Privacy Policy

Who is responsible

Mohammad Elzahaby, Margaretenstraße 154a/24, 1050 Wien, Austria, is responsible for Outfits’ data processing. Email hello@outfits.today with privacy questions or requests. The imprint has the full provider details.

What we collect

On your iPhone

Your saved garments and reference images, outfit plans, favorites, calendar entries, collages, optional outfit journal photos, and preferences are stored on your iPhone. Sign-in credentials are kept in the device Keychain. The wardrobe is not synced to your Outfits account or separated by account. Signing out or deleting the online account does not erase it. Your device backups may include local data according to your Apple settings.

Initial garment detection and cutouts, duplicate matching, color estimates, outfit naming, and matching an optional journal photo to saved clothes run on the iPhone. A journal photo chosen from Photos or taken with the camera stays local and does not enter the online garment-processing queue. Camera permission is requested only when you choose to take a photo.

When you use the online service

We process your email address, an account identifier, hashed one-time codes and session secrets, legal-acceptance record, selected garment reference photos, garment details, quality warnings, generated catalogue images, job status, limited usage and security records, and the purchase identifiers and status needed to verify an Apple subscription. We do not receive your payment-card details. An optional processing Live Activity uses a temporary Apple push token and anonymous progress counts, not photos or garment names.

Photos may show faces, other people, your home, or sensitive details. Please choose or crop photos carefully. Outfits does not use photos to identify people.

On the website

Waitlist signup uses your verified email and confirmation record. It creates or reuses an app account for that email, but does not sign you in to the app or website. The waitlist is separate from the app account; there is no newsletter. Support email contains what you send us.

Our host may record IP addresses, browser details, requested URLs, referrers, and timestamps in ordinary access and security logs. Our private editorial dashboard separately stores daily page-view and coarse request-flow totals without IP addresses, browser identifiers, or full referrer URLs. Those totals do not identify unique visitors or reconstruct a person’s journey.

Why we use it

• Provide your account and requested features: email sign-in, selected-photo processing, temporary results, and subscription access. This is necessary for our contract or steps you ask us to take before one (GDPR Article 6(1)(b)).
• Send a launch notice: we use your verified waitlist email only with your consent (Article 6(1)(a)). You can leave at waitlist preferences or email us. Requesting a code alone does not join the list.
• Keep the service safe and usable: rate limits, abuse prevention, temporary job cleanup, technical diagnostics, website hosting, aggregate page counts, and private admin sign-in rely on our legitimate interests (Article 6(1)(f)).
• Answer requests and meet legal duties: support and pre-contract questions use Article 6(1)(b) or (f); records required by law use Article 6(1)(c).

An email address and code are needed for an account or waitlist choice; selected garment references are needed for online AI features. Public pages and free website tools can be used without an app account or personal photos. Selecting a photo and confirming upload is a feature instruction, not the legal basis of consent for the processing needed to deliver it.

Photo processing and weather

After local detection, subscribed online quality checks and catalogue-image creation send the references you select, with relevant garment names or descriptions, to Outfits’ private server and OpenAI. We do not include your email address in those OpenAI requests. Images and temporary results are stored privately, outside the public website. The app needs an internet connection for these steps; provider output may be incomplete or wrong.

Optional weather does not use GPS or request device-location permission. An automatic city suggestion comes from your network IP through IPWhois; VPNs or mobile networks may make it inaccurate. You can instead choose a city using Apple Maps search. Apple receives the search and selected city coordinates to provide WeatherKit data under Apple’s privacy policy. A chosen city and short-lived weather cache stay on this iPhone; city/weather data is not attached to outfits or sent to Outfits’ server or OpenAI. You can turn weather off in Settings.

Who receives data

• OpenAI receives selected garment references and text for quality checks and image generation.
• SiteGround and email delivery providers host private account/jobs and deliver one-time codes or a requested launch notice.
• Apple handles App Store billing and subscription management, Maps/WeatherKit requests, and optional Live Activity push delivery. We receive limited purchase status; push updates carry counts and status, not photos or email.
• Advisers or authorities may receive data only where necessary for a legal duty or claim.

Some providers may process data outside Austria or the European Economic Area. Where no European Commission adequacy decision applies, transfers require safeguards such as Standard Contractual Clauses. Contact us for information about the safeguards relevant to your data.

How long data stays

• On your iPhone: until you remove the data or app, subject to your device-backup settings.
• Sign-in: codes expire after 10 minutes; app sessions expire after 30 days unless revoked sooner.
• Photo jobs: source photos and unfinished jobs expire after 15 minutes. Completed catalogue images may remain available for up to 24 hours so the app can retrieve them. A half-hourly cleanup removes expired private files and requests provider-response deletion; interrupted cleanup and hosting backups can last longer.
• Provider copies: OpenAI’s API data controls describe separate application-state and abuse-monitoring retention, normally up to 30 days with stated exceptions. We request response deletion after retrieval, cancellation, or expiry.
• Other temporary records: Live Activity tokens last at most 8 hours; content-free request keys and usage counters last up to 7 days. Optional admin browser-login tokens last up to 30 days.
• Account, waitlist, and support: account and entitlement data remain while the account exists; the waitlist email remains until you leave or request deletion. Support mail stays only as needed to answer and document the request or meet a legal duty.
• Website: aggregate page-view totals last up to 400 days; hosting logs and backups follow the host’s operational cycles.

Legal duties, security incidents, claims, failed cleanup, and backup cycles can require longer retention. Where we cannot give a fixed period, we use what is necessary for the purpose and then delete or anonymize it.

Your choices and rights

You can sign out or delete the online account in app Settings, delete local wardrobe data separately, turn off weather, or leave the waitlist. Account deletion revokes server sessions and removes account and temporary job data, subject to in-flight cleanup and legal retention. It does not erase the wardrobe on your iPhone, remove a separate waitlist choice, or cancel an Apple subscription. Manage or cancel a subscription through Apple.

Under the GDPR, you may have rights to access, correct, erase, restrict, or receive your data; object to processing based on legitimate interests; withdraw waitlist consent for the future; and challenge qualifying solely automated decisions. Our garment processing does not make legal or similarly significant decisions about you. Email hello@outfits.today to make a request. We may verify your identity and normally reply within one month, subject to lawful extensions.

You may complain to a supervisory authority. In Austria, this is the Austrian Data Protection Authority.

Cookies, security, and changes

The app has no advertising or cross-app tracking SDK. Public website pages use no advertising or analytics cookies. Waitlist forms use a necessary short-lived session cookie; the private admin area uses a session cookie and an optional 30-day remembered-browser cookie. These are not used for advertising. Production connections use HTTPS; codes and server sessions are stored as hashes and private jobs are access-controlled. No internet service can guarantee absolute security.

Outfits is not intended for anyone who cannot enter the relevant agreement or provide required consent under the law where they live without a parent or guardian’s authorization. Contact us if a child has submitted data without it. We will update this page and its date when our product, providers, or legal obligations change, and give further notice where required.