EFFECTIVE DATE: 11 AUGUST 2026 · PRIVACY CONTACT: privacy@ukti.io

Privacy Policy

This policy covers both ukti.io and the Ukti app. The two surfaces behave very differently, and that distinction matters throughout this policy.

ukti.io is a static editorial surface — it stores no email, no account, no cookie beyond what is strictly necessary for the page to render. When you tap the App Store or Google Play link, you leave ukti.io and the destination store's own privacy terms govern from that point.

Ukti is a product of Slickalgo Analytics LLP, an Indian limited liability partnership ("Ukti" or the "Company"). This policy describes how Ukti handles personal data across its services, including the Ukti app. You may request Ukti's registered office address by email to privacy@ukti.io. By using the services, you agree to this policy. If you do not agree, do not use the services.

Important: This policy is not legal advice. If you need guidance for your situation, consult a qualified professional.

1. Information Ukti collects

On ukti.io, Ukti collects nothing beyond the operational telemetry described in Section 8. The categories below apply when you create an account in the Ukti app.

Account and contact data

Registration and login. Ukti collects your email address, authentication tokens, and credentials managed through an identity provider (including password hashes that are never stored in plain text). If you use Sign in with Apple or Sign in with Google, Ukti collects the identifiers the provider shares.
Profile and preferences. Ukti collects the name, date of birth, measurements, style preferences, and other fields you enter during onboarding or settings.

Photos, wardrobe, and user content

Face and skin selfies. Ukti stores selfies you capture or upload for the daily styling report and for the skin tab, along with derived thumbnails and metadata (for example, MIME type and file size). These images, and the analysis Ukti runs on them, are described further in Section 12.
Full-length body photos. Ukti stores full-length photographs of your body that you choose to capture or upload so the styling report can account for your proportions and fit. This is a distinct, more sensitive category than wardrobe or selfie images; it is optional, and you can delete these photos as described in Section 7.
Clothing and other images. Ukti stores photos of your clothing, tags, and related media you submit through the camera or gallery flows, along with derived thumbnails and metadata (for example, MIME type and file size).
Wardrobe and catalog data. Ukti stores item labels, categories, colors, ratings, and feedback you submit.

Voice and audio

Stylist conversations. When you start a spoken session, your microphone audio streams from your device directly to Microsoft Azure OpenAI over an encrypted connection. The audio does not pass through Ukti's servers and Ukti does not store it. What Ukti keeps from the session is the written styling brief the conversation produced, the session identifier, and session details such as length and how the session ended. This is described further in Section 13.
Voice test recordings. The voice test in the Look tab records three short takes from a recording screen you start yourself. The recordings are sent to Ukti, measured in the same request, and discarded. Only the resulting numbers are kept. This is described further in Section 13.

Usage, device, and diagnostic data

Product telemetry. Ukti logs events such as sign-in, feature usage, API requests, error codes, and performance timings. On mobile, Ukti collects operating system version, app version, device model, locale, and crash reports.
Support communications. When you contact Ukti, the message, attachments, and notes required to respond are retained.

Technical data

Server logs. Ukti's systems record IP addresses, request paths, user agents, timestamps, and security signals needed to operate and protect the services.
Approximate location. Ukti derives your country and currency from your IP address to show market and pricing information for your region. Ukti does not access device location services.
Cookies and local storage. Ukti uses cookies, device storage, and similar technologies only as described in Section 8.

2. How Ukti uses information

Provide the services. Authenticate you, store your wardrobe, run styling features, and deliver notifications you enable.
Operate styling features. Send prompts, images, speech, and contextual data to model providers to generate Ukti's daily call for you.
Measure a voice test. When you take the voice test, measure the recordings on Ukti's own servers to produce the voice numbers in your reading. The recordings are discarded once measured.
Improve and secure the services. Debug issues, monitor reliability, prevent abuse, and develop new features. Ukti does not use your photos or content to train third-party foundation models except where a separate feature clearly states otherwise in writing and you opt in.
Communicate with you. Send transactional messages (verification, password reset, security alerts) and, where permitted, product updates according to your preferences.
Comply with law. Meet legal, regulatory, and tax obligations and respond to lawful requests.

