Privacy Policy

Last updated: 24 October 2026

Outfit Arhitect (“Outfit Arhitect”, “we”, “us”) is a personal styling app for iOS and Android. This policy explains what personal data we collect when you use the app and our websites, why we collect it, who we share it with and the choices you have. We process personal data in line with the EU General Data Protection Regulation (GDPR).

In short: we use your data only to give you outfit suggestions and run your account. We do not sell your data, we do not show ads, and you can export or permanently delete your account and all your photos from inside the app at any time.

1. Who is responsible for your data

Outfit Arhitect is the controller of the personal data described in this policy. You can reach us at hello@outfitarhitect.com for any privacy question or request.

2. Data we collect

Account

  • Email address, display name and preferred language.
  • A password, stored only as a one-way hash — or, if you sign in with Google or Apple, the account identifier and email address that provider shares with us. With “Hide My Email”, Apple gives us a private relay address instead of your real email.

Style profile

  • The answers you give during onboarding: gender, age range, lifestyle, city and country, body shape, height and style preferences.
  • For color analysis, the selfie you choose to take and the results derived from it (skin undertone, eye and hair color, color season). We use the photo only to determine your color palette — never to identify you.

Wardrobe, outfits and conversations

  • Photos of your clothes and the attributes detected from them (category, colors, pattern, season and similar).
  • Outfits you generate, save, wear or rate, and your wear history.
  • Messages and photos you send to the AI stylist chat.

Calendar (optional)

  • If you connect Google Calendar or import events from your phone’s calendar, we read the title, start and end time and location of your upcoming events (the next 14 days of your main calendar) so we can suggest outfits for them. Event titles are sent to our AI provider only to recognise the occasion (for example a business meeting, a wedding or a workout). Google Calendar access is read-only — we never create, change or delete events — and access tokens are stored encrypted.

Location

  • The city you enter, converted to approximate coordinates to fetch the weather forecast. We do not track your device’s GPS location.

Notifications and device

  • If you allow notifications: a push token, the device platform and app version, and your notification preferences.

Subscription and payments

  • Your subscription plan and status. Payments are processed by Stripe; we never receive or store your full card details.

Technical and security data

  • IP address, request logs and records of security-relevant actions (such as sign-ins, password resets or account deletion), and usage records of AI features (time, feature, cost) to keep the service secure and within fair-use limits.

3. How we use your data and why

  • To provide the service — create your account, build your digital wardrobe, analyse your colors and generate outfit suggestions and chat answers (performance of our contract with you).
  • Optional features — calendar-aware outfits and push notifications (your consent, which you can withdraw at any time in the app or your phone’s settings).
  • Account emails — welcome, password-reset codes and subscription notices (contract).
  • Security, abuse prevention and service quality — rate limits, fraud prevention, troubleshooting and cost control (our legitimate interests).
  • Legal obligations — for example keeping invoices and tax records.

Information received from Google (Sign in with Google and Google Calendar) is used only to provide or improve the user-facing features described in section 7; it is not used for any of the other purposes in this list or anywhere else in this policy.

We do not sell your personal data, we do not use it for advertising, and we do not use your photos, wardrobe or conversations to train AI models.

4. Artificial intelligence

Outfit suggestions, clothing recognition, color analysis and the stylist chat are produced by AI models. To generate them, we send the relevant photos and text (for example a clothing photo, your style profile or your chat message) to AI model providers through OpenRouter. They process the data only to return a result to us. To remove the background from clothing photos, we send the clothing photo to fal.ai, which returns the cut-out image without keeping it. AI suggestions are styling ideas, not professional advice.

