Privacy policy

Who is responsible

Digital Wardrobe is published by Arhun Saday, who is the data controller for the personal data described here. For any question about your data: arhunsad@gmail.com.

The data we process

We only process what Digital Wardrobe needs to work:

• Account: your e-mail address, and the name and profile picture your Google account provides if you sign in with Google on the web. Your language, currency and time zone.
• Photos you add: photos of your clothes, mirror photos of outfits, and, if you choose to add one, a full-length reference photo of yourself for virtual try-on. These photos can show your face and body.
• Images we generate for you: garment cutouts, outfit flatlays and try-on images.
• Wardrobe data: the details you enter about each piece (brand, size, colour, price, purchase date, notes, tags), your outfits, what you wore and when, your plans and your style preferences.
• Body description, optional: how you describe yourself, your height, build and preferred fit. It is only used to describe you to the try-on model.
• Approximate location, optional: if you tap "use my location", your position rounded to about 1 km, used to fetch the weather.
• Purchases: your plan, its status and renewal date, and the identifiers Stripe, Apple or Google give us for your subscription. We never receive your card details.
• Your own OpenAI API key, if you add one: stored encrypted and only decrypted on our server when a request uses it.
• Reports you send about a generated image: which image, and the reason if you give one.
• Usage and technical data: a record of each AI generation (type and cost) to enforce budgets and plan limits, and the request logs our hosting provider keeps for a short time (IP address, browser or device type).

We do not use advertising, analytics or tracking SDKs, and we do not track you across other apps or websites.

What we do with it

Your data is only used to run Digital Wardrobe. We never sell or rent it.

• To provide the service you asked for: store your closet, show it to you, generate cutouts, outfits, suggestions and try-on images (legal basis: performance of our contract with you).
• Your reference photo and body description: only for try-on, on the basis of your consent, given when you add them and withdrawn by removing them in Settings or deleting your account.
• Your approximate location: only for the weather, on the basis of your consent.
• Billing, plan limits, security and abuse prevention (legal bases: contract, legal obligations and our legitimate interest in keeping the service safe and affordable).

Only you can see your content. Photos and generated images are stored in private storage and shown through links that expire after a short time. There is no public profile, feed or sharing between users.

Services that receive data

Digital Wardrobe relies on these providers, which only receive what their service needs and are each bound by a data processing agreement:

• Supabase: database, sign-in and private file storage, hosted in the European Union (Ireland).
• Vercel: hosting of the app, with servers in the European Union (Ireland).
• OpenAI: AI processing of your photos, as described below.
• Open-Meteo: weather forecasts. It receives rounded coordinates only, never your account.
• Stripe: subscriptions bought on the web.
• Apple, Google and RevenueCat: subscriptions bought in the iOS or Android app. RevenueCat receives your account identifier (a random id, not your e-mail) and your store receipts.
• Google: only if you choose to sign in with Google on the web.

Your photos and OpenAI

Cutouts, try-on images, garment detection and listing drafts are produced by OpenAI's API. When you use these features, the photos involved (clothing photos, and for try-on your reference photo together with the garments) and a short text description are sent to OpenAI, L.L.C. in the United States, which processes them on our behalf to return the result. You agree to this at the end of onboarding; nothing is sent to OpenAI before.

Under OpenAI's API terms, this data is not used to train OpenAI's models. OpenAI may keep it for up to 30 days to detect abuse, then deletes it. Transfers to the United States rely on the European Commission's Standard Contractual Clauses in OpenAI's data processing addendum.

If you add your own OpenAI API key, these requests are made with your key, under your own agreement with OpenAI.

Try-on images are generated, not photographs. They can be inaccurate and are never used to identify you.

Security

Data is encrypted in transit (HTTPS) and at rest by our providers. Storage is private, access links expire, and API keys you give us are encrypted with AES-256-GCM.

Retention

• Your data is kept for as long as your account exists. When you delete it, your data is erased as described in "Delete your account" below.
• Intermediate images created while importing clothes are deleted automatically within 7 days. A replaced or removed reference photo is deleted at once.
• Copies in our providers' encrypted backups disappear as those backups rotate, within 30 days.
• Payment records that the law requires to be kept are kept by Stripe, Apple or Google under their own obligations.

Your rights

Under the GDPR, you can access, correct, delete or get a copy of your data, object to or restrict its processing, and withdraw your consent at any time. Most of this is available in the app; for the rest, write to arhunsad@gmail.com from your account's e-mail address. You can also lodge a complaint with your data protection authority (in France, the CNIL, www.cnil.fr).

Digital Wardrobe is not intended for anyone under 16, and we do not knowingly collect their data.

Delete your account

In the app or on the web: open You → Data, tap "Delete account", type the confirmation word and confirm. Deletion is immediate and permanent.

Without the app: write to arhunsad@gmail.com from your account's e-mail address, with the subject "Digital Wardrobe account deletion". Your account is deleted within 30 days.

Deleted: your photos (clothes, outfits and your try-on reference photo), every image generated for you, your closet, outfits, wear history, plans, preferences and body description, your reports, your AI usage history, your own API key and your sign-in identity.

Kept: copies in our providers' encrypted backups until they rotate out within 30 days, and the payment records Stripe, Apple or Google must keep by law.

A subscription bought through the App Store or Google Play is billed by Apple or Google: cancel it in your store settings, deleting the account does not stop it. A web subscription is cancelled automatically.

Changes

We will update the date below when this policy changes, and tell you in the app before a significant change applies.