Privacy Policy

Drapis is a personal styling app. This policy explains what we collect, why, which of it is sent to AI and other service providers, how long we keep it, and the choices and rights you have. It applies wherever you use Drapis.

The short version

• We collect what you put into the app (your wardrobe, photos, logs and preferences) and the minimum needed to run and secure it.
• When you use an AI feature, the content that feature needs is sent to our AI provider, Anthropic, to produce the answer. It is not used to train AI models.
• We do not sell your data, show ads, or use third-party analytics that track you across other apps.
• You can export your data and delete your account from the app at any time.

What we collect

• Account — name, email, and a password stored only as a secure hash (or your Google account's name and email if you sign in with Google). Optional: gender and age. We record when you last signed in.
• Your closet — pieces you add (name, type, colour, fabric, brand, size, condition, season, price, notes), saved outfits, outfit logs and ratings, calendar plans, wishlist items and price alerts, budget entries, laundry status, packing templates and mood-board pins.
• Photos — photos of your clothes, outfit-of-the-day photos, selfies you log, your profile photo, and images you pin. Photos you save are stored on our image host. Pieces added from a selfie use a cropped view of that same selfie; no separate copy is made.
• Garment cutouts — to show a piece without its background, your phone separates it on the device using Google's on-device ML Kit. The cutout stays in the app's cache on your phone and is not uploaded.
• Style profile — your quiz answers (style personality, body shape, lifestyle, budget range, occasions), optional sizes and height, swipe choices in Your Aesthetic, and the preset feedback you give on suggestions ("More like this" or "Not for me"). We do not collect weight or health data.
• Risa conversations — your chat with Risa is kept on your device. Recent messages are sent to our AI provider each time you ask something so Risa can follow the conversation. We do not store your chat on our servers.
• Event Lens — invitation images you choose to scan (see "Temporary vs kept" below) and the event details extracted from them: event name, date, time, venue, city, dress code, and the wardrobe pieces chosen for it.
• Location and weather — the city you set, and your device's approximate coordinates only if you tap Detect and allow location. Coordinates are used once to find your city and are not stored.
• Time zone and country — your device's time zone (so daily limits reset at your midnight) and the Google Play country (so we only offer shopping features that work where you are).
• Subscription — whether you have Premium, the plan, its renewal and expiry dates and status, and the Google Play purchase token. We never receive your card or payment details; Google Play processes all payments.
• Usage for improving suggestions — which suggested looks you accepted, reshuffled, logged or rated, the pieces involved and coarse context (feature, occasion, weather). No photos, notes or free text.
• Reports you send — if you report an AI response, the text you flagged, your chosen reason and any note you add.
• Device and diagnostics — a push-notification token if you allow notifications, your app version, and server request logs (time, route, result and network address) used for security and debugging. We don't use third-party crash or analytics tools.
• Security records — sign-in throttling, and a security log of sensitive events (sign-in, subscription changes, password changes, email verification and account deletion) with the time and network address.
• Usage limits — daily counts of AI feature use, used to apply the limits of your plan.

How we use it

• To run the app: your closet, outfits, logs, plans, wishlist and reminders.
• To generate styling suggestions, both with our own rules on our servers and your device, and with AI (below).
• To show weather-aware outfits, apply size and fit tips, and send price-drop and daily-look notifications you turn on.
• To provide, verify and restore your subscription through Google Play.
• To keep the service secure, prevent abuse and fraud, enforce limits, fix bugs and improve suggestions.
• To send account and service emails, and occasional product emails you can unsubscribe from.

We do not sell your data, use it for advertising, or share your closet, photos or profile with other users. We do not use your content to train AI models.

AI processing

Drapis's AI features use Anthropic's Claude API. When you use a feature, only what that feature needs is sent:

• Chat with Risa — your message, recent messages in the conversation, a summary of your wardrobe (piece names, types, colours and wear counts), your style profile and sizes, city and weather.
• Outfit ideas (Mix & Match, Occasion, Dress Me, Weather, Plan my week, Shop Assistant, Colour Match) — the relevant pieces from your wardrobe, your style profile and the occasion, weather or item you chose.
• Photo features (add a piece, Scan & Match, Style Check, Wear Inspiration, selfie log) — the photo you submit, plus your wardrobe summary where the feature matches against your closet.
• Event Lens — the invitation images you choose, without your wardrobe or profile, to extract event details. Drapis then plans looks from your closet.

Anthropic processes this data to return the answer and, under its commercial terms, does not use it to train models. Anthropic keeps API inputs and outputs for a limited period for safety and abuse monitoring under its own policies. AI answers can be wrong or inappropriate; you can report any response with Report under the answer or from Me → Settings → Report AI content, and we review every report.

