Privacy Policy

Coral - Personal Stylist & Wardrobe

Last updated: September 28, 2026

This Privacy Policy explains how Coral - Personal Stylist & Wardrobe ("App", "Service"), developed and operated by an independent developer ("Developer", "I", "me", "my"), collects, uses, stores, and protects your information. By using the App, you agree to the practices described in this policy.

Core commitments: We never sell your data. We never track you across apps or websites. Your photos and wardrobe data belong to you.

1. Information We Collect

1.1 Account Information

• Email address and authentication credentials (when you create an account)
• Authentication provider data (if you sign in via a third-party provider)

1.2 Photos and Images

• Wardrobe photos you upload for garment analysis
• Photos you attach to style chat conversations
• Photos you upload for virtual try-on
• Photos you upload for shopping item analysis

1.3 AI-Processed Data

When you upload photos, AI systems automatically extract:

• Individual garment images (cropped with transparent backgrounds)
• Garment attributes: category, color, pattern, material, style, fit, silhouette, formality, occasion tags, season suitability
• Text descriptions of garments
• Numerical embeddings (vector representations used for similarity matching and recommendations)
• Person segmentation masks (for virtual try-on; no facial features are analyzed or modified)

1.4 Usage Data

• Feature usage counts (uploads, try-ons, chat interactions) for quota management
• Subscription status and billing identifiers (managed by RevenueCat and your app store)
• Preferences you set (fashion interest, photo retention preference)

1.5 Location Data

• If you choose to enable weather-aware recommendations, the App temporarily accesses your device's location to retrieve current weather conditions
• Your coordinates are never stored, logged, or sent to AI models — only the resolved weather description (e.g., "22°C, partly cloudy") is used

1.6 Conversation Data

• Messages you send in style chat and shopping assist conversations
• Chat history you provide for conversation continuity (sent by your device per session; not stored server-side between sessions)

1.7 What We Do NOT Collect

• We do not use analytics SDKs, advertising identifiers, or tracking pixels
• We do not collect device fingerprints or browsing history
• We do not access your contacts, calendar, or any data outside the App

2. How We Use Your Information

We use your information solely to provide and improve the Service:

We do NOT use your data to:

• Train AI models without your explicit consent (see Section 2.1)
• Sell or share data with third parties
• Build advertising or marketing profiles
• Track you across other apps or websites

2.1 Model Training (Opt-In Only)

You may choose to allow your garment images and associated attributes to be used for training machine learning models that improve the Service (for example, better garment detection, attribute extraction, or outfit recommendations).

• This is entirely opt-in. The setting is off by default and must be explicitly enabled by you.
• You can opt out at any time in Settings. Opting out stops your images from being included in any future training runs and excludes your data from future model versions.
• Already-trained models cannot be individually unwound. If your data was included in a training run before you opted out, that model version cannot be retroactively altered. However, your data will not be used in any subsequent training.
• Face blurring: We apply automated face-blurring to all images before they enter any training pipeline. No automated process is perfect, and we cannot guarantee that every face will be fully obscured in every frame.
• Training data is never shared externally. Models are trained internally to improve this Service only.

Sponsored content: The shopping assist feature may display items that are sponsored or promoted by retailers. These recommendations are based solely on your wardrobe data within the App (e.g., wardrobe gaps or style compatibility). No personal data is shared with retailers or advertisers.

3. Data Storage and Security

3.1 Where Your Data Is Stored

• Photos and garment images: Google Cloud Storage (encrypted at rest)
• Garment attributes and embeddings: Google Cloud SQL (PostgreSQL, encrypted at rest)
• Account data, preferences, and upload metadata: Google Cloud Firestore (encrypted at rest)
• All data is processed in the United States (us-central1 region)

3.2 Security Measures

• All data transmitted over HTTPS/TLS
• Photos accessed via time-limited signed URLs (maximum 60 minutes for reads, 15 minutes for uploads)
• Image data, signed URLs, and authentication tokens are never written to application logs
• Database credentials stored in Google Cloud Secret Manager
• All API endpoints require authentication
• Every data mutation verifies resource ownership (you can only access your own data)

3.3 Original Photo Retention

You can choose whether your original uploaded photos are retained after processing:

• Retain (default): Original photos are kept, enabling future improvements when AI models are updated
• Do not retain: Original photos are automatically deleted after garment extraction completes; your extracted garment images, attributes, and all other processed data remain unaffected

You can change this preference at any time in Settings. The setting applies to future uploads only.

4. Third-Party Services and Data Processing

We use the following third-party services to provide the App. Data Processing Agreements (DPAs) are in place with all subprocessors that handle your data.

We do not share your photos or personal data with any parties other than those listed above, and only for the purposes stated.

5. Data Retention

6. Your Rights and Choices

6.1 Access and Portability

You can view all your wardrobe data, garment attributes, and insights within the App at any time.

6.2 Deletion

• Individual garments: Delete any garment from your wardrobe at any time
• Full account: Delete your entire account and all associated data from Settings. This permanently removes your profile, wardrobe, photos, and all processed data. Deletion is irreversible.

6.3 Photo Retention

You can opt out of original photo retention at any time in Settings. See Section 3.3.

6.4 Location

Weather-aware recommendations are optional. You can deny or revoke location permission at any time through your device settings.

6.5 European Users (GDPR)

If you are in the European Economic Area, you have the following rights under the General Data Protection Regulation:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (available via account deletion)
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests

To exercise any of these rights, contact the Developer at the email below.

Legal basis for processing:

• Contract performance: Processing necessary to provide the Service you requested
• Legitimate interest: Service improvement and security
• Consent: Location access, optional photo retention preference, and optional model training participation

6.6 California Users (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

7. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly. If you believe a child under 13 has used the App, please contact us.

8. International Data Transfers

Your data is processed and stored in the United States. If you are located outside the United States, by using the App you consent to the transfer and processing of your data in the United States. We rely on Standard Contractual Clauses and Data Processing Agreements with our subprocessors to ensure appropriate safeguards for international transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App. The "Last updated" date at the top indicates when the policy was last revised. Your continued use after changes take effect constitutes acceptance of the updated policy.

10. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Email: [TODO: replace with real email]

Summary of Key Commitments

• We never sell your data or track you across apps
• Your photos and wardrobe data belong to you
• Your location coordinates are never stored or logged
• Image data and tokens are never written to logs
• You can delete any garment or your entire account at any time
• You can opt out of original photo retention
• Model training is opt-in only, off by default, and you can opt out at any time
• All data is encrypted in transit and at rest
• Every request verifies you own the data you are accessing
• Data Processing Agreements are in place with all subprocessors