← Back home

Privacy Policy

Last updated: November 2, 2026

Who we are

TheOutfitStylist (the "Service", "we", "us") is an independent service whose operator is the data controller for personal data processed through it. You can reach us at privacy@theoutfitstylist.com.

What we collect

When you sign up we store your email address, display name, and any profile details you add (city, gender preference for styling, age range, style notes). When you use the Service we store the photos of clothing you upload, the details of each item, the outfits you generate, wear or save, trips you plan, feedback you give on suggestions, and monthly usage counters. If you share an outfit, anyone with the link can see that outfit's photos and description.

To show weather-aware outfits we use the city in your profile or, if you haven't set one, an approximate location derived from your IP address by our hosting provider (city level, never your precise position).

How we use it

We use your data to run your account, generate outfit suggestions and trip plans, send you the emails you've asked for, keep the Service secure, and prevent abuse. We do not sell your personal data and we do not use it for advertising.

Legal basis for processing (GDPR)

We rely on: (a) performance of a contract, to provide the Service you signed up for; (b) legitimate interests, to keep the Service secure and prevent fraud and abuse; (c) legal obligation, where the law requires it; and (d) consent, for analytics cookies and optional emails. You can withdraw consent at any time.

AI processing

To suggest outfits, read clothing photos and plan trips, we send the relevant item photos and details (name, category, colours, formality), the occasion, and the local weather to Google's Gemini API. Under Google's paid API terms, Google does not use this content to train its models. We do not send your email address or name with these requests.

Background removal on clothing photos runs in your own browser; that step doesn't upload your photo anywhere.

Who we share data with

We use these service providers (processors), each only for the purpose listed:

  • Supabase: database, photo storage and sign-in. Stores your account, wardrobe, outfits and trips.
  • Cloudflare: hosting and network delivery. Processes your IP address to serve the site and to estimate your city for weather.
  • Google (Gemini API): AI processing, as described above. If you choose "Continue with Google", Google also handles that sign-in.
  • Open-Meteo: weather forecasts. Receives only a city name or approximate coordinates, never your account details.
  • Resend: sends account and notification emails to your email address.
  • PostHog (EU servers): product analytics, only if you accept analytics cookies.
  • Google Fonts: serves the site's fonts; your browser's request reveals your IP address to Google.
  • Authorities and professional advisers: only where required by law or to defend our legal rights.

International transfers

Some of these providers process data outside the UK/EEA, for example in the United States. Where they do, the transfer is covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Cookies and local storage

Necessary: we store your sign-in session, language and similar settings in your browser so the app works. These don't need consent.

Analytics (optional): with your consent we use PostHog to see which features are used and where people get stuck. It sets cookies and records pages visited and actions taken in the app; if you're signed in it is linked to your account. Nothing is loaded until you click "Accept", and you can change your mind at any time:

Data retention

We keep your data while your account is active. When you delete your account from Settings, your profile, wardrobe photos, outfits, trips and usage counters are deleted straight away. Copies in provider backups expire within 30 days. If you unsubscribed from emails, we keep your address on a do-not-email list so we never email you again. Analytics data in PostHog is kept for up to 12 months.

Security

We use encryption in transit (HTTPS/TLS), encryption at rest for stored data and photos, row-level security so only you can access your wardrobe, and restricted access to administrative systems. No system is perfectly secure, but we take reasonable steps to protect your data against unauthorised access, loss or disclosure.

Your rights

Subject to applicable law (including the GDPR for users in the UK/EEA), you can access, correct, delete, restrict or object to processing of your personal data, ask for a copy in a portable format, withdraw consent, and complain to your local data protection authority. You can edit your profile, delete items and delete your whole account inside the app. For anything else, email privacy@theoutfitstylist.com; we aim to reply within one month.

Contact

Questions about this policy? Email privacy@theoutfitstylist.com.