Privacy Policy

Section 1.1 Who This Policy Applies To

This Privacy Policy applies to users of the Platform, website visitors, beta testers, waitlist users, and people who contact us.

Section 1.2 Relationship With Terms

This Privacy Policy should be read together with the DrobeMe Terms and Conditions.

Section 2.1 Account Data

We may collect:

• name;
• email address;
• username;
• password authentication data, stored securely and not in plain text;
• account ID;
• profile photo, if provided;
• age or date-of-birth confirmation, if required;
• account settings and notification preferences.

Section 2.2 Single Sign-On Data

If you use Apple Sign-In, Google Sign-In, or another sign-in provider, we receive limited account data from that provider to authenticate you and create or maintain your DrobeMe account. This may include:

• name, if shared by you or the provider;
• email address, including an Apple Hide My Email relay address if used;
• authentication tokens used to verify sign-in and maintain sessions.

We do not receive your Apple ID password, Google password, Google contacts, calendars, or unrelated account data.

Section 2.3 Closet and Wardrobe Data

We may collect:

• clothing item photos;
• item names;
• categories;
• colors;
• brands;
• sizes;
• materials;
• seasons;
• occasions;
• style tags;
• price or purchase information, if you add it;
• wear history;
• favorite items;
• closet filters and sorting preferences.

Section 2.4 Outfit and Styling Data

We may collect:

• outfits you create, save, edit, delete, or share;
• outfit names, notes, seasons, and occasions;
• favorite outfits;
• AI-generated outfit recommendations;
• outfit interaction history;
• try-on interactions;
• saved recommendations;
• rejected or hidden recommendations.

Section 2.5 Body Type, Fit, and Body Image Data

If you choose to use body type, fit, or body image features, we may collect:

• body type selections;
• fit preferences;
• size profile;
• measurements you manually enter;
• body images you upload;
• image dates;
• image notes;
• body image history;
• related styling preferences.

This data is used for fashion, fit, styling, and wardrobe personalization only. We do not use it to diagnose health conditions, infer medical status, uniquely identify you, or create biometric templates for identification.

Section 2.5.1 Special Category Data

Body images and related fit or body-type data may, depending on their content, constitute a special category of personal data under Article 9 GDPR (data concerning health or biometric-type imagery). We process this data only on the basis of your explicit consent (Article 9(2)(a) GDPR) and only for the fashion and styling purposes described in Section 5. We apply additional safeguards to this data as described in Section 5.5.

Section 2.6 AI Chat and Prompt Data

When you use AI chat or AI styling features, we may collect:

• prompts you type;
• style questions;
• quiz responses;
• filters, such as occasion, color, brand, budget, or season;
• relevant closet item metadata;
• relevant body type or fit inputs if the feature needs them;
• AI responses and recommendation outputs;
• feedback on AI responses.

Section 2.7 Shopping and Affiliate Data

When you interact with shopping or "complete the look" features, we may collect:

• product views;
• product clicks;
• retailer link clicks;
• affiliate attribution IDs;
• timestamps;
• product IDs;
• merchant or retailer names;
• clicked size or variant, if applicable;
• device/app identifiers needed for attribution;
• commission or conversion data received from affiliate networks, where available.

We do not receive full payment card details from retailers.

Section 2.8 Social Sharing and Community Data

If social or sharing features are enabled, we may collect:

• shared outfit cards;
• captions, comments, or notes you add;
• public or semi-public profile data;
• interaction data, such as saves, likes, shares, or remixes;
• recipient or platform metadata needed to complete sharing.

Section 2.9 Technical, Usage, and Device Data

We may collect:

• device type;
• operating system;
• app version;
• IP address;
• general location derived from IP address;
• crash logs;
• diagnostic logs;
• session events;
• feature usage;
• performance data;
• authentication logs;
• security events;
• analytics events;
• app instance identifiers used by our analytics and measurement tools;
• advertising identifiers (the Identifier for Advertisers (IDFA) on iOS or the Android Advertising ID), only if you have given advertising consent and, on iOS, allowed tracking in Apple's App Tracking Transparency prompt;
• ad interaction and conversion events, such as which DrobeMe ad led to an install, sign-up, or purchase, only if you have given advertising consent.

