Privacy Policy — Style In
Effective date: October 18, 2026
This Privacy Policy explains how Style In ("we", "us", "our") collects, uses, and protects your personal data when you use the Style In iOS app (the "App") and visit our website, styleinapp.com (see Section 2.7). Style In is a personal wardrobe and outfit app that lets you photograph your own clothing, organise it into items, looks and capsules, and generate garment images from your photos.
If you have any questions about this policy or your data, contact us at support@styleinapp.com.
1. Who we are
The data controller for your personal data is Style In. The best way to reach us about your data is by email:
- Email: support@styleinapp.com
2. What data we collect, and why
2.1 Account data
To create and secure your account we collect:
- Sign in with Apple: the identifier Apple returns to us, and an email address (which may be Apple's private relay address if you choose to hide your email). If you delete your account, we also ask Apple to revoke Style In's Sign in with Apple tokens (see Section 7).
- Sign in with Google: the identifier Google returns to us and your email address.
- Email + password: your email address and a password hash. We never store your password in plaintext — it is stored as a salted hash using Argon2id (an older salted PBKDF2-HMAC-SHA256 hash is replaced with Argon2id the next time you sign in). We use one-time links for email verification and password reset.
We use this data to authenticate you, keep your account secure, and contact you about your account (for example, verification and password-reset emails).
2.2 Your content
When you use the App you create content, which we store on your behalf:
- Photos of your own clothing that you capture or upload.
- Derived images we generate from your photos, such as cut-out "stickers", masks, and thumbnails.
- Metadata you add or that the App records — items, looks, outfits, and capsules.
Your photos are stored in Cloudflare R2 object storage (see Section 4). We use this content only to provide the App's features to you.
2.2a Looks and capsules you share as a link
If you choose to share a look as a link, we publish a web page at styleinapp.com/look/… showing that look's picture and its name, and nothing else about you: not your name, email, account or any other look. Anyone with the link can open the page. You choose how long the link stays up: 7 days (the default), 30 days, or until you turn it off; sharing it again starts the time again. Shared looks are kept out of search engines: every page asks not to be indexed, so the people you send the link to are the ones who see it. Someone who has the App can also add that look to their own wardrobe: they get a copy of its pieces (each garment's cut-out picture, name, category and colours, never your notes) as their own, and the copy stays theirs after you turn the link off. You can turn the link off at any time in the App. Deleting the look or your account also removes the page and its picture. We don't tell you when someone opens or adds your look, and we don't tell them who you are.
Capsules. You can also share a capsule as a link (a set of your garments and looks for a trip, work, an event or a season). It works the same way as a shared look. We publish a web page at styleinapp.com/capsule/… showing the capsule's picture, its name, its purpose (such as travel or work), its dates if you gave it any, and the pieces in it (up to 60), each with its picture and name, and nothing else about you. It is stored with shared looks and follows the same rules: anyone with the link can open it, you choose how long it stays up (7 days, 30 days or until you turn it off), it is kept out of search engines, and you can turn the link off at any time in the App. Turning it off, deleting the capsule or deleting your account removes the page and its picture. Someone who has the App can add every piece to their own wardrobe: they get the same copy of each piece as from a shared look, as their own garments, and the App also creates a capsule with the same name for them if their plan has room for one. We don't tell you when someone opens or adds your capsule, and we don't tell them who you are.
Reports. If you report a shared look or a shared capsule from the App, we store which one you reported, your account, the reason you chose and when, so we can review it (within 24 hours) and spot repeated abuse. The person who shared it is not told who reported it. We delete your reports when you delete your account.
2.3 AI features (OpenAI)
The App's AI features use OpenAI as a third-party AI provider. We send OpenAI only what each feature needs:
- AI cut-outs (AI cut in the camera). When you run an AI cut-out, the photo you took or chose is sent to OpenAI's image model, which returns every garment in it as a separate picture. Those garment pictures are then sent to OpenAI's vision model to name and categorise each garment.
- Naming garments. When you cut out a garment yourself, its cut-out picture (the sticker, not the whole photo) is sent to OpenAI's vision model to suggest a name and a category for it. This happens automatically once the cut-out is ready.
- Naming looks. When you finish building a new look, a picture of the look's canvas and the names and categories of the garments in it are sent to OpenAI's vision model to suggest a name for the look.
You choose whether AI is used. You can switch AI features off (or back on) at any time in Settings → Privacy & data; while they are off, nothing is sent to OpenAI, and you cut out and name your garments and looks yourself. Depending on the version of the App, it either asks your permission before it sends anything to OpenAI for the first time — and nothing is sent until you allow it — or the AI features are on from the start and work as described above until you switch them off. If you answered "Not now" when the App asked, they stay off until you switch them on.
