- We comply with Shopify's API security requirements.
9. Changes to This Policy
We will update the "Last updated" date at the top when our practices change. Continued use of the app after changes constitutes acceptance of the updated policy.
10. Contact
Tryvio Privacy
Email: tryvioai@gmail.com
You may also contact your local data protection authority if you have an unresolved complaint; ours is the Bulgarian Commission for Personal Data Protection.
11. Notice for US Residents
MiYoMi OOD is below the size thresholds of the California, Virginia and similar state privacy laws, but we give every US resident the notice and the rights below.
What we collect, and why. When you use the try-on we collect: your photo and the image generated from it (visual information); for ring try-ons, a momentary measurement of your hand; a random identifier stored in your browser; a record that you agreed; and your email address if you give it. We use them only to create and show your try-on, to send it if you ask, to find and fix errors in how results are created, to keep the service secure and to prove that you agreed.
Sensitive information. Some states treat a photo used this way, or a measurement taken from it, as biometric or sensitive information. We collect it only with your consent, use it only for the purposes above, and do not use it to infer anything about you.
How long. As set out in our Photo and Biometric Data Policy: your photo up to 7 days, your result up to 30 days.
No sale, no sharing. We do not sell your personal information and do not share it for cross-context behavioural advertising. We have not done so in the past twelve months.
Our role. We act as a service provider, or processor, for the store. We do not keep, use or disclose your information for any purpose other than providing the try-on to that store, as this policy describes.
Your rights. You may ask to know what we hold, to receive a copy, to correct it, to delete it, and to appeal a refusal. Write to tryvioai@gmail.com. We answer within 30 days and do not discriminate against anyone for using these rights. You may use an authorised agent; we will ask for proof of their authority.
Illinois, Texas and Colorado. Our Photo and Biometric Data Policy is the written retention and destruction policy those laws require.
Washington and Nevada. See our Consumer Health Data Privacy Policy.