Section 2.10 Support and Communications Data

If you contact us, we may collect:

• name;
• email address;
• message content;
• attachments you provide;
• support history;
• troubleshooting information.

Section 3.1 Platform Operation

We use personal data to:

• create and manage accounts;
• authenticate users;
• provide closet management;
• provide outfit creation;
• provide AI recommendations;
• provide body image tracking where enabled;
• provide virtual try-on features where enabled;
• provide product recommendations;
• process account deletion requests;
• provide support.

Section 3.2 Personalization

We use personal data to personalize:

• outfit recommendations;
• closet organization;
• color and style suggestions;
• size and fit-related suggestions;
• weather or occasion-based recommendations;
• product suggestions;
• reminders and notifications.

Section 3.3 AI Processing

We use relevant user-provided inputs to generate AI styling outputs. Depending on the feature, this may include closet data, quiz responses, style preferences, body type selections, fit inputs, filters, and free-text prompts.

Section 3.4 Safety, Security, and Abuse Prevention

We use data to:

• detect fraud;
• prevent abuse;
• secure accounts;
• debug technical problems;
• enforce Terms;
• prevent unauthorized access;
• protect users and DrobeMe.

Section 3.5 Analytics and Product Improvement

We use analytics to understand how users interact with the Platform, improve features, test product changes, measure reliability, and prioritize development. We process analytics data only if you allow "Usage analytics" in the app, and you can change this at any time in Settings → Privacy & data. Analytics data is linked to your internal DrobeMe account ID, not to your name or email address. Our analytics providers are Amplitude and Google Analytics for Firebase.

Section 3.6 Affiliate Attribution

We use affiliate attribution data to determine whether a product click or purchase originated from DrobeMe and to calculate commissions.

Section 3.7 Legal Compliance

We use data to comply with legal obligations, respond to lawful requests, resolve disputes, keep required records, and enforce legal rights.

Section 3.8 Business Transfers

If DrobeMe is involved in a merger, acquisition, restructuring, financing, or sale of all or part of its business or assets, personal data may be transferred to the acquiring or surviving entity as part of that transaction. Where required by law, we will notify you before your personal data becomes subject to a different privacy policy or is transferred to a new controller.

Section 3.9 Advertising, Ad Measurement and Remarketing

If you allow "Ads and ad measurement" in the app, we share app usage events (for example app opens, sign-ups, and purchases), an app instance identifier, device information (such as device model and operating system), general location derived from your IP address, and, where permitted, your device's advertising identifier with Google through Google Analytics for Firebase, Google Tag Manager, and Google Ads. We do this to measure which of our ads lead to app installs, sign-ups, or purchases, and to show DrobeMe ads to people who have used the app, in other apps and on other websites (remarketing).

On iOS, we access your advertising identifier (IDFA) only if you also allow tracking in Apple's App Tracking Transparency prompt, which we show only after you allow ads. If you decline that prompt, the IDFA is not shared, and your advertising choice in the app stays as you set it.

The legal basis is your consent (Article 6(1)(a) GDPR). Advertising consent is optional, separate from analytics consent, off until you turn it on, and not required to use DrobeMe. You can withdraw it at any time in Settings → Privacy & data, and on iOS also in iOS Settings → Privacy & Security → Tracking. Withdrawal stops future sharing and does not affect processing that happened before it.

We do not use your body images, body type or fit data, closet photos, or AI chat content for advertising.

Google may process the data it receives as an independent controller for its own purposes. For more information, see Google's Privacy Policy (https://policies.google.com/privacy) and how Google uses information from sites or apps that use its services (https://policies.google.com/technologies/partner-sites).

