Privacy, in plain language.

What the workspace stores

Sign-in details are handled by the configured authentication provider. Garderobe stores your profile, measurements, budgets, style preferences, briefs and attachments, saved products, looks and generated images, closet photos, collections, shopping bag, fit feedback and activity used to learn your taste. AI usage records contain model names, token counts and estimated cost.

These records support the features you request: styling, sizing, saving and returning to your wardrobe. Optional learning uses your browsing and saving activity to update a taste profile and recommendations. You can pause it in Privacy settings. Explicit preferences and the brief you send still guide requests you make.

Providing the account and wardrobe features you request is necessary to deliver this service. Optional activity learning is off for new accounts until you enable it, and uses your consent. The mobile app asks permission before sending your prompts, profile or photos to OpenAI. You can decline and keep browsing, or withdraw that permission in Privacy & account. Security and abuse prevention support our legitimate interest in protecting the service.

Where your information goes

• OpenAI: the brief, relevant conversation context, profile details and any images needed for the styling or image-generation task. A request can include your uploaded model photos when making an outfit image.
• Neon: the application database, including saved wardrobe content and photos. The current database is hosted in the EU.
• Vercel: website delivery and application execution. The main application functions run in Frankfurt; this is not a guarantee that every infrastructure log or provider operation stays within the EU.
• Clerk, when enabled: sign-in and account authentication. The fallback owner-password session uses an essential authentication cookie.
• Retailers and image hosts: opening product photos can send your IP address and browser information to the host. Following a retailer link takes you to its website and privacy rules.

OpenAI states that API data is not used to train its models by default. Provider abuse-monitoring retention may still apply; setting response storage off does not mean zero retention. See OpenAI’s data controls. Some service providers process information outside the European Economic Area. Their published data-processing terms describe their subprocessors and transfer safeguards. Contact the operator for information about the arrangements that apply to your data.

Photos, security and retention

Profile model photos receive application-level encryption in storage and require sign-in to retrieve. Brief attachments, closet images and generated outfit images are stored as private application data; they do not use that same additional photo-encryption layer. Uploaded model photos are resized and their original metadata is removed during preparation.

Saved content currently remains until removed. Deleting a model reference does not delete outfit images already generated from it. Delete those looks separately. Brief deletion removes its messages and attachments; looks made from it remain in your collection. Infrastructure backups and provider security logs can have separate retention periods; these copies follow each provider’s retention and recovery arrangements and are not immediately removed by an in-app deletion. Contact the operator for a retention request.

No advertising or third-party analytics integration is present in the current application. Essential cookies and browser storage support sign-in, drafts and navigation. Read the storage notice.

Your choices and rights

You can correct profile details, remove model photos, delete looks and briefs, pause learning, download your wardrobe data and permanently delete your account. Account deletion erases the active wardrobe records and the Clerk sign-in account; provider backups and security logs follow separate retention schedules. Visit Privacy settings for export and request controls. The download can contain personal photos; keep it somewhere private.

Depending on the applicable law and processing basis, you may request access, correction, erasure, restriction, portability or object to processing. Where consent is used, it must be freely given and withdrawable without affecting earlier lawful processing. Requests normally require a response within one month, subject to the GDPR’s conditions and permitted extensions.

You may complain to a supervisory authority, including the Dutch Autoriteit Persoonsgegevens. Recommendations and generated previews are suggestions; Garderobe does not use them to make legal or similarly significant decisions about you.

Who operates Garderobe

David Henry Francis Wicker, Netherlands.

Privacy and service enquiries: davidwickerhf+garderobe@gmail.com.