Privacy Policy

Account information: email address and password (hashed, never stored in plain text) when you sign up.

Style profile: body measurements, style preferences, color season, and aesthetic choices that you voluntarily enter.

Closet items: photos you upload, item names, categories, and metadata you provide.

Usage data: pages visited, features used, and events (e.g., outfit generated, item added) collected via PostHog analytics.

Connected accounts: if you connect Pinterest or Instagram, we store OAuth tokens and basic profile info (username, profile photo) to enable import features.

Payment information: billing is handled entirely by Stripe. We never see or store your card number — only a Stripe customer ID.

Device & location: for weather-based outfit suggestions, we request your location (with your permission) and do not store it beyond the current session.

• To provide and personalize the MyCloset experience (AI outfit suggestions, style advice, health score)
• To sync your closet, outfits, and moodboards across devices
• To process your subscription and manage billing via Stripe
• To send transactional emails (account confirmation, password reset) — no marketing email without your consent
• To detect and fix errors via Sentry error reporting
• To understand feature usage and improve the product via PostHog analytics

We do not sell your personal data to third parties. We do not use your closet photos or style data to train AI models.

MyCloset uses Claude (by Anthropic) to power outfit suggestions, style advice, and the Mia chat assistant. When you use these features, your style profile and relevant closet data are sent to Anthropic's API to generate a response. Anthropic's privacy policy governs how they handle API data. We do not use your data to fine-tune or train any AI model.

Your data is stored on Supabase (hosted on AWS). All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Closet photos are stored in a private Supabase storage bucket accessible only to your account.

We apply Row Level Security policies in the database so that no user can access another user's data, even if they know the record ID.

Your data is retained as long as your account is active. If you delete your account, we delete your profile, closet items, outfits, and moodboards within 30 days. Backups may retain the data for up to 90 days before being purged.

We use the following third-party services, each with their own privacy policies:

• Supabase — database and storage (supabase.com/privacy)
• Anthropic — AI features (anthropic.com/privacy)
• Stripe — payments (stripe.com/privacy)
• PostHog — analytics (posthog.com/privacy)
• Sentry — error monitoring (sentry.io/privacy)
• Vercel — hosting and analytics (vercel.com/legal/privacy-policy)

We use a single session cookie for authentication (managed by Supabase Auth). We do not use advertising or tracking cookies. Analytics events are sent via a JavaScript snippet (PostHog), which may use localStorage.

Depending on your location, you may have rights under GDPR, CCPA, or other laws, including:

• Access: request a copy of your data
• Deletion: request deletion of your account and all associated data
• Correction: update inaccurate data (via your profile settings)
• Portability: export your closet data
• Objection: opt out of analytics by disabling PostHog tracking (email us)

To exercise any right, email us at itsebonychase@gmail.com. We respond within 30 days.

MyCloset is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us immediately.

We may update this policy. Material changes will be communicated via email or an in-app notice. Continued use after changes constitutes acceptance.

MyCloset
Email: itsebonychase@gmail.com