Privacy Policy

Rita Kalnina, a UK sole trader trading as WithRita, is responsible for your personal information. Use the email or postal address shown on this page for privacy questions.

WithRita accounts and paid services are for adults aged 18 or over. Services will initially be offered in the United Kingdom and Latvia.

The information we need depends on what you choose. Required fields are marked on the form; without them we cannot provide that feature or service.

We use information to set up your account, take an order and supply your chosen service under our contract with you or to take steps you request before that contract. We rely on legitimate interests for security and proportionate service monitoring, and on legal obligations for payment and tax records. Optional news uses consent, which you can withdraw.

WithRita does not ask for medical information in general forms. Nutrition features are educational support, not diagnosis or treatment. If sensitive information is genuinely required for an individual service, we will explain why and ask for separate consent first.

WithRita does not make decisions based solely on automated processing that have legal or similarly significant effects on you. AI output is supporting information; Rita or you make the final decision for an individual service.

The WithRita Style app asks permission before sending data to OpenAI. Depending on the action, this includes selected garment or shop photos, item descriptions and relevant style preferences, colours and body proportions. OpenAI processes them for clothing recognition, outfit or shopping advice, or outfit visualisation. In app versions with AI data sharing settings, an optional, initially unchecked choice is offered at registration or before your first AI action. We store your choice, disclosure version and latest decision time on your account; it applies to these features until withdrawn in Your account → AI data sharing. A changed sharing scope requires new permission. Older app versions ask per action. You can decline and still register, save your questionnaire and use the manual wardrobe and saved outfits according to your access. Withdrawal stops future AI requests; it does not recall data already sent or delete saved results. Merely uploading a wardrobe photo does not send it to OpenAI. WithRita does not send your login password or payment card data to OpenAI. AI output can be inaccurate and is not an exact virtual fitting.

Relevant Style AI context may also include wardrobe notes, the outfit occasion, previous shopping assessments and questionnaire details such as lifestyle needs, fit preferences, height and age group, if provided. Only the context needed for the requested feature is included; saving questionnaire photos or videos does not automatically send them to OpenAI.

RevenueCat helps verify Apple in-app purchases using a pseudonymous WithRita account identifier and purchase/subscription information, so paid access can be restored and kept in sync. Apple processes the App Store transaction. We do not receive your full payment card details.

Style photos, PDFs and other personal material saved to your account are private. They are available only to you, Rita and the technical providers needed to run the feature. We do not use them in advertising without separate permission.

A meal or fridge photo is sent to OpenAI only to perform the analysis you request, using store: false, and is not saved to your WithRita account. OpenAI does not use API content to train models by default, although input may remain in standard safety logs for up to 30 days. AI can be wrong, so do not rely on it alone for medical or other important decisions.

‘My real week’ saves only your structured choices against the WithRita references — not meal photos, audio or free-text descriptions.

For a website purchase, you enter payment details in Stripe's payment environment. For an iOS in-app purchase, Apple handles payment through your Apple Account. WithRita and RevenueCat use transaction and subscription information to verify access; WithRita does not receive your full card number, CVC or Apple Account password.

Resend delivers account, password, payment and service emails. If you press a WhatsApp button, you open a conversation outside WithRita. If you submit a question or request in the website that needs Rita’s response, we may send Rita a short WhatsApp work alert containing only the request type, your first name and a link to Rita’s protected view — not the text or photos you submitted. The website does not receive or store the WhatsApp chat; WhatsApp/Meta processes messages in its own service.

If you choose to enable important notifications in the app, we save your device’s technical push identifier. Expo uses it to deliver a short alert through Apple’s or Google’s notification service, for example to say that Rita’s reply is ready. We do not put your photo, question text or other detailed private content in the notification. You can turn permission off in your device settings.

If you choose marketing emails, each one will include a way to unsubscribe. Essential account and purchase messages do not depend on marketing consent.

We do not sell your data. It is available to Rita and, only as needed, Railway (website, database and private storage), OpenAI (selected AI features), Stripe or app-store billing providers (payments), Resend (email), Expo and Apple/Google (app notifications you choose), and Meta/WhatsApp for chats you choose and minimal work alerts to Rita. We may also disclose information where the law requires it.

Some providers operate outside the UK or European Economic Area. Where required, we use the applicable adequacy decision or contractual transfer safeguards. Ask us by email if you would like more detail.

We delete or anonymise information when it is no longer needed. Our main periods are:

• meal and fridge analysis photos — not stored by WithRita;
• ‘My real week’ choices — 30 days after that week ends;
• an unfinished or unpaid application — 30 days;
• WithRita Style questionnaire, personal style foundation, its service brief and clarification correspondence, wardrobe and saved outfits — while you use your account, until you delete the relevant content or request account deletion, or the existing inactive-account deletion process applies; expiry of Monthly alone does not delete this content or start a 90-day deletion period;
• private content for other completed one-off services — 90 days after completion; the separate WithRita Style rule above applies to Style account content;
• personal subscription content outside the retained WithRita Style account content described above — during access and for 30 days afterwards;
• four-week plan intake and PDFs — during the service and access period, then for 30 more days;
• WhatsApp Business chats — during the personal conversation and for 30 days after the service ends, unless you continue the conversation or longer retention is needed for a dispute or legal obligation; chats are not copied into the WithRita website;
• the app notification device identifier — until you sign out of the app, the device reports that the identifier no longer works, or your account is deleted;
• an account with no active service or sign-in — 12 months; we send a warning 30 days before deletion;
• security and error logs — 30 days; user-level AI cost records — 90 days;
• payment and tax records — at least five years after the relevant UK tax return deadline, or longer if law requires;
• deleted data in backups — no more than 90 days after deletion from the live system.

Depending on the legal basis, you may ask for access, correction, deletion, restriction, portability, object to processing, or withdraw consent. You can always object to direct marketing.

You can create a data copy and request account deletion in your website profile, or email us. In the Style app, use Account > Request account deletion; we complete deletion of the account and private data within 30 calendar days and confirm it by email, retaining only legally required records. No additional email or wait until an Apple subscription expires is required. Account deletion does not cancel Apple billing: manage that separately in Apple Account subscriptions. We may verify your identity when needed. For other privacy requests we will usually respond within one month.

You may complain to the UK Information Commissioner’s Office (ICO), Latvia’s Data State Inspectorate, or the data protection authority in your EEA country.

We currently use only technologies needed for security, sign-in and remembering language or market choice. Analytics and advertising cookies are off. If that changes, we will ask before using optional cookies.

We will update this policy if the service or our use of information changes. The current date and version will always appear above, and we will give active clients reasonable notice of a significant change.

If you would like a more detailed explanation about a particular use of your information, email us. We will explain it in plain language and address your situation.