With the naming requests we also send the App's language, so the names come back in it. We do not send OpenAI your name, your email address or your account details. While the AI features are on, an AI cut-out runs only when you start one, and garment and look naming run automatically as described above; you can always change a suggested name or type your own. The photo or picture we upload for a request is kept in temporary storage only until the request finishes, then deleted. See Section 4 for the provider and Section 6 for international transfers.
2.4 Analytics
We use first-party behavioural analytics to understand how the App is used and to improve it — for example, which screens are viewed and how far people get through a flow (funnels). Each event carries a randomly generated install identifier; once you are signed in, our server also links the events to your account, so we can follow a flow across the sign-in step. The events record what you do in the App, not your photos. They are kept for about 90 days, and the events linked to your account are deleted with it if you delete your account. This helps us diagnose problems and prioritise improvements.
We also use PostHog (PostHog Inc.) for product analytics and to switch App features on or off. PostHog receives usage and interaction events (which screens you open and which buttons you tap), basic device and app information (device model, OS and app version, language), the install identifier and, once you are signed in, your account identifier, and facts about your account: your plan, how you signed in (Apple, Google or email), your usage counts against your limits, your invite code and how many friends it brought, and events from our server such as a sign-up, a finished AI request, or a subscription renewing or being cancelled. Like any web service, PostHog also sees the IP address the App connects from, which can indicate an approximate location. PostHog does not receive your photos, your name, your email address or your password. We do not record session replays (recordings of your screen), and we do not use PostHog for advertising or to track you across other companies' apps or websites.
2.4a Measuring our Snapchat ads (Snap)
We advertise the App on Snapchat. To learn whether those ads work, our server tells Snap (Snap Inc.) when one of three things happens: a phone opens the App for the first time, a new account is created, or a first purchase is made (with its price and currency). Each event carries only its time, the IP address the App connected from and the App's user agent (its build and the phone's system version), and it is marked "tracking not allowed": the App never shows you Apple's prompt asking permission to track you, so Snap is told not to use the event to track you across other companies' apps or websites. We do not send Snap your name, email address, account or install identifiers, your photos or anything else you do in the App. We send these events only for phones connecting from the United States or Canada, where our ads run, judged from the IP address; nothing is sent for phones anywhere else, including the EU, EEA, UK and Switzerland. Snap handles the events under its own terms and privacy policy.
Separately, iOS itself may tell Snap, through Apple's SKAdNetwork, that an install came from one of its ads and how far it got (opened, signed in, added a piece, paid). Apple sends that report without any identifier and days later, so neither Snap nor we can tell whose install it was.
2.5 Purchases
If you buy a premium subscription or an AI cut-out pack, the purchase is made through Apple In-App Purchase (StoreKit). Apple processes the payment and we never receive or store your card or payment details. We receive confirmation from Apple of your subscription status, or of the pack you bought, so we can unlock premium features or add the AI cut-outs to your account. Your purchase carries your account's internal ID, so a pack is added to the account that bought it.
Refund requests for AI cut-out packs (only if you turn it on). If you switch on Share pack use for refunds in Settings → Privacy & data, then when you ask Apple to refund an AI cut-out pack we tell Apple whether the pack reached your account and how much of it you have used (as a percentage), so Apple can take that into account when it reviews your request. Nothing else is shared, nothing is shared while the switch is off (it is off unless you turn it on), and you can switch it off at any time. Apple uses this information only to review the refund request.
2.5a Invite a friend
If you use the invite-a-friend program, we store your personal invite code, and — when a friend enters a code — a record of who invited whom, when the code was entered, and when the invited friend saved their first item (that is what earns the inviter's reward). We also store the rewards each of you earned: extra wardrobe space and — for an inviter with a Premium subscription (With AI or No AI), when the App offers it — AI cut-outs for each friend who joins with the code and saves a first item. The App shows how many AI cut-outs you get for each friend, and for how many friends. The invite link and code contain no personal data, and we never see who you share them with. We use this only to run the program and prevent abuse. If either of you deletes your account, the record naming you is deleted with it; the other person keeps the extra space and AI cut-outs they already earned.
2.6 Push notifications
If you opt in, we send optional push notifications via Apple Push Notification service (APNs). You can turn these off at any time in iOS Settings or in the App.
2.7 Our website (styleinapp.com)
When you visit our website, styleinapp.com, two things record the visit:
- Server logs. Our web server logs each request: the page or file, the time, your browser's user agent (which browser and device), its language, the page that linked you to us (the referrer), technical details of the request (such as the response status), and a shortened IP address. The last part of the address is removed before anything is written (the last 8 bits of an IPv4 address, the last 80 of an IPv6 one), so the log never holds your full IP address. We use the logs to count visits and keep the site working, and delete them after 90 days.