Section 5.1 Fashion Only

We use body type, body image, and fit inputs only for fashion, cosmetic, wardrobe, fit-preference, and styling purposes.

Section 5.2 No Medical Use

We do not use this data to diagnose, treat, monitor, or infer medical conditions.

Section 5.3 No Biometric Identification

We do not use body images, body type inputs, fit inputs, or photos for facial recognition, identity verification, biometric authentication, or creating biometric templates for identifying you.

Section 5.4 Consent

Body image tracking is optional. Before using body image tracking, we will request a separate consent or acknowledgement. You may withdraw consent and delete body image data through the app or by contacting us.

Section 5.5 Higher Protection

Because body images may be sensitive, we apply additional safeguards, including access controls, encryption in transit, restricted internal access, and deletion tools.

Section 6.1 AI Providers

Some AI Features may use third-party AI providers, including OpenAI and other providers listed in Section 9.

Section 6.2 Data Shared With AI Providers

Depending on the feature, data shared with an AI provider may include:

• quiz responses;
• style preferences;
• body type selections;
• fit preferences;
• closet item metadata;
• clothing categories, colors, brands, and sizes;
• occasion, weather, budget, and color filters;
• free-text prompts;
• request IDs and technical metadata needed to route the request.

Section 6.3 Purpose

Data is shared with AI providers to generate and return styling recommendations, outfit ideas, chat responses, virtual try-on assistance, product matches, or related outputs you request.

Section 6.4 Your Control

Where required, we obtain your consent before sharing personal data with third-party AI providers. If you decline, AI Features requiring that provider will be disabled.

Section 6.5 Model Training

Where DrobeMe uses OpenAI through API or developer services, DrobeMe does not enable optional data-sharing or similar programs that would allow OpenAI to use DrobeMe API inputs and outputs to train or improve OpenAI foundation models, unless we clearly notify you and obtain any required consent.

Section 6.6 International Processing

AI providers may process data outside your country. Where required, we use appropriate safeguards, such as Standard Contractual Clauses or other lawful transfer mechanisms.

Section 7.1 Affiliate Link Attribution

When you tap an external shopping link, DrobeMe, affiliate networks, and retailers may process attribution data, such as link identifiers, timestamps, device/app identifiers, retailer IDs, product IDs, and click reference IDs.

Section 7.2 Third-Party Retailer Sites

When you leave DrobeMe and visit a retailer website, that retailer's own privacy policy and cookie policy apply. DrobeMe does not control retailer websites.

Section 7.3 Commission Data

Affiliate networks or retailers may report transaction status, order value, commission, cancellation, or return information to DrobeMe for attribution. We do not need or request full payment card details.

Section 7.4 Links to Other Websites and Services

Beyond retailer links, the Platform may contain links to other third-party websites or services that are not operated by us — for example, links you or other users share, or links to social media platforms. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

Section 8.1 Service Notifications

We may send service messages about your account, security, purchases, product changes, legal updates, or requested features.

Section 8.2 Push Notifications

With your permission, we may send push notifications, including outfit reminders, daily styling suggestions, weather-based looks, closet prompts, or shopping recommendations. You can disable push notifications in your device settings or app settings.

Section 8.3 Marketing

We send marketing emails or promotional messages only where permitted by law. You can unsubscribe at any time. Showing you DrobeMe ads in other apps and on other websites (remarketing) is separate from marketing emails and happens only with your advertising consent (see Section 3.9).

Section 11.1 General Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Section 11.2 Account Data

When you delete your account, we close it immediately and sign you out. Your email address is released at that point, so it may be used to create a new account, and your name and profile photo are removed from the closed account. Other account data is retained as described in Section 11.3.

