Privacy

The short version

• We do not sell personal data or use it for advertising or cross-app tracking.
• Your wardrobe and photographs are separated by your signed-in account.
• We send a photograph or decision-useful styling context to an AI provider only when needed for an action you choose.
• You can download your account data and permanently delete it from the app.

Data used by the product

Name

Account display name. Used for app functionality. Account identity supplied at sign-in. Supabase provides email/password sign-in for the customer app; OpenAI provides identity for the shared ChatGPT Sites version.

Email Address

Account email. Used for app functionality. Account identity supplied at sign-in. Supabase provides email/password sign-in for the customer app; OpenAI provides identity for the shared ChatGPT Sites version.

User ID

Stable account identifier used to separate private records. Used for app functionality. Stored with private account records. Supabase verifies customer sign-in; OpenAI supplies identity in the shared ChatGPT Sites version.

Photos or Videos

Wardrobe, Fit Profile and complete-outfit photos. Used for app functionality. Private object storage until the customer deletes the item or account. Selected photos are sent to OpenAI only when needed for a requested AI photo or styling action.

Other User Content

Wardrobe details, occasions, styling context, saved looks and feedback. Used for app functionality. Private account records until the customer deletes the record or account. Decision-useful context is sent to OpenAI only for requested AI styling actions.

Other Data Types

Optional height, weight, body-shape guide, proportions and fit priorities. Used for app functionality. Private Fit Profile until changed or the account is deleted. Only decision-useful fit context is sent to OpenAI for relevant requested styling actions.

Product Interaction

Onboarding, service use, saved, worn, accepted and rejected look events; notification choices and engagement. Used for app functionality and analytics. Private product, recommendation and notification evidence until account deletion. Not sent to advertising networks or data brokers.

Other Diagnostic Data

Failure category, service area, device class, status and duration. Used for app functionality and analytics. Privacy-safe customer diagnostics are automatically removed after 30 days. Prompts, photos, filenames, names, emails and provider response bodies are excluded.

Body and face photos for personal try-ons

Your body photo provides a full-length reference for your proportions. An optional face photo helps generated try-ons keep your appearance consistent. These are account-private references, not a facial-recognition service.

The Fit Profile checkbox asks permission to save these references and use them for personal try-ons, including the first try-on during onboarding. The photos needed for a requested try-on are sent to OpenAI. Generated images are AI approximations and do not guarantee garment fit or an exact likeness.

You can replace your body or face photo in Fit Profile. If you do not agree to this use, do not save these photos. For withdrawal or photo-removal requests during private testing, use the support instructions; you can also delete your account data in Account & privacy. Deleting the account removes live photos and records, with interrupted file cleanup retried. Restricted recovery backups may retain earlier copies; provider retention and backup-deletion details still require confirmation before this policy is final.

AI processing and sharing

Supabase provides email/password account authentication for the customer app, Cloudflare hosts the app and its private account storage, and OpenAI performs customer-requested image and fashion processing. The shared ChatGPT Sites version can use OpenAI sign-in identity. Only the photograph and context needed for the chosen action are sent. Anthropic is reserved for founder-controlled benchmark outfits and must not receive customer wardrobes, profiles or photographs. We do not integrate advertising networks or data brokers.

Final provider contractual retention, deletion and subprocessor wording must be verified before public release; this draft does not claim terms that have not yet been confirmed.

How long information is kept

Wardrobe, Fit Profile, saved looks and feedback

Kept until you remove the relevant content or delete your account.

Customer journey diagnostics

Automatically removed after 30 days. They exclude photos, prompts, filenames, names and email addresses.

Customer action reliability

Automatically removed after 90 days. Records only the service used, completion state, device class and timing.

AI provider reliability records

Automatically removed after 90 days. They exclude customer content and provider response bodies.

Interrupted form recovery

Bounded text only, never a photo, and automatically expires after 24 hours.

Performance measurements

We collect anonymous loading, responsiveness and layout-stability measurements, and timings for onboarding steps. These include device class and app release, with random page or journey identifiers. They contain no account identifier, photographs, page URLs or free text, are kept for 30 days, and respect your browser’s Do Not Track setting.

Your choices

You may avoid the optional Fit Profile photograph and measurements, pause or reset personal preference learning, download a portable account summary, remove wardrobe items, or permanently delete the account data. Facial recognition is not performed.

Security and international processing

The Wardrobe Lens uses account-scoped access, private storage, bounded uploads and encrypted HTTPS transport. No internet service can promise absolute security. Providers may process information outside your country; the final policy will identify the legal operator, jurisdiction and confirmed contractual safeguards before launch.