Effective Date: 02.04.2026
SO-ME App Ltd ("SO-ME", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use the SO-ME app and website (the "Service"). We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The data controller responsible for your personal data is:
We collect the following categories of personal data:
When you create an account, we collect your name, email address, and authentication details (via email or Google OAuth). If you sign in with Google, we receive your Google profile name and email address.
During onboarding and use of the Service, we collect your style preferences, gender preferences, budget ranges, preferred clothing categories, and condition preferences (new, preloved, or both).
We collect data about how you interact with the Service, including products you view, save to favourites, swipe on, search queries, chat conversations with our AI stylist, and pages you visit.
We automatically collect your IP address, browser type, device type, operating system, referring URLs, and session information through cookies and similar technologies. Your IP address and browser User-Agent string are stored in your session record when you sign in.
If you upload images to our AI stylist chat for visual search or style matching, we process those images to provide recommendations. Uploaded images are not retained beyond the session unless you explicitly save them.
We use your personal data for the following purposes:
Our AI stylist uses your style preferences, browsing history, saved items, swipe data, and chat interactions to generate personalised product recommendations. This processing is based on your consent and our legitimate interest in providing a personalised shopping experience.
AI recommendations are generated in real time and are not used to make automated decisions that have legal or similarly significant effects on you. You can reset your style preferences or delete your interaction history at any time through your profile settings.
We process your personal data on the following legal bases under the UK GDPR:
We use cookies and similar technologies to operate the Service, remember your preferences, and analyse usage. For full details on the cookies we use, how to manage them, and your choices, please see our Cookies Policy.
Our session cookies are set on the .so-me-app.com domain, which means they are shared across our subdomains (auth.so-me-app.com, shop.so-me-app.com, and admin.so-me-app.com). This allows you to remain signed in as you move between different parts of the Service without needing to re-authenticate.
We share your personal data with the following categories of third parties:
We do not sell your personal data to third parties. We only share data as described above and where necessary to operate the Service.
Your data is primarily stored and processed in the United Kingdom. Where data is transferred outside the UK (for example, to Google or AWS services), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognised by the UK Government.
We retain your personal data for as long as necessary to fulfil the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Account information | Until you delete your account |
| Style preferences and onboarding data | Until you delete your account or reset preferences |
| Browsing and interaction data (page views) | 90 days from collection (automatically cleaned) |
| Session records (including IP address and User-Agent) | Until session expires (automatically cleaned up by our data retention process) |
| AI chat conversations | Until you delete your account |
| Uploaded images | Stored temporarily until account deletion |
| Analytics data | 14 months (configured in Google Analytics) |
| Cookie data | See our Cookies Policy |
When data is no longer needed, it is securely deleted or anonymised. We may retain anonymised, aggregated data indefinitely for analytical purposes.
You have the following rights in relation to your personal data:
To exercise any of these rights, please contact us at hello@so-me-app.com. We will respond within one month of receiving your request, as required by law.
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/SSL), secure credential storage via AWS Secrets Manager, access controls, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
The Service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will take steps to delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes via email or an in-app notification. The "Effective Date" at the top of this page indicates the most recent revision.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
If you have any questions about this Privacy Policy or your personal data, contact: