Privacy policy

Part A: This website (fitsmysize.uprank.de)

This part describes data processing on the marketing website. How the FitsMySize app handles your data is described in Part B below.

1. Controller

Responsible for the data processing described in this policy — on this website as well as in the FitsMySize app — is Jan Henning Günzel, Julius Leber Straße 12, 32107 Bad Salzuflen, Germany. Email: kontakt@uprank.de.

2. What this website does

This website informs you about the FitsMySize app and lets you sign up as a potential beta tester. We collect as little data as possible: no tracking, no analytics, no advertising.

3. Server log files

When you visit this website, our hosting provider, Contabo GmbH (Munich, Germany; servers located in the EU), automatically records technical access data (IP address, date and time, requested page, browser type). This data is required to deliver the website reliably and securely (Art. 6(1)(f) GDPR) and is deleted automatically after a short period. It is not merged with other data.

4. Beta signup

If you sign up for the beta, we use a double opt-in procedure. Submitting the form stores your email address, your chosen platform (iOS/Android) and the language of the form in our own database (Supabase, EU region — see section 6), never with a third-party mailing-list service, and sends you a single confirmation email. Until you click the link in that email, your entry stays unconfirmed and we do not contact you for any other reason.

To document your consent as the law requires, we also store which consent wording you agreed to, the IP address and the time of the signup, and the IP address and time of your confirmation. The legal basis is your consent (Art. 6(1)(a) GDPR); the confirmation email itself is sent to establish that consent. The signup is protected against abuse by a honeypot field, an email format check and rate limiting.

If you never confirm, we delete the entry automatically after 30 days. Confirmation links expire after seven days. You can withdraw your consent at any time and without giving reasons: every email we send you carries a link that erases your address immediately and completely, and you can also write to kontakt@uprank.de. Your data is deleted at the latest when the beta program ends, and it is never shared with third parties or used for advertising.

5. Cookies

This website sets a single functional cookie (NEXT_LOCALE) that remembers your language choice when you switch languages. It contains no personal data and is not used for tracking. No other cookies are set.

Part B: The FitsMySize app

This part describes how the FitsMySize app (iOS/Android) handles your data once you install it, create an account and use it.

6. Registration and sign-in

Account features (saving measurements, bookmarking products, giving feedback, commenting) require registration via email and password, or via Google or Apple sign-in. Accounts and credentials are managed through our processor Supabase, hosted on EU servers (eu-west-3 region, Paris) — the legal basis is contract performance (Art. 6(1)(b) GDPR).

If you sign in via Google or Apple, those providers process the data required for sign-in (e.g. your email address) under their own privacy policies; we only receive the information needed to create your account.

7. Body measurements

During onboarding, you measure yourself once (e.g. waist girth, sleeve length, inseam). These measurements are the core of the app: we compare them against product measurements to show you fit assessments (Art. 6(1)(b) GDPR). Your measurements are never shown publicly and are never shared with third parties. You can re-measure at any time in Settings; earlier values are kept as history until you delete your account.

8. Fit feedback and comments

If you give fit feedback ("fits" / "too tight" / "too loose") or write a comment, we store it with your account (Art. 6(1)(b) GDPR; we additionally rely on Art. 6(1)(f) GDPR for using it to improve our fit recommendations). Comments are visible to other users, showing your profile name — never your body measurements or email address. Please don't post other people's personal data or sensitive information about yourself in comments.

9. Saved products

If you save a product, we store that with your account so you can find it again later (Art. 6(1)(b) GDPR).

10. Affiliate links

Product links lead to external online shops, some via affiliate networks. Tapping such a link takes you out of the app or website; the respective shop processes your data under its own privacy policy, which we have no control over. In the app, we log the "affiliate link opened" event only if you've consented to product analytics (see section 12).

11. Fit-prediction log (calibration)

Every fit assessment shown on a product detail page is logged server-side (your measurements, the product's measurements, material factor, the scoring parameters used, and the result). We use this to continuously check and improve the accuracy of our scoring model against real user feedback (Art. 6(1)(f) GDPR, legitimate interest in a working core product). Re-viewing the same, unchanged result does not create a new entry; these entries are deleted together with your account.

12. Product analytics (PostHog)

If you consent to usage analytics in the app's Settings (a toggle, off by default), we collect selected events (e.g. product viewed, product saved, affiliate link opened, feedback given, measurements saved) and uncaught app errors via PostHog (processed on EU servers, eu.posthog.com). The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the same toggle. Events are tied to a pseudonymous user ID, never to your email address; we do not record screen content (no session replay) and do not auto-capture touches. No event is sent without your consent.

13. Server-side logs and error monitoring

Our backend runs on a server at Contabo GmbH (EU) — the same provider as the website (see section 3). It writes technical logs (request, status, duration) for operations and troubleshooting; these stay on that server and are not shared with third parties (Art. 6(1)(f) GDPR). We additionally report unhandled server errors to Sentry (EU data region) so we can fix issues promptly (Art. 6(1)(f) GDPR); this may include technical context about the failing request, never plaintext passwords or payment data.

14. Account deletion

Deleting your account in the app's Settings permanently removes your measurements, fit feedback, saved products, comments and the associated fit-prediction log entries. Technical logs with a short, automatic deletion period (see section 3) and statutory retention obligations are not affected by this.

15. Your rights

You have the right to access, rectify or erase your personal data, to restrict its processing, to data portability, and to object to processing based on legitimate interest (Art. 15–21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority.

For any privacy request, contact kontakt@uprank.de.