5. Who we share data with

We use carefully selected service providers that process data on our behalf and under our instructions:

  • Hetzner Online (Germany) — hosting of our servers, database and photo storage in the EU.
  • OpenRouter and the AI model providers it routes to (such as OpenAI and Google) — AI processing, as described above.
  • fal.ai (Features & Labels, Inc., USA) — background removal from clothing photos.
  • Stripe — subscription payments and billing.
  • Resend — sending account and subscription emails.
  • Google Firebase Cloud Messaging and Apple Push Notification service — delivering push notifications.
  • Google and Apple — sign-in, if you choose “Continue with Google / Apple”, and Google Calendar, if you connect it.
  • Open-Meteo — weather forecasts (receives only approximate coordinates, no account data).

We may also disclose data when required by law or to protect the rights and safety of our users.

6. International transfers

Our servers are in the European Union. Some providers listed above (such as AI providers, fal.ai, Stripe or Resend) may process data in the United States or other countries. Where that happens, transfers rely on appropriate safeguards such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

7. Google user data

This section applies to the information Outfit Arhitect receives from Google APIs and takes precedence over the rest of this policy for that information.

What we access

  • Sign in with Google (scopes openid, email, profile): your Google account identifier, email address and name.
  • Google Calendar, only if you connect it (scope calendar.events.readonly, read-only): the title, start and end time and location of events in the next 14 days of your primary calendar.

How we use it

  • Your Google account information is used only to create your Outfit Arhitect account and sign you in.
  • Calendar events are used only to show your upcoming plans in the app and to suggest outfits suited to each occasion.
  • Google user data is used only to provide or improve these user-facing features, which are prominent in the app’s interface. It is never used for any other purpose: not for advertising, retargeting or personalised ads, not for marketing emails, not for analytics or research, not to build profiles for others, not to determine credit-worthiness or for lending, and not to develop, train or improve AI or machine-learning models.

How we share it

  • We do not sell Google user data and we do not transfer it to data brokers, advertising platforms or information resellers.
  • To recognise the occasion of an event, its title is sent to our AI processor (OpenRouter and the model provider it routes to), which processes it only to return the result to us and does not use it to train models. Our hosting provider (Hetzner, EU) stores the data on our behalf.
  • Otherwise we transfer Google user data only if you ask us to, if required by law, or as part of a merger or acquisition with the same protections.

Who can read it

No person at Outfit Arhitect reads your Google user data, except with your explicit consent (for example when you ask support for help), when necessary for security purposes such as investigating abuse, or to comply with the law.

Protection, retention and deletion

Data is transmitted over encrypted connections and Google access tokens are stored encrypted. You can disconnect Google Calendar in the app at any time: we then revoke our access at Google and delete the events imported from it. Deleting your account deletes all Google user data we hold. You can also revoke access from your Google Account settings at any time.

Outfit Arhitect’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. How long we keep data and how to delete your account

  • We keep your account data for as long as your account exists.
  • To delete your Outfit Arhitect account, open the app and go to Profile → Privacy & data → Delete my account. If you no longer have the app, email hello@outfitarhitect.com from the address you signed up with and ask us to delete your account; we do it within 30 days and confirm by email.
  • When you delete your account, we permanently delete your profile, wardrobe, outfits, conversations, calendar data and all your photos immediately, cancel any active subscription and revoke your sign-in sessions.
  • You can also delete just your original (raw) photos at any time from the same Privacy screen.
  • Invoices and payment records are kept for the period required by accounting law. Security and AI usage logs that no longer identify your account may be kept for a limited time for security and cost accounting.

9. Your rights

You have the right to access, correct, export (portability), restrict or delete your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. You can export or delete your data directly in the app, or write to hello@outfitarhitect.com. You also have the right to lodge a complaint with a data protection authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP).

10. Security

Data is transmitted over encrypted connections (HTTPS). Passwords are hashed, OAuth tokens are encrypted at rest, photos are served only through private, signed links, and administrative access is limited, protected by two-factor authentication and logged.

11. Children

Outfit Arhitect is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the app evolves. We will post the new version here with a new “Last updated” date and, for significant changes, notify you in the app or by email.

13. Contact

Questions or requests: hello@outfitarhitect.com.

This policy is also available in Romanian.