Privacy policy
OutfitNest is a family wardrobe app: you photograph clothes, the app catalogs them, suggests outfits, can show an adult how an outfit looks on their own photo, and can write a personal style report. This policy explains what we collect, why, who processes it, how long we keep it and how you control it. It applies to the OutfitNest app (iOS and Android) and to this website.
Providing personal data is voluntary. Some features cannot work without certain data: for example, the wardrobe needs photos of clothes and try-on needs a body photo. Nothing in the app requires you to add information about other family members beyond what you choose to add.
1. Who we are
The service is operated by Tom Williams, Rishon LeZion, Israel (“we”). Contact: support@outfitnest.app. We are the controller of the personal data described here.
2. What we collect
| Data | Details |
|---|---|
| Account | Email address, a sign-in identifier, language, country, time zone, and the city you choose for weather. Sign-in uses one-time codes sent by email; we do not store a password. |
| Family profiles | For each profile you create: name or nickname, avatar, profile type (adult, child, baby), optional birth year and clothing size, the gender or presentation you choose for the profile (required — it determines which clothes and products are suggested, and the wording), and your work-attire setting. A profile photo, if you choose to add one (optional, any profile): kept only on your device and never sent to us — we hold no copy of it, and it is removed with the app, when you remove it in the profile form, or when you delete the profile or the account. |
| Wardrobe | Photos of clothes, shoes and accessories, cut-out versions, measured colors and the catalog details generated from each photo (type, description, tags), sizes, saved outfits and your feedback on suggestions. A photo the app cannot catalog (for example: it is not clothing, it shows several items, or it is unclear) does not enter your wardrobe: it is returned to you with an explanation, kept until you remove it and for no more than 14 days, and then deleted automatically. Likes and “useful / not for me” responses on items, outfits and tips are stored so that suggestions match your taste. |
| Purchase recommendations | The app recommends an item worth adding to your wardrobe, based on what is already in it and on your style report. The matching is computed only on our side. When a product or a store button from a store we have a commercial relationship with is shown, it is labeled “Ad”, with a sentence next to the label and an explanation of why it was shown. There are two kinds of such stores: some pay to be included in the app; on others we earn a commission from the store or its affiliate network when you buy through the link, and the store itself pays nothing to appear. The sentence next to the label says which applies. A recommendation that has a fitting product or store from either kind is shown ahead of other recommendations; further such products that fit your wardrobe, colours and size are shown as well. Neither payment nor commission can make a product fit: a product that does not suit you is not shown. Among products that fit equally well, the order may depend on the terms of our agreement with the store. The price you pay at the store does not change because you came from the app. In the “I want to buy” search, such stores relevant to your search are shown first (labeled “Ad”), followed by other stores we have no relationship with; when you tap a store, generic search words from the app’s own vocabulary (for example “black dress women”) are passed to it as part of the link. For a store that works through an affiliate network, only those vocabulary words are passed on, never the free text you typed; for a store we link to directly, the text you typed may be passed as the search words. Free text typed into the search is not stored by us. We keep a record of which recommendations were shown, clicked or dismissed. We give the store, and its affiliate network, no information about you, your wardrobe or your profile. When you tap a link, the store and its network receive what any website receives when a link is opened — for example your IP address and browser type — together with the search words in the link and a random identifier that tells them nothing about you; if a purchase is made, the store or its network notifies us that an order was placed, its amount and the commission, so that the commission can be recorded — without details about you or the contents of the order. You can turn ads from stores off at any time, including on a free account; with Family+ they are off by default. |
| Body photo (adult profiles only) | A full-body photo of the adult the profile belongs to, uploaded to try outfits on. From it we compute body proportions and skin and hair color values used only to match clothing colors. Each time a try-on image is generated, our server also computes a temporary numeric face template from the photo and from the generated image, only to check that the generated image still shows the same person (see section 4). The face template is biometric data; it exists only in memory during that check and is never stored. |
| Generated content | Try-on images, daily outfit suggestions and style reports, with the questionnaire answers you give for the report. |
| Tokens and purchases | Token balance and history, subscription status, and purchase records (product, date, store transaction identifier) received from the App Store or Google Play through our subscription provider. We never receive your card details. |
| Advertising | If you choose to watch rewarded ads, the ad provider (Google AdMob) processes your device’s advertising identifier, device and network information and ad interaction data, according to the consent you give in the app and your device settings. We receive only a confirmation that an ad was completed, so we can credit a token. |
| Technical data | IP address, device type, app version and request logs for security, rate limiting and troubleshooting; and AI usage records (which feature ran, which model, and what it cost) to keep the service within its limits. |
| Support | Emails you send us and our replies. |
We do not collect precise location. Weather uses only the city you choose. The website sets no cookies of ours and uses no analytics.
