Who this policy covers
This Privacy Policy applies to the Clofit iOS app, clofit.app and related services operated by Clofit from Québec, Canada. It covers account holders, visitors and people who join the launch waitlist.
Clofit is the organization responsible for the personal information described here. Its Privacy Officer can be reached at support@clofit.app.
Information we collect
- Account and eligibility: email, username, display name, hashed password credential, authentication provider identifier, date of birth, age-verification date and parent/guardian consent status when required.
- Profile and style: profile photo, bio, campus, optional gender, body-shape, face-shape, sizes, brands and style preferences.
- Closet and creations: garment photos, background-removed images, detected categories, colors, brands and tags, outfits, collections, ratings, feedback and trip plans.
- Social activity: OOTDs, posts, comments, likes, follows, saves, blocks, reports, Campus activity, Vibe Rooms and Clofit Duo activity, including visibility settings.
- AI requests: chatbot prompts and responses, conversation history, shopping questions, optional images, relevant closet metadata, style memory you write or edit, and outfit feedback. We also store weekly chat counters, the model used, token usage and estimated API costs to operate the service and enforce allowances; these records are not a charge to you.
- Location and weather: approximate or precise device location only after iOS permission, plus searched trip destinations. Location is used for requested weather-aware features, not continuous tracking.
- Device and operations: push notification token, app version, IP address, request timestamps, security logs, crash or diagnostic information made available to us.
- Website waitlist: name, email, language, referral source and signup timestamps.
From photo to useful outfit
We process information to create and secure accounts, analyze garments, remove backgrounds, organize closets, generate and improve outfit suggestions, answer AI and shopping questions, prepare trips, provide local weather and operate requested social features. Account suggestions use existing follow relationships to prioritize accounts followed by people you follow, and may display the number of those connections. Blocked accounts in either direction and banned accounts are excluded. Suggestions do not require phone contacts or an external AI provider.
We also use limited information to send account verification and service emails, deliver notifications, investigate reports, prevent abuse, maintain reliability, comply with law and understand aggregate product performance.
Identical clothing photos and outfit requests may reuse results already stored for your account. Some simple inventory requests (counts, recorded-color filters and exact-photo duplicates) are processed on Clofit’s server without an OpenAI call. AI context is compacted to avoid sending redundant analysis fields and media links. These optimizations do not change the chat allowance.
Photos may be resized on your device before upload to reduce transfer size. Background removal runs on Clofit’s own server using a local segmentation model. Photos are not sent to a separate background-removal provider. The selected photos are still sent to OpenAI for garment analysis after your permission, as described below. A cutout can retain background details or miss parts hidden behind other objects; use an unobstructed photo and check the result.
Before the first garment analysis, Clofit explains that the selected clothing photo will be sent to OpenAI to identify details such as category, color, material and style, and asks for explicit permission. Before the first AI stylist or Shopping Assistant conversation, Clofit separately explains that messages and only the relevant profile, closet and wishlist context will be sent to OpenAI, and asks for explicit permission.
Each AI permission is feature-specific and can be withdrawn from Profile → Privacy & Support → AI data permissions. Withdrawing it stops new information from being sent for that feature.
Who helps Clofit run
Providers process data under their own terms and may process it outside Québec or Canada. Clofit limits the information sent to what the selected feature needs.
You decide what becomes social
A closet upload is not automatically a public post. You choose whether an outfit, OOTD, room or profile activity is private, friends-only, campus-visible or public where those controls are offered.
When you send an A/B opinion or clothing loan request, the selected recipient can see the shared pieces and your message. Clofit stores the participants, selected pieces, response and loan status to display the request and related notifications. The owner can mark an accepted loan as returned.
Vibe Room members can see the room schedule, assigned roles, submitted looks and votes. Clofit Duo uses wardrobe metadata from both consenting participants to create coordinated outfits; it does not reveal one participant’s private wardrobe photos to the other unless they separately choose to share them.
We may disclose information to service providers above, when you deliberately share it, to protect users and the service, during a lawful business reorganization, or where legally required. Reports are restricted to authorized moderation use.
Kept only as long as needed
Account content is generally retained while the account is active. Verification codes expire after 10 minutes. Security, moderation, transaction and backup records may remain for a limited period when reasonably necessary for fraud prevention, dispute handling, service recovery or legal obligations.
Deleting an item removes it from active use. Deleting an account initiates deletion or irreversible anonymization of active account data and user content, subject to the limited exceptions above.
Minimum age: 13
Clofit is not available to children under 13. A neutral date-of-birth screen is used during profile completion and access is rejected when the user is under 13. If we learn that an under-13 account was created, we will disable it and delete the associated personal information.
For a user who is 13, Clofit requires parent or legal-guardian consent. Other jurisdictions may require consent at a higher age; users must satisfy the rule that applies where they live. Guardians may contact us to request access to or deletion of a minor’s information.
Access, correct, export or delete
Depending on your location, you may request access, correction, deletion, withdrawal of consent, portability or information about how a decision was made. In-app controls also let you change visibility, delete garments and outfits, block accounts and permanently delete your account.
To exercise a privacy right, email support@clofit.app. We may need to verify that the request belongs to the account holder.
Designed with practical safeguards
An image fingerprint, matched within your account, helps recognize repeat clothing uploads and avoid duplicate processing. Offline clothing drafts retain the prepared photo bytes so a retry does not require a new image conversion.
The iPhone app keeps local copies of account data and cached images to support offline access and reduce repeated downloads. Image preloading and decoded image memory are bounded; this does not add a new data recipient or tracking service. Cached images are temporary and may be removed when cache limits are reached.
Clothing drafts waiting for upload are stored on your iPhone and associated with the account that created them. Retry attempts remain attached to that draft. A draft from one account is not uploaded as another account after you switch accounts. A connection is required to finish image processing and synchronization.
When you tap a notification, its destination may be held temporarily in app memory until navigation and sign-in are ready. Opening that destination remains subject to your account’s access permissions.
Persistent sign-in uses credentials held in Apple Keychain on the device. The server stores a hashed renewal credential, account and session identifiers, creation and expiration dates, and revocation status. Access credentials expire after 24 hours and renew automatically in supported app versions. A renewal session expires after 180 days without renewal. Signing out removes local credentials and requests server revocation; account deletion removes the session records.
Clofit uses authenticated API routes, ownership checks, encrypted network connections, server-side storage credentials and Apple Keychain for iOS sessions. Administrative access is restricted and reports are logged for moderation.
No service can promise zero risk. Use a unique password and avoid uploading identity documents, private addresses, payment information or images of people who did not consent.
Questions are welcome
Material changes will be posted here and, when appropriate, communicated in the app or by email before they take effect. Continued use after the effective date means the updated policy applies.