Privacy policy
Last updated: 10 October 2026
This policy explains what personal data the Wearabouts app and this website process, why, and what your rights are. Wearabouts is made by Diogo Santos, an individual based in Portugal, who is the controller of your personal data. Contact: hello@getwearabouts.com.
The short version
- We keep what you put in the app (your account and your wardrobe) so the app works on your phone and stays in sync.
- No ads, no tracking across apps or websites, no selling of data.
- Photos are sent to an AI provider only if you turn on “Auto-fill with AI”, and only the item photo.
- You can delete your account and everything in it from the app at any time.
What we collect
| Data | Why |
|---|---|
| Account: email address, password (stored only as a secure hash), and, if you sign in with Apple or Google, the account identifier and email address they share with us. | To create your account, sign you in and send sign-in and password reset codes. |
| Your wardrobe: item photos (and the versions with the background removed), names, categories, colours, seasons, brands, sizes, materials, prices, purchase dates, notes, tags, places, collections, pairings and the days you wore an item. | This is the app: to store, show, search and sync your wardrobe. |
| Sessions: the IP address and device type of each signed-in session. | To keep your account secure and to limit abuse (for example, too many sign-in attempts). |
| AI choice and usage: whether you allowed auto-fill, when, and how many suggestions you requested per day. | To respect your choice and enforce a daily limit. |
| Crash reports: technical details about an error (app version, device model, operating system, what failed). | To find and fix bugs. They are set up not to include your email, photos or item details. |
We do not collect your contacts, location, advertising identifiers or browsing history. This website sets no cookies and has no analytics.
Auto-fill with AI (optional)
If you choose “Allow” on the auto-fill screen, each new item photo is sent, resized and without any other information about you, to Anthropic, an AI provider, which returns suggestions for the category, colours, pattern, seasons and a name. Your name, email address and places are never sent. The suggestions are only filled in for you to check; you can change or ignore them.
This happens only with your consent (version 2026-10-10). You can withdraw it at any time in Profile → Auto-fill with AI, and Wearabouts keeps working fully without it. Removing backgrounds from photos happens on your phone and sends nothing.
Legal bases
- Contract: your account, your wardrobe and sign-in emails, to provide the app you asked for.
- Consent: AI auto-fill.
- Legitimate interests: security, abuse prevention and crash reports, to keep the app safe and working.
Who processes data for us
We use these service providers, each only for the purpose listed and under a data processing agreement:
| Provider | What for | Where |
|---|---|---|
| Railway | Servers, database and photo storage | European Union (Amsterdam, Netherlands) |
| Resend | Sending sign-in and password reset codes (your email address and the code) | United States |
| Anthropic | AI auto-fill, only with your consent (the item photo) | United States |
| Sentry | Crash reports | United States |
| Expo | Delivering app updates (technical data such as app version and platform) | United States |
| Apple, Google | Sign in with Apple or Google, only if you choose them | Worldwide |
Where data leaves the European Economic Area, it is protected by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
How long we keep data
- Your account and wardrobe: until you delete them.
- Deleted items: kept for 30 days so you can undo, then permanently deleted with their photos.
- Deleting your account removes your account and all wardrobe data from the database at once; your photos are deleted from storage within minutes. Backups of the database, if any, expire within 30 days.
- Sign-in codes expire after 10 minutes; session records end when you sign out or the session expires.
Your rights
Under the GDPR you can ask to access, correct, delete or receive a copy of your data, object to or restrict processing, and withdraw consent at any time. Most of this you can do in the app: edit any item, turn off auto-fill, or delete your account. For anything else, write to hello@getwearabouts.com; we answer within one month. You can also complain to the Portuguese data protection authority, the CNPD, or to the authority where you live.
Security
Connections are encrypted (HTTPS). Photos are stored privately and shown only through short-lived signed links. Passwords are hashed, and on the phone your session is kept in the system’s secure storage.
Children
Wearabouts is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.
Changes
If we change this policy in a way that matters, we will tell you in the app before the change applies. The date at the top shows the latest version.