3. Legal bases (EEA, UK, and Switzerland)

Where GDPR or equivalent law applies, Ukti relies on:

Contract — processing necessary to provide the services you request.
Legitimate interests — securing the services, understanding aggregate usage, and internal reporting.
Consent — optional cookies and any processing presented as consent-based.
Legal obligation — retention and disclosure where the law requires it.

4. How Ukti shares information

Ukti discloses information to the following categories of recipients:

Cloud and authentication providers. Ukti uses infrastructure providers for authentication, databases, file storage, and hosting in the regions configured for production.
AI model providers. Ukti sends prompts, images, speech, and related context to model providers to generate styling outputs. Those providers process data under their terms and Ukti's instructions as processors where applicable.
Operational telemetry. On ukti.io, Ukti loads first-party Vercel Speed Insights to measure page performance (LCP, CLS, TTFB). No behavioral analytics, no tracking pixels, no third-party advertising scripts run on this site.
Payment processors. Ukti offers paid subscriptions. Your payment details are collected and processed by the platform processor (Apple App Store or Google Play in-app purchases) under that platform's own terms; Ukti does not receive or store your full payment-card details. Ukti receives limited billing and subscription-status metadata (for example, the subscription tier, renewal state, and a transaction identifier) needed to grant and manage access.
Professional advisers and corporate transactions. Lawyers, auditors, insurers, and successors in a merger or acquisition, subject to confidentiality and legal requirements.
Authorities. When Ukti believes in good faith that disclosure is required by law or necessary to protect rights, safety, or security.

As of the effective date above, the named processors in these categories are: Supabase (database, authentication, file storage), OpenAI and Microsoft Azure OpenAI (vision, language, and speech models; Azure OpenAI processes the audio of stylist conversations), Apple and Google (in-app subscription verification), Amazon SES (transactional email delivery), Cloudflare (CDN, DDoS protection, DNS), and Sentry (error monitoring; personally identifiable information is scrubbed before transmission). Each named processor is bound by a Data Processing Addendum that restricts use to Ukti's instructions. Ukti does not use your photos or content to train third-party foundation models.

Ukti does not sell your personal information as defined under U.S. state privacy laws, and Ukti does not share personal information for cross-context behavioral advertising.

5. Data retention

Account and profile data are kept while your account is active and for up to eight years after closure where Indian tax, fraud, or legal hold requirements apply (Income Tax Act §44AA).
Photos, wardrobe items, and styling content are retained until you delete them or delete your account, after which they are removed from active systems; backup copies typically expire within thirty days.
Logs and telemetry are retained for up to twelve months, except longer retention for security investigations or legal obligations.
Audio is not retained by Ukti. Stylist-conversation audio is never stored; voice-test recordings are discarded once measured. The styling brief a conversation produces and the numbers a voice test produces are kept with your styling content and follow the retention above.

6. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to certain processing, to withdraw consent, to data portability, and to lodge a complaint with a supervisory authority. To exercise rights, email privacy@ukti.io. Ukti verifies requests by confirming control of your account email where appropriate.

If you are in India, the Digital Personal Data Protection Act, 2023 ("DPDP Act") grants you the following rights as a Data Principal, which Ukti honours as a Data Fiduciary:

Right to access information (DPDP Act §11). A summary of the personal data Ukti processes about you, the processing activities undertaken, and the identities of other Data Fiduciaries and processors with whom personal data has been shared.
Right to correction and erasure (DPDP Act §12). Correction of inaccurate or misleading personal data, completion of incomplete personal data, updating of personal data, and erasure of personal data that is no longer necessary for the purpose for which it was processed, subject to legal retention obligations.
Right of grievance redressal (DPDP Act §13). Use the grievance channel at privacy@ukti.io with "Grievance" in the subject line. Ukti will respond within the period prescribed by the DPDP Act and its rules.
Right to nominate (DPDP Act §14). Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

You may also withdraw consent at any time for any processing that is consent-based, with the effect described in the DPDP Act.

7. Account and data deletion

You can delete individual photos or wardrobe entries inside the app where those controls exist. To delete your entire account, use the Delete Account option in your profile settings within the Ukti app. Ukti completes deletion of data not subject to a legal retention exception within thirty days of your in-app request. If you cannot access your account, email privacy@ukti.io from your registered address with "Account Deletion" in the subject line.

