Privacy policy
The short version
- We collect what Drape needs to style you: your account, your clothes, your style answers and, if you choose, your body details and a colour selfie.
- Your photos are private to you. Some are sent to AI services to tag clothes, analyse colour or draw a picture, only to do that job.
- We don’t sell your data, we don’t show ads based on it, and there are no ad or analytics trackers in the app or on this site.
- You can download all your data, delete your selfie, or delete your account and every photo, from Profile in the app.
- Questions or requests: use the contact form and pick “Privacy or my data”. We answer within one month.
- Who we are
- What we collect and why
- How we use AI
- Who processes your data
- Data outside the UK and EU
- How long we keep it
- Your rights
- Keeping it safe
- Age limit
- This website
- Changes to this policy
- Contact and complaints
1. Who we are
Drape is an app that suggests outfits from the clothes you own. It is run by Miltos Ioannidis (“Drape”, “we”, “us”), who is the controller of your personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR.
This policy covers the Drape app and this website, drape.im. You can reach us through the contact form.
2. What we collect and why
Much of this is optional. Drape works without a selfie, without your weight and without photos (you can add clothes from the library instead).
| What | Why we use it | Legal basis |
|---|---|---|
| Account: email address, first name, password (stored only as a secure hash), how you sign in | To create and secure your account and send you sign-in codes and security emails | Contract |
| Profile: home city, the clothes you wear (menswear, womenswear or both), units, budget | To suggest suitable clothes and use your local weather | Contract |
| Body details: height, build, fit preferences, weight (optional); avatar skin, hair and eye colours you pick | To suggest cuts and fits and draw your illustrated avatar | Your consent, given by entering them. You can change or remove them in the app |
| Colour selfie (optional): a photo of your face in daylight, and the colour result (e.g. “Soft Autumn”) | To work out your colour season. It’s used only for colour, never to identify you | Your explicit consent, given by taking the photo. Delete it any time in Profile |
| Your wardrobe: photos of your clothes, their tags (type, colour, material, fit, warmth), prices you add, links you add from | To build your wardrobe and outfits | Contract |
| Style: style quiz answers, looks you save to your inspiration board (screenshots or Pinterest links), likes and “Not for me” | To match outfits to your taste | Contract |
| Outfits and plans: what you asked for (“dinner on Friday”), places and dates, saved outfits, what you wore and when, trips, your wishlist | To make outfits, avoid repeats, and keep your calendar and trips | Contract |
| Shop clicks: which shop suggestion you tapped | To show relevant suggestions and, for affiliate links, so the shop can credit us | Legitimate interest |
| Usage counts: how many AI requests you made today | To apply the daily limits that keep Drape free | Legitimate interest |
| Crash reports: the error, where in the app it happened, device model and OS version, your account’s random ID | To find and fix crashes. No email, name, photos or screen recordings are included | Legitimate interest |
| Contact form: your name, email, topic and message | To answer you, and to keep a record of privacy requests | Legitimate interest |
On your phone only
Some features never send data to us. Face ID or fingerprint unlock happens entirely on your device; we never receive biometric data. The daily outfit reminder is scheduled on your phone. Lifting a piece of clothing out of its photo’s background is done on your phone (both the photo and the cut-out are then saved to your private storage).
What we don’t do
We don’t sell or rent your data, we don’t use it for advertising, and we don’t combine it with data from other companies. We don’t make decisions about you that have legal or similarly significant effects based only on automated processing: AI only suggests outfits.
3. How we use AI
Drape uses AI services to do specific jobs. Each request is made by our server, which our app talks to; the AI keys never sit in the app.
- Tagging clothes and reading looks: a clothing photo or inspiration image is sent to Google’s Gemini to recognise the pieces and their colours.
- Colour analysis: your colour selfie is sent once to Gemini to work out your colour season.
- Outfits: your request, the weather and the tags of your clothes (text only, no photos), with your style, colour and fit answers, are sent to Groq or Gemini to choose an outfit.