- PostHog web analytics. The site uses PostHog (PostHog Inc.) to see how visitors find and use it: which pages are viewed and how far down you scroll, the site or search that brought you here, which links and buttons you click, how fast pages load, and your browser, device type, screen size and language. It runs without cookies: nothing is stored on your device. To count unique visitors, PostHog's servers combine your IP address and browser details with a random value that changes every day and is then deleted, so a visitor can't be recognised from one day to the next; your IP address is not used to look up your location. We don't identify website visitors or link their visits to an App account, and we don't record sessions. If your browser sends a Do Not Track signal, the site sends PostHog nothing.
3. Legal bases for processing (GDPR)
Because the App is available to users in the EU/EEA and the UK, we rely on the following legal bases under the General Data Protection Regulation (GDPR) and the UK GDPR:
| Purpose | Legal basis |
|---|---|
| Creating and securing your account; storing and showing your content; running features you request (including AI cut-outs) | Performance of a contract (Art. 6(1)(b)) — providing the App you asked for |
| Sending pictures to OpenAI for the AI features: your photo for an AI cut-out, a garment's cut-out to name it, a look's picture to name it | Performance of a contract (Art. 6(1)(b)) — the AI features are part of the App you use; you can switch AI features off at any time in Settings → Privacy & data, and then nothing is sent to OpenAI |
| Publishing a look or a capsule you choose to share as a link, and letting other App users add a copy of it | Performance of a contract (Art. 6(1)(b)) — a feature you ask for, link by link |
| Reviewing reports of shared looks and capsules and removing ones that break our Terms | Legitimate interests (Art. 6(1)(f)) — keeping shared content safe and lawful, limited to what a report needs |
| Sending account, verification, and password-reset emails | Performance of a contract (Art. 6(1)(b)) |
| First-party analytics to maintain and improve the App | Legitimate interests (Art. 6(1)(f)) — keeping the App working well, balanced against your privacy through short retention (about 90 days), no photos, and deletion with your account |
| Product analytics and switching features on or off (PostHog) to understand and improve the App | Legitimate interests (Art. 6(1)(f)) — improving the App, balanced against your privacy by never sending PostHog your photos, name or email, recording no session replays, and never using the data for advertising |
| Optional push notifications | Consent (Art. 6(1)(a)) — you opt in and can withdraw at any time |
| Website server logs: counting visits and keeping the site working | Legitimate interests (Art. 6(1)(f)) — the IP address is shortened before it is written, and the logs are deleted after 90 days |
| PostHog web analytics on our website | Legitimate interests (Art. 6(1)(f)) — understanding how visitors find and use the site, balanced by storing nothing on your device, a visitor count that can't recognise you from one day to the next, no location lookup, no session recordings, and honouring Do Not Track |
| Telling Snap about first opens, new accounts and first purchases, to measure our Snapchat ads (Section 2.4a) | Does not take place in the EU/EEA, UK or Switzerland — nothing is sent for phones there |
| Processing subscriptions and AI cut-out packs | Performance of a contract (Art. 6(1)(b)) |
| Telling Apple how much of a pack you used when you ask for its refund | Consent (Art. 6(1)(a)) — only after you switch on Share pack use for refunds in Settings → Privacy & data, and you can switch it off at any time |
| Meeting legal and tax obligations | Legal obligation (Art. 6(1)(c)) |
You can object to processing based on legitimate interests and withdraw consent at any time (see Section 7).
4. Sub-processors and third parties
We use the following service providers ("sub-processors") to run the App. They process data only on our instructions and only as needed to provide their service. We share your personal data only with providers that give it the same or equal protection as this Privacy Policy describes, and we require each of them to do so:
| Provider | What they do for us | Data involved |
|---|---|---|
| Apple | Sign in with Apple (including revoking it when you delete your account), In-App Purchase (billing), refund reviews for AI cut-out packs (only with your consent), push notifications (APNs) | Account identifier/email, subscription status, purchases, how much of a refunded pack was used (with consent), push tokens |
| Sign-in (Google authentication) | Account identifier, email | |
| Resend | Sends our transactional email (from styleinapp.com) — verification and password-reset messages |
Email address |
| Cloudflare | R2 object storage for your photos and derived images, and for the nightly backups of our database (Section 5); DNS and hosting | Your photos and derived images; the backups hold the account and content data in our database |
| Amazon Web Services (AWS) | Hosting for our server / backend and its database (United States) | Account and content data processed by the backend |
| OpenAI | AI models for AI cut-outs and for suggesting names and categories for garments and looks | The photo you submit for an AI cut-out and the garment pictures it returns; the cut-out picture of a garment you cut out yourself; a picture of a look with its garments' names and categories; the App's language. Never your name, email or account details |
| PostHog (PostHog Inc.) | Product analytics; switching App features on or off; analytics for our website | Usage and interaction events, device and app information, install and account identifiers, plan, sign-in method, usage counts, invite code and counts, server events (such as a subscription renewing), IP address. Never your photos, name, email or password. For website visitors: the pages viewed, referrer, clicks, page speed, browser, device and language, and the IP address the daily visitor count is computed from |
We do not sell your personal data, and we do not use your photos or content to advertise to you.
