Privacy Policy

Last updated: 6 April 2026

Vestis ("we", "us", "our") is operated by VESTIS LTD, a company registered in Scotland (SC884547). VESTIS LTD is the data controller for the purposes of UK GDPR. We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it.

What we collect

When you use Vestis, we collect:

• Account information — your email address, display name, and password (encrypted). If you sign in with Apple, we receive your Apple ID identifier and, optionally, your email.
• Profile preferences — style preferences, colour preferences, comfort vs. style balance, dressing goals, budget range, clothing size, and height. All optional.
• Wardrobe data — photographs of your clothing items and the metadata our AI extracts (category, colour, pattern, fabric, formality, name).
• Style Snap images — photos of outfits you save for style inspiration, and the style analysis our AI generates from them (colours, vibes, formality, key pieces).
• Outfit history — outfits you save or mark as worn, including the date and occasion.
• Location data — your approximate location (city level) to provide weather-appropriate outfit suggestions. We only access this when you grant permission, and we store only the city name and coordinates on your profile.
• Device information — your push notification token, so we can send outfit reminders and trial notifications you've opted into.

How we use your data

We use your data to:

• Provide the Vestis service — storing your wardrobe, generating outfit suggestions, and learning your style preferences
• Send you notifications you've opted into (daily outfit reminders, trial expiry warnings)
• Improve our AI outfit and style recommendations
• Communicate with you about your account and service updates
• Detect your approximate region (via your device locale) to show you relevant shopping suggestions when browsing outfit results

We do not use your data for advertising. We do not sell your data to third parties. We do not share your wardrobe photos with other users.

Legal basis for processing

Under UK GDPR, we process your data on the following bases:

• Contract performance — processing your wardrobe data, generating outfits, and managing your subscription are necessary to provide the service you signed up for
• Legitimate interest — improving our AI recommendations, detecting your region for relevant shopping suggestions, and monitoring service health
• Consent — accessing your location for weather data, sending push notifications, and any future uses we haven't described here. You can withdraw consent at any time through your device settings or by contacting us

AI processing

When you add an item to your wardrobe or use Style Snap, your photo is sent to our AI service (powered by Anthropic's Claude) for analysis. The AI identifies clothing attributes (colour, style, fabric) or style preferences. Photos are processed in real time and are not stored by the AI provider — they are only retained in your Vestis account.

Background removal

When you add a wardrobe item, your photo is sent to our background removal server to isolate the garment. This server is operated by us (not a third party) and does not retain your images after processing.

External shopping links

When Vestis suggests an item to complement your outfit, it may include links to third-party retailers (such as Vinted, ASOS, ThredUp, eBay, Depop, or THE ICONIC). These links may contain affiliate tracking identifiers that allow us to earn a small commission if you make a purchase. The retailers shown depend on your detected region (derived from your device locale — we do not use GPS for this).

When you tap a shopping link, you leave Vestis and are subject to that retailer's own privacy policy and terms. We do not share your Vestis account data, wardrobe photos, or personal information with these retailers. The only information passed is the search term and our affiliate identifier.

Where your data is stored

Your data is stored on Supabase (hosted on AWS infrastructure in the EU). Photos are stored in Supabase Storage. All data is encrypted in transit (TLS) and at rest.

Third-party services

We use the following third-party services:

• Supabase — database and file storage (EU-hosted)
• Anthropic (Claude) — AI image analysis for wardrobe scanning and style analysis (US-based)
• WeatherAPI.com — weather data based on your location
• Apple — authentication and payment processing (if you use Sign in with Apple / subscribe via App Store)
• Google — authentication and payment processing (if you use Sign in with Google / subscribe via Google Play)
• RevenueCat — subscription management (processes subscription status, not payment details — Apple/Google handle payment)
• AWIN, CJ Affiliate, eBay Partner Network — affiliate tracking for shopping suggestions (we pass only a search term and our affiliate ID — no personal data)

Each of these services has their own privacy policy. We only share the minimum data required for each service to function.

International data transfers

Your core data (wardrobe, profile, outfit history) is stored in the EU via Supabase. However, some processing involves transfers outside the UK and EU:

• Anthropic (Claude) is US-based. When you scan a wardrobe item or use Style Snap, your photo is sent to Anthropic's API for analysis. Photos are processed in real time and are not stored by Anthropic.
• RevenueCat is US-based. Subscription status data (not payment details) is processed via their API.

These transfers are necessary to provide the service (Article 49(1)(b) UK GDPR — performance of a contract). We ensure all third-party providers maintain appropriate data protection standards.

Your rights

Under UK GDPR, you have the right to:

• Access your data — request a copy of everything we hold about you
• Correct your data — update or fix inaccurate information
• Delete your data — request we delete your account and all associated data
• Export your data — receive your data in a portable format
• Withdraw consent — for location access or notifications, revoke at any time through your device settings

To exercise any of these rights, email us at hello@vestis.style. We will respond within 30 days.

Data retention

We keep your data for as long as you have an active Vestis account. If you delete your account, we delete all your data (profile, wardrobe items, photos, outfit history, style inspirations) within 30 days. Anonymised, aggregated data (e.g., "average wardrobe size") may be retained for service improvement.

Children

Vestis is not intended for children under 16. We do not knowingly collect data from anyone under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly.

Cookies

The Vestis app does not use cookies. Our website (vestis.style) uses only essential cookies required for the waitlist signup form to function — no tracking or analytics cookies.

Changes to this policy

We may update this policy from time to time. We'll notify you of significant changes via email or an in-app notice. The "last updated" date at the top of this page reflects the most recent revision.

Contact

If you have questions about this privacy policy or how we handle your data:

VESTIS LTD (SC884547)
Email: hello@vestis.style
Website: vestis.style