Privacy Policy

Drapis respects your privacy. This policy explains what we collect, how we use it (including how our AI features work), where it's stored, who we share it with, and the rights you have over your data.

What we collect

We collect only what's needed to run the app:

• Account data — your name, email, password (stored only as a secure hash), gender (optional), age (optional), and city.
• Wardrobe data — items you add (name, category, brand, colour, size, condition, price, notes), outfits you save, outfit-of-the-day logs, calendar plans, wishlist items, budget entries, laundry status, mood-board pins, ratings, and anything you tell Risa.
• Photos & selfies — photos you upload of your clothing, outfit-of-the-day photos, and selfies you take for the outfit-scan feature. These are stored on our image host (Cloudinary).
• Body profile — body shape, height, and top/bottom/shoe sizes — only what you choose to enter. We use this to tailor fit and size suggestions; we do not collect weight, body-fat, or any health/medical data.
• Style preferences — your onboarding quiz answers (style personality, lifestyle, budget range, occasions) and your "Your Aesthetic" swipe choices.
• Approximate location — the city you set (sent to a weather provider for weather-based suggestions). If — and only if — you grant location permission, your device's coordinates are used once to look up your city, then discarded.
• Subscription status — if you buy Premium, we store whether you're paid, which plan, when it renews, and a Google Play purchase token. We never see or store your card or payment details — Google Play processes all payments.
• Operational & security data — counts we keep to enforce daily AI usage limits and run the service, plus a minimal security log of sensitive account events (login, subscription changes, password changes, and account deletion) recording the event type, a timestamp, and the IP address of the request — kept to detect fraud and abuse and to keep your account safe. We do not use third-party analytics that profile you across other apps or websites.

How we use it — including AI

• To run the core app: your wardrobe, outfits, journal, plans, wishlist.
• AI styling features (Risa, Outfit Match, Dress Me, Scan, Style Check, Colour Match, Shop Assistant): when you use these, we send the relevant data to our AI provider, Anthropic (the Claude API), to generate a response. Depending on the feature this includes a summary of your wardrobe items, your body profile and style preferences, and — for scan, selfie, and style-check features — the photo or selfie you submit. Anthropic processes this to produce the result and, per their API terms, does not use it to train their models.
• To suggest sizes and fit tips based on your body profile.
• To send price-drop alerts on your wishlist (only if you enable them), to your verified account email.
• To diagnose bugs and improve features.

We never sell your data. We never use your data or photos to advertise to you. We never use your photos or data to train our own AI models. We never share your wardrobe, photos, or profile with other users.

Where it's stored

• App data — MongoDB Atlas (encrypted in transit and at rest).
• Photos — Cloudinary (encrypted in transit and at rest).
• On your device — a local cache (your wardrobe, journal, preferences) for offline access and to keep you signed in. Clearing the app's storage removes this local copy; your server data is unaffected.

Who we share it with

We use a small set of processors, each only for the function listed:

• Anthropic (Claude API) — powers the AI features above; receives the data/photos you submit when you use them. Does not train on it (per their API terms).
• Cloudinary — stores and delivers your photos.
• MongoDB Atlas — hosts your app data.
• OpenWeatherMap — receives your city to return weather; OpenStreetMap — receives device coordinates (only if you grant location) to resolve your city.
• Resend — sends account emails (verification, password reset, price-drop digests); receives only your email address.
• Google Play Billing — processes Premium subscription payments; we receive only your subscription status + a purchase token, never payment details.
• Vercel / Render — host the app and API.

Your rights

Under India's Digital Personal Data Protection Act (DPDP) and equivalent frameworks, you can:

• Access your data — request a copy of what we hold.
• Correct inaccurate data — most fields are editable directly in the app.
• Export your data — use "Export my data" in the Me tab to download a JSON file.
• Delete your account — use "Delete Account" in the Me tab. This immediately and permanently removes your account and all associated personal data — wardrobe, outfits, journal, plans, wishlist, budget, pins, preferences — and deletes your uploaded photos and selfies from our image host. Residual copies in encrypted backups are purged within 30 days. This cannot be undone. We retain only a minimal, non-identifying security record that an account was deleted (an internal id + timestamp, with no name, email, or personal content) as required for fraud prevention and legal compliance.
• Withdraw consent — by deleting your account or contacting us.

To exercise any right not available in-app, email support@drapisai.com.

Cookies & local storage

We do not use tracking cookies. We use a session cookie / local storage to keep you signed in and to cache your wardrobe for offline use. We do not track you across other sites or apps.

Children

Drapis is intended for users 18 and older. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has signed up, contact us and we will delete the account.

Changes

We may update this policy as the product evolves. The effective date below changes on any material edit, and we'll notify you in-app if a change affects your rights.

Contact

Privacy questions: support@drapisai.com