3. How we use data and on what legal basis
- Providing the service you signed up for: storing your wardrobe, cataloging photos, suggestions, try-on images, style reports, tokens and support (performance of our contract with you; in Israel, the purpose you provided the data for).
- Body photos, body measurements and the temporary face templates computed for the face check: only with your explicit consent, which you give in the app before uploading a body photo or creating a style report (Article 9(2)(a) GDPR and UK GDPR; explicit consent under Israeli, Illinois, Texas and Washington biometric law). You can withdraw consent at any time by deleting the body photo.
- Child and baby profiles: created and controlled by the adult account holder as the child’s parent or guardian (contract with the account holder).
- Payments and tokens: crediting purchases and subscriptions, preventing fraud, and keeping records that tax and accounting law require (contract; legal obligation).
- Rewarded ads: according to the consent you give in the in-app consent form and your device’s ad settings (consent). Without consent you can still buy tokens.
- Security and abuse prevention: rate limits, spending caps, blocking misuse, and hiding reported images (our legitimate interest in a safe, available service).
- Service messages: sign-in codes, and notices about changes to these documents or to paid features (contract; legal obligation). We do not send marketing email.
We do not sell your personal data and we do not share it for cross-context behavioral advertising, other than the device identifiers the ad provider processes when you watch a rewarded ad with your consent. We do not use your photos or data to train AI models, and our AI providers are contractually prohibited from doing so. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
4. Body photos, face data and style measurements
Only adult profiles can add a body photo, and only after the adult confirms they are 18 or older and consents. The photo must show the person the profile belongs to. It is used to generate try-on images of that person’s own clothes on them and to measure proportions and coloring for the style report. Measurements are computed on our own servers. We describe bodies only through proportions and clothing cuts, never by weight, size or appearance scores, and we never infer health, ethnicity or any other characteristic from a body photo.
To check that a generated image still shows the same person and not someone else, our server computes a face template (a list of numbers derived from the face) from the body photo and from the generated image, and compares the two. The templates exist only in the server’s memory for the seconds of that comparison and are then discarded: they are never stored in our database or files, never used to identify you or anyone else, never matched against other people’s photos, never shared or sold, and never sent to our AI providers. What we do store is the body photo itself, the measurements derived from it and the generated images. These are deleted together: when you delete the photo, the profile or the account, and in any case no later than three years after your last activity in the app.
You can delete a body photo at any time on the body-photo screen (Try-on → Change body photo). Deleting it withdraws your consent: try-on and body analysis stop for that profile, and the measurements, try-on images and style reports made from that photo are deleted with it.
Fitting-room photos (“I’m in a store”)
An adult profile that has given the consent described in this section can photograph themselves in a store wearing a garment they are trying on and ask the stylist whether it works for them. The photo is sent to our AI provider (OpenAI via OpenRouter, section 6) together with the palette, the measurements, the key parts of the style report and the list of items in the wardrobe, in order to write the answer — and is deleted as soon as the answer is returned: it is not stored on our servers or in our files unless you tap “Save” on the answer screen, in which case it is stored like a body photo (same retention, same deletion). No face template and no new body measurements are computed from a fitting-room photo. The answer itself (yes / maybe / no, the explanation, the garment type and color) is kept for 24 hours so that you can add a photo from another angle and share it, and is then deleted — unless you chose to save. Other people who appear in the photo are not described and nothing about them is stored. We also keep an anonymous count — garment type, color family and the answer — with no photo, no text and no identity, for the aggregate reports to stores (section 2, “Shopping recommendations”).
5. Children
Accounts are for adults (18 and over). A parent or guardian can add child and baby profiles containing a name or nickname, an optional birth year and size, and photos of the child’s clothes. Child and baby profiles cannot have body photos, face templates, measurements or try-on images, and profile data is not passed to stores or used for third-party advertising; rewarded ads (AdMob) are not available while a child’s profile is active. Shopping recommendations for children’s clothes from stores we have a commercial relationship with are matched on our systems to the clothes and size in the profile, are labelled “Ad”, and are addressed to the parent — the account holder, who manages and operates the profile. The parent may optionally add to the profile a general skin tone (one of six swatches), eye and hair colour as categories (dark / medium / light), colours not to suggest, and preferences in words — so that picks and tips match in colour. These are stored in the profile only, never passed to stores, not derived from any photo, and can be deleted at any time. We do not knowingly collect personal data directly from children and we do not knowingly allow anyone under 18 to create an account; if we learn that an account was created by a minor, we delete it. A parent can edit or delete a child’s profile at any time.
6. AI processing and generated content
To catalog photos, suggest outfits, generate try-on images and write reports, we send the necessary photos and wardrobe details to AI providers acting as our processors: OpenAI (GPT) for recognizing clothes, outfit suggestions, reports and translation, and Google (Gemini) for try-on images, both via OpenRouter, and, as a backup, Anthropic (Claude API). They process the data on our instructions, under data processing terms and paid API terms that do not allow them to use it to train their models; a provider may keep short-term abuse-monitoring logs under its API terms. AI output can be wrong; you can remove an item from your wardrobe at any time, and we will correct catalog details on request.