- AI pictures: only when you tap the button on a piece, its photo or its tags go to Black Forest Labs’ image model, through OpenRouter, to draw a clean picture of it.
4. Who processes your data
We use these companies (“processors”) to run Drape. They act on our instructions under data processing terms and may not use your data for their own purposes, except as noted above for the Gemini free tier.
| Company | What they do | What they receive | Where |
|---|---|---|---|
| Supabase | Database, sign-in, photo storage, our server | All the data above | London, UK |
| Google (Gemini API) | AI tagging, colour analysis, outfits | Photos and text you ask it to read, at the time of the request | USA |
| Groq | AI outfit choices | Text only: your request, clothing tags, style and fit answers | USA |
| OpenRouter and Black Forest Labs | AI pictures, when you ask for one | One clothing photo and its tags, or the tags alone | USA and EU |
| Brevo | Sending our emails | Your email address, first name, sign-in codes | EU (France) |
| Sentry | Crash reports | Crash details and your account’s random ID | EU (Germany) |
| Open-Meteo | Weather and city search | Place names and coordinates, with no account details | EU |
| Vercel | Hosting this website | Standard web server logs (IP address, browser) | USA and EU |
When you tap a shop link, add a piece from a shop link or save a Pinterest link, that shop or Pinterest sees the request as they would any visit. Their own privacy policies apply. We may also disclose data if the law requires it, or to protect people’s safety.
5. Data outside the UK and EU
Our main database is in the UK, which the EU recognises as protecting data adequately. Where a processor is in the USA, the transfer relies on the EU–US Data Privacy Framework (and its UK extension) where that company is certified, or on the European Commission’s standard contractual clauses (with the UK addendum). Ask us through the contact form for a copy of the safeguards.
6. How long we keep it
- Your account and everything in it: until you delete your account. Deleting it removes your photos and data straight away. Copies in our providers’ backups are overwritten within 30 days.
- Colour selfie: until you delete it (Profile → Delete source photos) or your account. The colour result stays until you change it.
- Clothes you delete: “Delete permanently” removes the piece and its photos at once. “I don’t have this anymore” keeps it in your archive, so your outfit history stays whole.
- AI services: they process each request when it’s made. Retention on their side follows their API terms.
- Crash reports: up to 90 days.
- Contact form messages: 12 months, then deleted automatically.
7. Your rights
Under the GDPR and UK GDPR you have the right to:
- Access your data, and take it with you: Profile → Export my data downloads everything in your account as a file.
- Correct it: edit your profile, body details and clothes in the app.
- Delete it: Profile → Delete account removes your account, data and photos.
- Withdraw consent at any time, for example by deleting your selfie or body details. This doesn’t affect what we did before.
- Object to processing based on legitimate interest, and ask us to restrict processing.
For anything you can’t do in the app, use the contact form. We may ask you to confirm your request from the email address on your account. We answer within one month, and there’s no charge.
8. Keeping it safe
Data is encrypted in transit. Every table in our database is locked to its owner, so one account can never read another’s data, and we test this with automated checks. Your photos sit in private storage and are only shown through links that expire after an hour. AI keys stay on our server. You can add Face ID or fingerprint unlock to the app. No system is perfectly secure; if a breach affects you, we’ll tell you and the regulator as the law requires.
9. Age limit
Drape is for people aged 16 and over. We don’t knowingly collect data from anyone younger. If you think a child under 16 has an account, tell us and we’ll delete it.
10. This website
drape.im uses no cookies, no analytics and no trackers. Fonts are loaded from Google Fonts, which receives your IP address to deliver them. Our host keeps standard server logs for security.
11. Changes to this policy
If we change how we use your data in a meaningful way, we’ll tell you in the app or by email before the change applies. The date at the top shows the current version.
12. Contact and complaints
For questions, requests or complaints, use the contact form and choose “Privacy or my data”.
You can also complain to a data protection authority: in the EU, the one in the country where you live or work (find yours on the EDPB’s list); in the UK, the Information Commissioner’s Office. We’d appreciate the chance to sort it out first.