Start with the app when possible
Many account-specific controls are available directly in MedaStaré under Settings > Privacy and Legal. Account deletion is available through Settings > Account > Delete Account.
If you cannot access the app, or if the control you need is not available there, you may use the public request route described below.
The rights available to you depend on your location, the type of data involved and the circumstances of the request. MedaStaré will apply the rights and exceptions required by applicable law.
1. Self-service controls
Access account information
Review profile information and other account details available through the app.
Correct information
Update editable profile details directly or request correction of eligible information that cannot be changed in the app.
Delete chats or content
Delete eligible chats, saved content or other records where the product provides an individual deletion control.
Delete your account
Use the in-app account deletion flow or the public Account and Data Deletion process if you cannot sign in.
Manage AI consent
Decline or withdraw future optional transfers to external AI providers where the processing depends on your consent.
Manage location
Disable location-based features or use available city/manual-location controls where offered.
Manage notifications
Adjust available in-app notification preferences and applicable device-level notification settings.
Manage analytics or cookies
Use the available cookie or analytics preference control when optional analytics is enabled and a consent choice is required.
2. Privacy rights you may have
Depending on applicable law, you may have one or more of the following rights:
- Access: request confirmation of whether MedaStaré processes personal data about you and obtain eligible data or information about the processing.
- Correction: request correction of inaccurate or incomplete eligible personal data.
- Deletion: request deletion of eligible personal data, subject to lawful retention exceptions.
- Portability: receive eligible personal data in a portable or machine-readable format where required.
- Restriction: request restriction of certain processing where the law provides that right.
- Objection: object to certain processing based on legitimate interests, direct marketing or another legally recognized ground.
- Withdraw consent: withdraw consent for future processing where consent is the applicable legal basis.
- Limit sensitive-data processing: request applicable limits on sensitive personal data where local law provides that right.
- Automated-decision rights: request information, review or another available safeguard for certain automated decisions where applicable law provides that right.
- Appeal: appeal a denied privacy request where applicable law requires an appeal process.
These rights are not absolute. MedaStaré may apply lawful exceptions for security, fraud prevention, another person's rights, legal obligations, confidential information, completed transactions, disputes or other permitted purposes.
3. AI consent choices
Certain MedaStaré AI features may send user-selected information or feature context to an external AI provider. Where consent is required, the app presents a provider-specific notice before the qualifying transfer and provides a choice to continue or not proceed.
If you decline the applicable AI consent, the relevant request is designed not to be sent to the external AI provider. Unrelated parts of MedaStaré remain available unless the refused data is necessary for that specific feature.
Where consent is the legal basis, you may withdraw it for future qualifying transfers. Withdrawal does not make earlier lawful processing unlawful and does not automatically erase data already processed by an external provider where that provider is legally permitted or required to retain it.
For provider, retention and model-training information, see the AI Data Processing Notice.
5. Marketing choices
You may opt out of optional marketing emails by using the unsubscribe method provided in the message or by contacting MedaStaré.
Opting out of marketing does not prevent MedaStaré from sending non-marketing communications that are reasonably necessary for your account, security, transactions, legal notices, support requests or important service updates.
Device-level push-notification choices may also be changed through the applicable operating-system settings and any in-app notification controls that are available.
6. Sale, sharing and targeted advertising
MedaStaré does not currently sell personal data for money and does not use private photos, wardrobe content, AI prompts, body information, beauty inputs or cycle information for cross-context behavioral advertising.
If MedaStaré later engages in an activity that applicable law defines as a sale, sharing for cross-context behavioral advertising or targeted advertising, MedaStaré will provide the notice and opt-out mechanism required before or when that activity begins.
If a legally recognized browser or device opt-out signal becomes applicable to a regulated activity used by MedaStaré, MedaStaré will describe and honor the signal as required by applicable law.
7. Make a privacy request
Email support@medastare.com and identify the type of request you are making. Where possible, write from the email address associated with your MedaStaré account.
Please provide only the information reasonably necessary to identify the account and understand the request. Do not send passwords, authentication tokens, Apple or Google credentials, complete payment-card information, online-banking passwords, CVC/security codes, unnecessary identity documents, medical records or sensitive images by ordinary email.
For account deletion specifically, use the Account and Data Deletion page. A privacy request and a store-subscription cancellation are separate actions.
8. Identity verification
MedaStaré may verify a request before disclosing, correcting, exporting or deleting account-specific personal data. Verification is intended to prevent another person from taking control of your privacy rights or receiving your data.
Verification may use the existing account email, an authenticated session, a verification link or another proportionate method. MedaStaré will not request more information than is reasonably necessary for the verification and legal obligation involved.
If MedaStaré cannot reasonably verify an account-specific request, it may ask for additional information or decline the request to the extent permitted by law.
9. Response timing
MedaStaré responds to verified privacy requests within the period required by the law that applies to the request.
For example, where the EU or EEA General Data Protection Regulation applies, requests are generally handled without undue delay and within one month, subject to a legally permitted extension for complexity or volume. Other jurisdictions may provide different response periods, extension rules or appeal deadlines.
If MedaStaré extends a response period, refuses a request or requires additional verification, it will provide the explanation required by applicable law.
10. Limits and exceptions
A privacy request may be limited, delayed or denied where permitted or required by law, including when necessary to:
- protect another person's privacy, safety or legal rights;
- prevent fraud, abuse, account takeover or security threats;
- preserve evidence connected with a dispute, legal claim or investigation;
- comply with tax, accounting, transaction, KYC/AML, platform or other legal obligations;
- protect confidential information, trade secrets or intellectual property;
- complete or document a transaction or service requested by the user;
- retain consent, audit, moderation or deletion records reasonably necessary to demonstrate compliance; or
- handle a manifestly unfounded, repetitive or excessive request as applicable law permits.
Where possible, MedaStaré will apply an exception only to the portion of data for which the exception is necessary rather than denying an entire request.
11. Authorized agents
Where applicable law permits another person to submit a privacy request on your behalf, MedaStaré may require evidence that the agent is authorized and may verify your identity directly before disclosing or deleting account-specific data.
MedaStaré will not release account data solely because a person claims to be an agent, representative, family member, employee or adviser.
12. Appeals and complaints
If applicable law gives you a right to appeal a denied privacy request, you may reply to the decision or email support@medastare.com and state that you are requesting an appeal.
You may also have the right to complain to a privacy regulator, data-protection authority, attorney general or other competent authority in your jurisdiction. Contacting MedaStaré first may help resolve a concern, but it does not limit a right to contact a regulator where that right exists.
13. Non-discrimination
MedaStaré will not unlawfully discriminate against you for exercising a privacy right. Exercising a privacy right does not mean MedaStaré must continue providing a feature that cannot technically or lawfully operate without the data you have asked MedaStaré to stop processing.
Differences reasonably related to the value, functionality, security or legal requirements of a feature may still apply where permitted by law.
14. Contact
Privacy questions, rights requests and appeals may be sent to support@medastare.com.
For full information about MedaStaré's data practices, retention, international transfers and regional rights, review the Privacy Policy.