Privacy Policy

Last updated: 28 September 2026

Vestis ("we", "us", "our") is operated by VESTIS LTD, a company registered in Scotland (SC884547). VESTIS LTD is the data controller for the purposes of UK GDPR. Vestis Ltd is registered with the ICO as a data controller (registration number ZC234264). We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it.

What we collect

When you use Vestis, we collect:

• Account information - your email address, display name, and password (encrypted). If you sign in with Apple, we receive your Apple ID identifier and, optionally, your email.
• Profile preferences - style preferences, colour preferences, comfort vs. style balance, dressing goals, budget range, clothing size, height and body shape. All optional.
• Wardrobe data - photographs of your clothing items, the metadata our AI extracts (category, colour, pattern, fabric, formality, name), and any name, brand or cost you add.
• Style Snap images - photos of outfits you save for style inspiration, and the style analysis our AI generates from them (colours, vibes, formality, key pieces).
• Outfits - every outfit Vestis suggests, stored with the occasion you typed and the date, and whether you saved it, wore it or turned it down. Your history shows the ones you saved or wore.
• Trips - the destination, dates, occasions and any notes for trips you plan.
• Support messages - what you send to our support address, and our replies.
• Location - if you allow it, your phone's approximate location (low accuracy, not precise GPS) when you use the app, used to fetch the weather forecast so outfit suggestions suit the day. We save the city and those approximate coordinates to your profile. Vestis works without it; you just won't get weather-aware suggestions.
• Outfit feedback - when you turn an outfit down, the reason you pick and, if you choose to add one, a short note. The reason shapes the next suggestion; the note is never sent to our AI provider.
• Pieces you pass on - if you tell us a piece was sold or donated, a record of that (its category and an estimate of its impact), and any condition grade you give a piece. Used for Your Impact.
• Feature use - which AI features you use and how much (for example, how many outfit suggestions you have used this month, and the size of each request), never what was in it. Used to run the fair-use limit and to understand our costs.
• Feature interest - if you tap "Tell me when it's ready" on a feature that is coming soon.
• App analytics - if you leave Analytics switched on in Account, the app sends a short, fixed list of events (for example, that an outfit was suggested or a piece was added) with an anonymous identifier. It never sends your photos, piece names, descriptions, anything you type, or your email address. You can switch it off at any time in Account, Analytics.
• Device information - your push notification token, so we can send outfit reminders and trial notifications you've opted into.

How we use your data

We use your data to:

• Provide the Vestis service - storing your wardrobe, generating outfit suggestions, and learning your style preferences
• Send you notifications you've opted into (daily outfit reminders, trial expiry warnings)
• Improve our AI outfit and style recommendations
• Run the fair-use limit on outfit suggestions and understand what the service costs to run
• Communicate with you about your account and service updates
• Detect your approximate region (via your device locale) to show you relevant shopping suggestions when browsing outfit results

We do not use your data for advertising. We do not sell your data to third parties. We do not share your wardrobe photos with other users.

Legal basis for processing

Under UK GDPR, we process your data on the following bases:

• Contract performance - processing your wardrobe data, generating outfits, and managing your subscription are necessary to provide the service you signed up for
• Legitimate interest - improving our AI recommendations, detecting your region for relevant shopping suggestions, monitoring service health, keeping feature-use records for the fair-use limit and our costs, and app analytics (which you can switch off)
• Consent - accessing your location for weather data, sending push notifications, and any future uses we haven't described here. You can withdraw consent at any time through your device settings or by contacting us

AI processing

When you add an item to your wardrobe or use Style Snap, your photo is sent to our AI service (powered by Anthropic's Claude) for analysis. The AI identifies clothing attributes (colour, style, fabric) or style preferences. When you ask for an outfit or a week plan, we send Claude a text description of your pieces (including any name or brand you have given them, never the photos), the occasion you type, the time of day, how dressed up you want to be, the weather, your height, size and body shape settings, a short summary of the colours and styles in your Style Snap saves, and, if you turned the last outfit down, the reason you picked. When you plan a trip, we send the descriptions of your pieces, the destination, dates and occasions, the forecast, and any notes you type. Anthropic does not use any of this to train its models, and keeps it only for a limited period under its commercial terms. Your photos are kept in your Vestis account.

Background removal

When you add a wardrobe item, your photo is sent to our background removal service to isolate the garment. The service runs on our own software hosted by Fly.io, which receives the photo, returns the processed image, and does not retain it after processing.

