Last updated: 29 June 2026
Informal translation. Only the French version is legally binding. In the event of any discrepancy between the two, the French text prevails.
This policy describes how Dripzy processes the personal data of users of the Dripzy mobile application (the "Service") — a fashion social network where posts are surfaced according to each person's clothing size. It supplements the Terms of Use.
The data controller is:
Dripzy (a company in the process of incorporation, based in Basel, Switzerland) — dripzy@dripzy.io
Website: dripzy.io
We process your data in accordance with the Swiss Federal Act on Data Protection (revFADP) and, for users located in the European Economic Area, with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679). As Switzerland benefits from an adequacy decision of the European Commission, transfers of data from the EEA to Switzerland enjoy a level of protection recognised as adequate.
As Dripzy is a social network, some of the data is provided by you and, for published content, visible to other users. We collect no more than what is necessary for the Service to work.
| Data category | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account: email, password (hashed), date of birth, handle, display name | Creating and managing the account, signing in, verifying the minimum age | Performance of the contract (Terms) | Lifetime of the account, then deletion |
| Profile: profile picture, banner, bio, measurements / sizes (top, bottom), stated location, badges | Displaying your profile and filtering/surfacing posts by size (the core function of the Service) | Performance of the contract | Lifetime of the account |
| Published content: outfit photos, captions, hashtags, product/brand tags | Publishing and displaying your content in the feed and on your profile | Performance of the contract | Until deleted by you, or until the account is deleted |
| Social activity: follows, likes, saves, shares, comments | Operating the social graph, feed ranking and interactions | Performance of the contract | Lifetime of the account, or until the interaction is withdrawn |
| Messaging: private and group messages, shared photos and GIFs, read receipts | Enabling conversations between users | Performance of the contract | Until the message/conversation or the account is deleted |
| Push notifications: device token | Sending notifications (messages, mentions, activity) | Consent (system permission) / legitimate interest | Until the permission is withdrawn or the account is deleted |
| Moderation: reports made/received, blocks | Community safety, handling abuse, legal obligations | Legitimate interest / legal obligation | Up to 3 years after processing |
| Technical & diagnostic data: IP address, device identifiers, logs, crash reports | Security, fraud prevention, stability and improvement of the application | Legitimate interest | 90 days (logs); crash reports: up to 90 days |
| Product analytics: usage events (e.g. sign-up, post) — upcoming | Understanding usage and improving the product (aggregated statistics) | Consent / legitimate interest | Up to 14 months |
We do not collect payment data in the application (any purchases take place on third-party merchant sites, under their own terms). We do not carry out any targeted advertising based on your data.
To provide the Service, we use suppliers (processors within the meaning of the GDPR) who process data on our behalf, following our instructions. Any transfers outside the EU are governed by the European Commission's standard contractual clauses or an equivalent mechanism.
Your public content (posts, profile) is also visible to other users of the Service, in keeping with the social nature of the application. We do not sell any data to third parties.
Under the GDPR, you have the following rights:
The application lets you exercise two of these rights directly: deleting your account (Settings → Delete my account), which erases your data in accordance with this policy, and exporting your data (access / portability request from the settings). For any other request, write to us at dripzy@dripzy.io; we reply within one month at the latest.
You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland or, if you reside in the EU/EEA, with your national data protection authority (for example the CNIL in France).
The Service is reserved for people aged at least 16. We do not knowingly collect data concerning younger people. If you believe that someone under 16 is using the Service, contact us at dripzy@dripzy.io so that we can delete the account and the associated data.
We implement appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), hashed passwords, database-level access control (Row Level Security policies), restricted access and securely stored secrets. As no system is infallible, we cannot guarantee absolute security, but we strive to protect your information and to notify you of any breach likely to result in a high risk to your rights.
The mobile application does not use advertising cookies. For the use of cookies on the dripzy.io website, see our Cookie Policy.
This policy may be updated. The date of the last change appears at the top of this page. In the event of a significant change, we will inform you by appropriate means (email and/or a notice in the application).