Privacy Policy — OutfitRec

1. Introduction

OutfitRec ("we," "our," or "us") operates the OutfitRec mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using the App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

Email address — used for account creation and authentication via Supabase Auth.
User ID — a unique identifier assigned upon registration.

2.2 Clothing Images

Photos you upload — images of clothing items you add to your wardrobe. These are stored in our cloud storage (Supabase Storage) and associated with your account.

2.3 Location Data

Approximate location — when you grant permission, we access your device's location to provide weather-based outfit suggestions. Location data is used in real time and cached locally on your device for up to 30 minutes. We do not store your location on our servers.

2.4 Usage Data

App interactions — outfit ratings, style preferences (thumbs up/down feedback), outfit calendar entries, and AI generation usage counts.
Product analytics — authenticated app events such as onboarding, paywall views, item and outfit actions, AI usage, notification settings changes, notification taps, app version, platform, quota counters, and abuse-prevention events. These events help us improve the App, diagnose issues, enforce limits, and prevent misuse.
Subscription status — whether you are on a free or paid plan, managed through RevenueCat.

2.5 Device Information

Notification preferences — if you enable reminders, your daily outfit, streak, and weekly report reminder preferences and scheduled reminder identifiers are stored locally on your device. OutfitRec currently uses local scheduled reminders and does not store push notification tokens on our servers.
Bug reports — if you submit a bug report through the App, we collect the description you type plus device model, operating system version, app version, locale, and network type to help diagnose issues. This information is only sent when you explicitly tap "Send."

2.6 Crash, Error, and Performance Diagnostics

When enabled, the App and backend may collect diagnostic data through Sentry to help us identify and fix bugs. This may include user ID, device model, operating system version, app version, error messages, stack traces, route/navigation breadcrumbs, performance traces, and user-submitted bug report text.
We do not intentionally send passwords, payment card details, wardrobe photos, or full outfit content to Sentry. We also remove email from Sentry user context and scrub common sensitive fields such as tokens, authorization headers, passwords, API keys, and email-like values before sending events.

3. How We Use Your Information

We use the information we collect to:

Provide and maintain the App's functionality
Analyze your clothing images using AI to extract metadata (category, color, style, occasion)
Generate outfit recommendations tailored to your wardrobe
Provide AI-powered outfit critiques and ratings
Offer weather-based outfit suggestions using your location
Track your style preferences to improve recommendations over time
Measure feature usage, diagnose issues, enforce limits, and prevent abuse
Process subscription payments
Send optional local reminder notifications for daily outfits, streaks, and weekly reports (if enabled)

4. Third-Party Services

We use the following third-party services to operate the App:

Service	Purpose	Data Shared
Supabase	Authentication and cloud storage	Email, user ID, clothing images
Google Gemini	AI image analysis and outfit critique	Clothing images are sent to Google's servers for AI processing (category, color, style, occasion detection and outfit critique). Google's data usage is governed by their API Terms of Service.
RevenueCat	Subscription management and payment processing	User ID, purchase transactions
OpenWeather	Weather data for outfit suggestions	Approximate latitude/longitude
Sentry	Crash, error, bug-report, and performance diagnostics (when enabled)	User ID, device info, OS/app version, error messages, stack traces, navigation breadcrumbs, performance traces, and user-submitted bug report text
Resend	Transactional email delivery (data export)	Email address

Each third-party service operates under its own privacy policy:

5. Data Storage and Security

Your data is stored on servers managed by Supabase (PostgreSQL database and file storage).
All API communication is encrypted via HTTPS/TLS.
Authentication uses JWT tokens issued by Supabase.
We implement rate limiting and anti-abuse measures to protect the service.

6. Data Retention

Account data is retained as long as your account is active.
Clothing images are retained until you delete them or delete your account.
Usage data (ratings, calendar entries, style feedback) is retained as long as your account is active.
Suspended accounts — if your account has been suspended for violations of our Terms of Service, we may retain your data (including uploaded content, usage records, and abuse logs) for as long as necessary for fraud prevention, legal compliance, and the defense of legal claims, in accordance with GDPR Article 17(3)(e) and applicable Spanish law (LOPDGDD). You may contact us to request a review of this retention.

7. Your Rights

You have the right to:

Access your personal data through the App
Delete individual clothing items and their images at any time
Export your data — request a full export of your personal data via the App's Settings screen. Exports are delivered to your email as a JSON file.
Delete your account — delete your account and all associated data directly from the App's Settings screen, or visit our account deletion page. This permanently removes all your data including clothing images from our servers. If your account has been suspended, deletion may be restricted as described in section 6; please contact support for assistance.
Opt out of reminder notifications through your device settings or the App's Settings screen
Deny location access — the App functions without location; weather suggestions will be unavailable

8. Children's Privacy

OutfitRec is not intended for children under the age of 14. We do not knowingly collect personal information from children under 14. If we become aware that we have collected personal data from a child under 14, we will take steps to delete that information promptly. If you believe a child under 14 has provided us with personal data, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. You are advised to review this page periodically.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:
support@outfitrec.app