Try-on images are AI-generated. They are labeled as such in the app, carry a visible “AI” mark on the image itself, and carry a machine-readable mark inserted by the image provider. They are meant for your personal use. Do not present a generated image as a real photograph.
7. Service providers and international transfers
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Servers and database | Germany |
| Cloudflare, Inc. | Photo storage and encrypted database backups (R2), network, security and website hosting | Global |
| Supabase, Inc. | Sign-in (email and sign-in codes) | EU |
| Resend, Inc. | Sending sign-in and service emails | USA |
| Google LLC | Try-on images (Gemini, via OpenRouter); rewarded ads (AdMob) | Global |
| Anthropic, PBC | Backup AI processing (Claude API) | USA |
| OpenRouter, Inc. | Routing AI requests to OpenAI and Google | USA |
| OpenAI, L.L.C. | AI processing (GPT): recognizing clothes, suggestions, reports and translation | USA |
| RevenueCat, Inc. | Managing in-app purchases and subscriptions | USA |
| Norwegian Meteorological Institute (MET Norway) | Weather forecast (receives only the approximate coordinates of the city you chose, not your identity) | Norway |
| OpenStreetMap Foundation (Nominatim) | City search (receives only the text you search for, not your identity) | United Kingdom |
| Apple Inc. / Google LLC | App distribution and payment (as independent controllers under their own policies) | Global |
Our servers are in Germany and we are based in Israel. Israel is recognized by the European Commission and the United Kingdom as providing adequate data protection. Where data goes to providers in the United States or elsewhere, we rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum. We may disclose data when the law requires it, to protect our rights or the safety of any person, or to a successor if the service is transferred, in which case this policy continues to apply.
8. How long we keep data
| Data | Retention |
|---|---|
| Wardrobe, profiles, generated content | While your account exists. Profiles you delete are deleted immediately with their photos. An item you remove leaves your wardrobe at once; its photo and catalog details stay with the account (so saved looks keep working) until you delete the profile or the account. |
| Body photos, measurements and try-on images | Until you delete the photo, the profile or the account, and no later than three years after your last activity. Face templates are not stored at all (section 4). |
| Fitting-room photos (“I’m in a store”) | Not stored: deleted as soon as the answer is returned. The answer (without the photo): 24 hours. If you tap “Save”: like a body photo — until you delete it, and no later than three years after your last activity. |
| Account deletion | All profiles, photos, generated content and the sign-in record are deleted immediately; encrypted database backups roll over within 14 days. |
| Purchase records | As long as tax and accounting law requires (in Israel, seven years), without your photos or wardrobe. |
| AI usage records | Detached from your account when it is deleted and kept only as cost statistics. |
| Request logs and IP addresses | Up to 90 days, unless needed to investigate abuse or a security incident. |
| Support emails | Up to two years after the last message. |
9. Your rights
Depending on where you live, you have the right to access your data and receive a copy, correct it, delete it, receive it in a portable format, object to or restrict processing, withdraw consent at any time (without affecting processing before withdrawal), and not be discriminated against for exercising these rights. You can do most of this yourself in the app: edit profiles and item sizes, delete a body photo, delete a profile, or delete your account (Profiles → Delete account, or at outfitnest.app/en/delete-account.html). For other requests, email support@outfitnest.app from the address you sign in with; we may ask you to confirm your identity and we reply within 30 days (or sooner where the law requires). An authorised agent may make a request on your behalf if they show your written permission.
You may also complain to a supervisory authority: in Israel, the Privacy Protection Authority; in the EU, the data protection authority of your country; in the UK, the Information Commissioner’s Office (ICO).
California and other US states. This section is our notice at collection. The categories we collect are listed in section 2, the purposes in section 3, and retention in section 8. We do not sell personal data. Rewarded ads may involve sharing device identifiers with our ad provider for advertising; you can opt out of this sharing at any time through the in-app ad privacy settings (Profiles → Ad privacy settings) and your device’s ad tracking settings, and you will still be able to use the app. We do not knowingly sell or share the personal data of consumers under 16. We collect sensitive personal information (body photos and face templates) only with your consent and use it only for the purposes you consented to.
10. Security
Data is encrypted in transit. Photos are stored in private storage and served only through short-lived signed links. Sign-in uses one-time codes, so there is no password to steal. Access to production systems is limited to the operator. If a security incident affects your data, we will notify you and the relevant authority as the law requires.
11. Changes
If we change this policy in a meaningful way, we will tell you in the app and by email before the change applies, and where the law requires it we will ask for your consent again. Previous versions are available on request.