Section 11.3 Closet, Outfit, and Body Image Data

We keep closet, outfit, and body image data while your account is active or until you delete the specific content. When you delete (close) your account, we do not delete this data automatically. We retain it for as long as applicable law requires (for example accounting, tax, security, and dispute-resolution obligations) and no longer use it to provide the Platform. Deleted data may also remain in encrypted backups until those backups are overwritten on their normal cycle. If you want this retained data erased completely, see Section 12.2.

Section 11.4 Backups

Deleted data may remain in encrypted backups for a limited period until overwritten according to backup cycles, unless restoration is required for security, legal, or disaster-recovery purposes.

Section 11.5 Legal and Security Retention

We may retain limited records where necessary for legal compliance, accounting, fraud prevention, security investigations, dispute resolution, or proof of deletion.

Section 11.6 Analytics and Advertising Data

We keep analytics and advertising data for 14 months in Google Analytics for Firebase, after which it is deleted or aggregated. We keep analytics data in Amplitude until you request complete erasure of your data (see Section 12.2). When you withdraw analytics or advertising consent, we stop collecting new data for that purpose.

Section 12.1 How to Delete

You can delete your account:

• in the app via Settings > Delete Account or equivalent;
• by contacting support@drobeme.ai

Deleting your account closes it immediately: you are signed out, your email address is released for reuse, and your name and profile photo are removed. This is different from erasure of your other data — see Section 12.2.

Section 12.2 What Deletion Includes

Deletion closes your account immediately: your email address is released and may be reused, and your name and profile photo are removed. We do not delete your remaining records straight away — including closet items, outfits, body images, uploaded images, and style preferences. We retain them for as long as applicable law requires and no longer use them to provide the Platform. If you want these retained records erased completely, contact support@drobeme.ai. We will erase them unless we are legally required to keep specific records, in which case we will tell you which ones and why, and we will confirm once the erasure is done.

Section 12.3 Effect of Deletion

Closing your account cannot be undone, and you will lose access to content, subscriptions linked to app data, saved looks, AI history, body image history, and wardrobe records. Closing your account is not the same as erasing your retained data — see Section 12.2 for how to request complete erasure.

Section 13.1 Response Timeframe

We will respond to your request without undue delay and, in any event, within one month of receipt. Where necessary, taking into account the complexity and number of requests, this period may be extended by a further two months; if so, we will inform you of the extension and the reasons for the delay within one month of your request.

Section 13.2 Right to Object to Direct Marketing

Where we process your personal data for direct marketing purposes, you have the right to object at any time, free of charge, including to any related profiling. Once you object, we will stop using your personal data for direct marketing.

Section 13.3 Supervisory Authority

If you believe our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.

Section 15.1 Data Breach Notification

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it, in accordance with Article 33 GDPR. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, in accordance with Article 34 GDPR.

Section 18.1 Website

Our website, www.drobeme.ai, uses Google Tag Manager to load analytics and advertising tags provided by Google and, where applicable, other partners. These tags may set cookies or similar technologies to measure how visitors use the website and to measure the performance of our marketing campaigns.

When you first visit the website, a cookie banner asks whether you accept analytics and advertising cookies. Until you choose, and if you select "Reject all", these cookies are not set, and we use Google Consent Mode to signal to Google tags that analytics and advertising storage is denied. In that state, Google tags may still send limited, cookieless signals (such as the fact that a page was loaded) without reading or writing analytics or advertising cookies.

We store your choice in your browser's local storage so the banner does not reappear on each visit. This storage is strictly necessary to remember your preference and does not require consent.

You can change or withdraw your choice at any time by selecting "Cookie settings" in the website footer or by clicking here. Withdrawing consent does not affect processing carried out before withdrawal.

Section 18.2 Mobile App

In the app, analytics and advertising technologies are used only after you allow them, and each can be turned on or off separately at any time in Settings → Privacy & data. Withdrawing consent does not affect processing carried out before withdrawal.

On iOS, we access your advertising identifier (IDFA) only if you allow ads in the app and also allow tracking in Apple's App Tracking Transparency prompt (see Section 3.9).