Privacy Policy
Wardrobe AI · Updated 9 May 2026
This policy describes how the Wardrobe AI application (hereinafter, “the App”) processes the personal data of its users. The App is distributed through the Apple App Store. Use of the App is also subject to the Terms of Use.
- The App is intended exclusively for users aged 18 or older.
- We collect only what is strictly necessary for the App to function: an email address for authentication and the photographs of clothing items you choose to store.
- We do not sell data, build advertising profiles, or use third-party trackers.
- You have the right to access, correct, export, and delete everything associated with your account.
1. Data controller
The data controller is Paulo Branco, Consultoria e Gestão Imobiliária, Unipessoal Lda, a Portuguese sole-shareholder limited company headquartered in Porto, Portugal. For any privacy-related questions, contact us at pal@drpal2028.me.
2. Data we collect
The App collects and processes only the following personal data:
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email address | Authentication and account identification | Performance of contract (Art. 6(1)(b)) |
| Photographs of clothing items you upload | Storing and organising your digital wardrobe, generating outfit suggestions | Performance of contract (Art. 6(1)(b)) |
| User identifier (internal UUID) | Linking items to your account in an anonymised way | Performance of contract (Art. 6(1)(b)) |
| Minimal technical logs (timestamps, errors) | Keeping the service operational and diagnosing issues | Legitimate interest (Art. 6(1)(f)) |
We do not collect: location, contacts, biometric data, health data, browsing history, advertising identifiers, or any information not listed above.
3. Who processes your data (sub-processors)
To provide the App we use third-party technical services, all bound by Data Processing Agreements (DPAs) and GDPR-compliant infrastructure:
| Service | Function | Location |
|---|---|---|
| Supabase | Email authentication (OTP code); image processing through Edge Functions; minimal usage logs for rate limiting | European Union (Frankfurt) |
| Anthropic (Claude API) | Automatic clothing classification (category, colour) and outfit suggestion generation by AI | USA — transfer under Standard Contractual Clauses |
| Replicate | Automatic background removal from photos (AI model) | USA — transfer under Standard Contractual Clauses |
| Vercel | Hosting of static pages (this policy, terms, internal tools) | Global distribution (CDN) |
| Apple | App distribution via the App Store | Per Apple Privacy Policy |
Photographs sent for classification or background removal are transmitted via a temporary public URL and are not used by the models for training. We do not share your data with any third party outside this list.
4. Data retention
- Your email and user identifier are kept for as long as the account exists.
- Photographs are stored exclusively on your iPhone. When you generate an outfit or remove a background, images are transmitted to the AI services listed in section 3 and discarded after processing — they are not stored on our servers.
- If you delete your account, all associated personal data (email, identifier, usage logs) is erased within 30 days. Photographs and other local data on your iPhone are deleted when you uninstall the App.
- Minimal technical logs (timestamps + function identifier for rate limiting) are kept for at most 90 days.
- We do not keep backups of your data after account deletion.
5. Your rights
Depending on your jurisdiction (GDPR / UK GDPR / CCPA / LGPD / Quebec Law 25 / others), you have, among others, the following rights:
- Access — to know what data we hold about you.
- Rectification — to correct inaccurate data.
- Erasure ("right to be forgotten") — to request deletion of all your data.
- Portability — to receive your data in a structured, machine-readable format (JSON).
- Restriction — to limit processing in specific cases.
- Objection — to object to processing based on legitimate interest.
- Complaint — to lodge a complaint with your national supervisory authority. EU residents may contact the Portuguese Data Protection Authority (CNPD): cnpd.pt.
- California residents — additional CCPA/CPRA rights (right to know, right to delete, right to opt-out of sale; we do not sell data).
To exercise any of these rights, email pal@drpal2028.me. We respond within 30 days or less.
6. Security
- All communications are encrypted with TLS (HTTPS).
- Photographs are stored in private Supabase buckets with Row Level Security (RLS) — only your account can access your files.
- Passwords are never stored in plain text (hashed via Supabase Auth).
- We notify any serious data breach within 72 hours, in accordance with GDPR Art. 33.
7. Minimum age — exclusively 18 and over
Wardrobe AI is intended exclusively for users aged 18 or older. This contractual restriction is designed to ensure full compliance with:
- EU General Data Protection Regulation (GDPR, Reg. (EU) 2016/679, Art. 8) and Member State legislation that lowers the age of autonomous consent (including Portuguese Law 58/2019);
- UK Data Protection Act 2018 and UK GDPR;
- U.S. Children's Online Privacy Protection Act (COPPA);
- California Consumer Privacy Act (CCPA / CPRA) and equivalent regimes in other U.S. states;
- Brazilian General Data Protection Law (LGPD);
- Quebec Law 25 and equivalent legislation in other jurisdictions.
By creating an account, you declare that you are at least 18 years old. Age is validated at sign-up. We do not intentionally collect, process, or store data from anyone under 18. If we become aware of an account created by a minor, the account is immediately deleted and all associated data is erased per Section 4.
Parents or guardians who suspect that a minor in their care has created an account may contact us at pal@drpal2028.me for immediate deletion.
8. Changes to this policy
This policy may be updated to reflect legal or App changes. The version in force is always accessible at this URL. Material changes (e.g., new sub-processors) will be communicated inside the App before taking effect.
9. Contact
Any privacy-related question or request:
Paulo Branco, Consultoria e Gestão Imobiliária, Unipessoal Lda
Email: pal@drpal2028.me
Location: Porto, Portugal