8. Cookies and tracking

On ukti.io, Ukti uses at most one functional cookie: the Vercel Speed Insights identifier (strictly-necessary, 15-minute TTL, GDPR Article 5(3) Recital 66 exempt). No marketing cookies, no behavioral tracking, no session recorders. You can control cookies through your browser settings; blocking strictly necessary cookies may break parts of the Ukti app, which uses them for sign-in.

9. Security

Ukti uses encryption in transit (TLS), encryption at rest where supported by providers, access controls, and monitoring designed to protect personal data. No system is perfectly secure; use a strong password and protect your device.

10. International transfers

Ukti operates from India and uses service providers in India, the United States, the European Union, and other regions. When Ukti transfers personal data from the EEA, UK, or Switzerland, it uses appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms where required. UK transfers rely on the UK International Data Transfer Addendum (IDTA) or the UK Addendum to the EU SCCs. India-originated transfers are made subject to DPDP Act §16 and any restrictions notified by the Central Government.

11. Minimum age

The Ukti services are for adults. You must be at least 18 years old to create an account or use the services, and the services are not directed at anyone under 18. Ukti does not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided personal data, contact privacy@ukti.io and it will be deleted promptly.

12. Automated processing of your images

Ukti collects and analyzes images of you to operate its features. This includes your face and skin selfies (used for the daily styling report and the skin tab) and your full-length body photos (used to account for proportions and fit). When you submit these images, Ukti and its model providers process them automatically to generate styling outputs and skin observations. The daily call and skin outputs are generated automatically and may be inaccurate or unsuitable for a given context. You should not rely on automated outputs alone for decisions with legal, medical, financial, or safety implications. Ukti does not use your photos or content to train third-party foundation models except where a feature explicitly states otherwise and you opt in.

This is styling, not medicine. Skin outputs are editorial guidance, not medical diagnosis, not medical advice, and not a replacement for a qualified dermatologist or physician.

What Ukti does not do

Ukti does not sell your personal information. Ukti does not share it for advertising. Ukti does not profile you for advertising. Ukti does not use your photos or content to train third-party foundation models. Ukti does not build a downloadable "taste profile" you can share, export, or be evaluated against.

13. Voice and audio

Two Ukti features use your microphone. Both are described here in full. The microphone is not used outside them.

Stylist conversations

When you start a spoken session, your microphone audio streams from your device directly to Microsoft Azure OpenAI over an encrypted connection, authorized by a short-lived credential Ukti issues for your account. The audio does not pass through Ukti's servers. Ukti does not store the audio and does not use it to train models. Microsoft processes the audio to run the conversation, and may store and review a sample of processed content to detect misuse of the service, under its published Azure OpenAI terms.

What Ukti keeps from a session is the written styling brief the conversation produced, the session identifier, and session details such as length and how the session ended. The brief is stored with your account and is removed when you delete your account, as described in Section 7. If you switch between speaking and typing mid-session, the written thread passes through Ukti's servers so the conversation can continue; Ukti does not store it.

A spoken session runs only while the app is open. The microphone is active only for the length of the session, and the session ends when you leave the app.

Voice test

The voice test in the Look tab records three short takes — ten seconds each — from a recording screen you start yourself. The recordings are sent to Ukti, measured in the same request, and discarded. No recording is written to storage or to Ukti's database, and no recording is sent to a model provider. Only the resulting numbers are kept, with your reading.

What Ukti does not do with audio

Ukti does not record you outside these two features. Ukti does not keep audio after a session or a test. Ukti does not use your audio to train models. Ukti does not sell your audio and does not share it for advertising.

14. United States (California and other states)

California residents may request the rights described in Section 6 and may ask once per calendar year about certain disclosures for direct marketing purposes. Ukti does not discriminate for exercising privacy rights. Authorized agents may submit requests where state law allows.

15. Changes to this Policy

Ukti updates this Policy when its practices change. The new version is posted on this page and the effective date is updated. For material changes, Ukti provides notice by email or in-app message where the law requires.

16. Contact

Questions about this Policy: privacy@ukti.io
Security issues: privacy@ukti.io (subject: "Security")
General help: help@ukti.io
India DPDP Act §13 grievance redressal: privacy@ukti.io (subject: "Grievance")