External shopping links

When Vestis suggests an item to complement your outfit, it may include links to third-party retailers (such as Vinted, eBay, Ethical Superstore, ThredUp, Depop, or THE ICONIC). These links may contain affiliate tracking identifiers that allow us to earn a small commission if you make a purchase. The retailers shown depend on your detected region (derived from your device locale - we do not use GPS for this).

When you tap a shopping link, you leave Vestis and are subject to that retailer's own privacy policy and terms. We do not share your Vestis account data, wardrobe photos, or personal information with these retailers. The only information passed is the search term and our affiliate identifier. We also keep our own record of which store you tapped (the store name, your country, and the search term) so we can understand which retailers are useful - this stays within Vestis and is never shared with the retailers or networks.

Where your data is stored

Your data is stored on Supabase (hosted on AWS infrastructure in the United States, Oregon region). Photos are stored in Supabase Storage. All data is encrypted in transit (TLS) and at rest.

Third-party services

We use the following third-party services:

• Supabase - database and file storage (United States, Oregon)
• Anthropic (Claude) - AI image analysis for wardrobe scanning and style analysis (US-based)
• WeatherAPI.com - weather data based on your location
• Apple - authentication and payment processing (if you use Sign in with Apple / subscribe via App Store)
• Fly.io - hosting for our background removal service (receives photos transiently, retains nothing)
• Resend - transactional email such as welcome messages, password resets and support replies (US-based; holds your email address and the message content)
• RevenueCat - subscription management (processes subscription status, not payment details - Apple handles payment)
• AWIN, eBay Partner Network - affiliate tracking for shopping suggestions (we pass only a search term and our affiliate ID - no personal data)
• PostHog - usage analytics on our website and, if you leave it switched on, in the app (EU-hosted; no photos, names or anything you type)

This policy describes the iOS app; if a future Android release adds Google services, this policy will be updated first. Each of these services has their own privacy policy. We only share the minimum data required for each service to function.

International data transfers

Your data is stored and processed in the United States by the providers below, under Standard Contractual Clauses and the UK Addendum accepted in each provider’s terms:

• Supabase - your database rows and photos (Oregon, USA)
• Anthropic (Claude) - receives photos and text for analysis as described above; does not train on them, and keeps them only for a limited period under its commercial terms
• RevenueCat - subscription status (not payment details)
• Resend - your email address and the content of transactional emails

These transfers are covered by Standard Contractual Clauses with the UK International Data Transfer Addendum, and each provider maintains appropriate data protection standards.

Who can access your data

Inside Vestis Ltd, your data can be reached by the company's Director and by named operator tooling and automated agents acting on the company's behalf - the same way any company's staff and systems reach the systems they run. That access is used only for support you have asked for, security, service operation and legal obligations. Automated agents work with counts and aggregates, not your photos; none of them browses wardrobes. Your data is never accessed for marketing and never sold.

Your rights

Under UK GDPR, you have the right to:

• Access your data - request a copy of everything we hold about you
• Correct your data - update or fix inaccurate information
• Delete your data - request we delete your account and all associated data
• Export your data - receive your data in a portable format
• Withdraw consent - for location access or notifications, revoke at any time through your device settings

To exercise any of these rights, email us at support@vestis.style. We will respond within 30 days.

Data retention

How long we keep each kind of data:

• Account, profile, wardrobe, outfits and style inspirations - until you delete your account. Deletion removes your profile, photos, outfit history and inspirations, and is effective immediately in the app
• Subscription status and transaction events - deleted with your account. Apple, which sells the subscription, and RevenueCat keep their own records of the purchase under their own policies
• Support messages and tickets - 2 years after the ticket closes
• Feature-use records, the fair-use counter, outfit feedback, pass-on records and condition grades - until you delete your account
• Analytics events (website and app) - kept only as long as we need them to understand how Vestis is used; anonymised aggregates (for example, average wardrobe size) may be kept for service improvement
• Shopping link taps - 1 year
• Waitlist email addresses - until launch plus 90 days, or sooner on request

Children

Vestis is not intended for children under 16. We do not knowingly collect data from anyone under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly.

Cookies and analytics

The Vestis app does not use cookies. Our website (vestis.style) uses essential cookies required for forms to function, and PostHog analytics (EU-hosted), which stores an anonymous identifier in your browser, to understand how the site is used. Analytics data is not used for advertising and is not shared with anyone else.

Changes to this policy

We may update this policy from time to time. We'll notify you of significant changes via email or an in-app notice. The "last updated" date at the top of this page reflects the most recent revision.

Contact

If you have questions about this privacy policy or how we handle your data:

VESTIS LTD (SC884547)
ICO registration number: ZC234264
Email: hello@vestis.style
Website: vestis.style