5. How long we keep your data (retention)
- Analytics data: kept for a short period — approximately 90 days — then deleted. The events linked to your account are deleted sooner if you delete your account.
- Product and website analytics (PostHog): kept for a limited period under our PostHog project's retention settings, then deleted. You can ask us to delete the PostHog data linked to your account at any time (see Section 7).
- Website server logs: deleted after 90 days.
- Pictures sent for the AI features: the copy we upload for a request is deleted from our temporary storage when the request finishes. What OpenAI receives is handled under OpenAI's API data terms.
- Invite records: your invite code is kept until you delete your account, and the record of who invited whom until either of you deletes theirs. The rewards you earned (extra space, AI cut-outs) stay with your account until you delete it.
- Shared looks and capsules: a shared look's or capsule's page, picture and pieces are kept until the link's end date (7 or 30 days, if you chose one), until you turn the link off, delete the look or capsule, or delete your account, or until we take it down after a report — whichever comes first.
- Reports of shared looks and capsules: kept until the reporter's account is deleted, so repeated abuse can be recognised.
- Account and content data (your account, photos, derived images, and metadata): kept until you delete your account or ask us to delete it. When you delete your account, we erase your data, including your stored photos (see Section 7).
- Backups: we back up our database every night, so we can restore the App after a failure. A backup is kept for at most 90 days and then deleted automatically; the copy we keep away from our server (in Cloudflare R2, Section 4) is locked against deletion and changes for its first 30 days. So data you delete — including all the data of a deleted account — can remain in our backups for up to 90 days. We use backups only to restore the App after a failure.
- We may keep limited records longer where we are legally required to (for example, tax records relating to purchases).
6. Where your data is processed (international transfers)
Some of our providers (Section 4) may process data outside your country, including outside the EU/EEA — for example when photos and pictures are sent to OpenAI for the AI features, when product or website analytics are sent to PostHog (hosted in the United States), or when data is stored or served from infrastructure in other regions. Where we transfer personal data of EU/EEA users internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where available, the providers' adequacy or certification frameworks. You can contact us for more detail about the safeguards in place.
7. Your rights
Depending on where you live, you have rights over your personal data. For EU/EEA users under the GDPR these include the rights to:
- Access the personal data we hold about you.
- Rectify (correct) inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict or object to certain processing (including processing based on legitimate interests).
- Data portability — receive your data in a portable format.
- Withdraw consent at any time, where we rely on consent (for example, push notifications, or the AI features in Settings → Privacy & data).
- Lodge a complaint with your local data protection authority: in the EU, the authority where you live or work; in the UK, the Information Commissioner's Office (ICO).
Users in the UK have the same rights under the UK GDPR.
Deleting your account: you can delete your account and its data directly in the App at Settings → Account → Delete account. This erases your data, including your stored photos; the copies in our database backups are deleted within 90 days (Section 5). If you signed in with Apple, the App also asks you to confirm with Apple, and our server then revokes Style In's Sign in with Apple tokens, so Style In's access through your Apple ID ends too.
To exercise any other right, email support@styleinapp.com. We will respond within the time required by law.
8. Children
The App is not directed to children. You must be at least 13 years old to use it. We do not knowingly collect personal data from anyone under that age. If you believe a child has given us personal data, contact support@styleinapp.com and we will delete it.
If you live where the law sets a higher age for agreeing to online services on your own — for example 16 in Germany and Ireland, 15 in France or 14 in Spain — you need your parent's or guardian's permission to use the AI features and to switch on notifications.
9. How we protect your data (security)
We take reasonable technical and organisational measures to protect your data, including:
- Passwords are never stored in plaintext — they are stored as salted Argon2id hashes.
- Data is encrypted in transit (HTTPS/TLS) between the App, our servers, and our providers.
- Access to systems and stored content is limited to what is needed to operate the App.
No system can be guaranteed 100% secure, but we work to protect your data and to address issues promptly.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and tell you in the App or by email before they apply. Where a change needs your consent under the law that applies to you, we will ask for it.
11. Contact us
Questions or privacy requests: support@styleinapp.com
Style In · support@styleinapp.com