Temporary vs kept

• Photos sent only for an AI answer (Style Check, Scan & Match, Wear Inspiration, a selfie you scan but don't save, add-a-piece detection) are processed in memory to produce the result and are not stored by Drapis. If you save the photo to a piece, a log or a pin, it is kept as part of that.
• Event Lens invitation images are processed in memory and are never saved by Drapis. The extracted event details are kept until you delete the event list or your account. Scan counts are kept for up to 32 days.
• Garment cutouts stay on your device and are cleared with the app's cache.
• Risa chat stays on your device until you clear the chat or the app's data.
• Everything in your account (closet, photos, logs, plans, wishlist, preferences) is kept until you delete it or your account.

Retention

• Suggestion usage records — deleted automatically after 180 days.
• Style feedback — deleted automatically 180 days after you last change it; you can reset it anytime in Me → Profile → Risa preferences.
• AI content reports — kept up to 1 year for review, or until you delete your account.
• Security log — kept 2 years to investigate fraud and abuse. After account deletion it holds no name or email.
• Server request logs — kept by our hosting provider for a short rolling period.
• Records of staff actions — when our staff act on an account (for example, granting complimentary Premium or processing a deletion request), we keep a record of the action with the account's internal id and a masked email hint, for accountability.
• Backups — encrypted database backups roll over on a short cycle; deleted data leaves them when they expire.

Sharing Look Cards

When you share a Look Card, the image is created on your device and handed to the app you choose. It contains the pieces' photos and names, the look's title, the occasion or event name, and — only if you switch them on — Risa's line and your own photo. It also carries the Drapis name. It does not contain your email, account id or internal ids, and the image's hidden metadata (such as EXIF location data) is removed. Drapis does not upload or publish the card; once shared, it is governed by the app and people you shared it with.

Who we share it with

We use these service providers, each only for the purpose listed:

• Anthropic (Claude API, USA) — generates AI answers from the data described under "AI processing".
• MongoDB Atlas — hosts our database.
• Cloudinary — stores and delivers your saved photos.
• Render — hosts our server; Vercel — hosts the web app.
• Resend — sends our emails (your email address and the message).
• Google — Google Sign-In (if you use it); Google Play Billing (subscriptions); Firebase Cloud Messaging (push notifications you allow); ML Kit (on-device only — nothing is sent). The web app and share cards load fonts from Google Fonts, which receives your network address.
• OpenWeather — receives your city, or your coordinates when you use Detect, to return weather and your city name. OpenStreetMap (Nominatim) may receive the same coordinates as a fallback.
• Retail websites — when you paste a product link or turn on a price alert, our server fetches that product page. The retailer receives the request from our server, not your personal data. Shop links open the retailer in your browser, where the retailer's own policy applies.

We may disclose data if required by law, to protect users or the service, or as part of a merger or acquisition, in which case this policy continues to apply.

International transfers

Drapis and its service providers operate in several countries, including India and the United States. Your data may be processed outside the country where you live. We rely on our providers' contractual and security commitments to protect it wherever it is processed.

Security

Data is encrypted in transit and at rest with our database and image providers. On web, your session is held in a secure cookie that scripts cannot read; in the Android app, it is stored in encrypted storage on your device. No system is perfectly secure; tell us at support@drapisai.com if you find a problem.

Your choices and rights

Depending on where you live, you have rights to access, correct, export, delete and restrict or object to the use of your data, to withdraw consent, and to complain to your data protection authority. In the app you can:

• Edit your profile and closet directly.
• Export your data from Me → Settings → Export my data.
• Reset style feedback from Me → Profile → Risa preferences.
• Turn off notifications, price-drop emails and location in the app or your phone's settings.
• Delete your account from Me → Settings → Delete account. This immediately and permanently deletes your account and everything in it — closet, photos (from our image host), logs, plans, wishlist, pins, preferences, feedback, reports and push tokens. It cannot be undone. Only the records listed under "Retention" that are needed for security remain, without your name or email.

You can also request deletion without the app: email support@drapisai.com from your account's email address (see drapisai.com/delete-account). For any other request, email us and we will respond within the time required by your local law.

Where the law requires a legal basis (for example in the EU and UK): we use your data to provide the service you asked for (contract); with your consent for location, notifications and optional features (which you can withdraw); and for our legitimate interests in keeping the service secure and improving suggestions.

Children

Drapis is for people 18 and older. We do not knowingly collect data from anyone younger. If you believe a minor has an account, contact us and we will delete it.

Changes

We will update this policy when the product or the law changes, and tell you in the app about material changes. The effective date below shows the latest version.

Contact

support@drapisai.com