Who this policy covers
This Privacy Policy applies to the Clofit iOS app, clofit.app and related services operated by Clofit from Québec, Canada. It covers account holders, visitors and people who join the launch waitlist.
Clofit is the organization responsible for the personal information described here. Its Privacy Officer can be reached at support@clofit.app.
Information we collect
- Account and eligibility: email, username, display name, encrypted password credential, authentication provider identifier, date of birth, age-verification date and parent/guardian consent status when required.
- Profile and style: profile photo, bio, campus, optional gender, body-shape, face-shape, sizes, brands and style preferences.
- Closet and creations: garment photos, background-removed images, detected categories, colors, brands and tags, outfits, collections, ratings, feedback and trip plans.
- Social activity: OOTDs, posts, comments, likes, follows, saves, blocks, reports, Campus activity, Vibe Rooms and Clofit Duo activity, including visibility settings.
- AI requests: chatbot prompts, shopping questions, optional images, relevant closet metadata and feedback used to personalize future outfit candidates.
- Location and weather: approximate or precise device location only after iOS permission, plus searched trip destinations. Location is used for requested weather-aware features, not continuous tracking.
- Device and operations: push notification token, app version, IP address, request timestamps, security logs, crash or diagnostic information made available to us.
- Website waitlist: name, email, language, referral source and signup timestamps.
From photo to useful outfit
We process information to create and secure accounts, analyze garments, remove backgrounds, organize closets, generate and improve outfit suggestions, answer AI and shopping questions, prepare trips, provide local weather and operate requested social features.
We also use limited information to send account verification and service emails, deliver notifications, investigate reports, prevent abuse, maintain reliability, comply with law and understand aggregate product performance.
Before the first garment analysis, Clofit explains that the selected clothing photo will be sent to OpenAI to identify details such as category, color, material and style, and asks for explicit permission. Before the first AI stylist or Shopping Assistant conversation, Clofit separately explains that messages and only the relevant profile, closet and wishlist context will be sent to OpenAI, and asks for explicit permission.
Each AI permission is feature-specific and can be withdrawn from Profile → Privacy & Support → AI data permissions. Withdrawing it stops new information from being sent for that feature.
Who helps Clofit run
Providers process data under their own terms and may process it outside Québec or Canada. Clofit limits the information sent to what the selected feature needs.
You decide what becomes social
A closet upload is not automatically a public post. You choose whether an outfit, OOTD, room or profile activity is private, friends-only, campus-visible or public where those controls are offered.
Vibe Room members can see the room schedule, assigned roles, submitted looks and votes. Clofit Duo uses wardrobe metadata from both consenting participants to create coordinated outfits; it does not reveal one participant’s private wardrobe photos to the other unless they separately choose to share them.
We may disclose information to service providers above, when you deliberately share it, to protect users and the service, during a lawful business reorganization, or where legally required. Reports are restricted to authorized moderation use.
Kept only as long as needed
Account content is generally retained while the account is active. Verification codes expire after 10 minutes. Security, moderation, transaction and backup records may remain for a limited period when reasonably necessary for fraud prevention, dispute handling, service recovery or legal obligations.
Deleting an item removes it from active use. Deleting an account initiates deletion or irreversible anonymization of active account data and user content, subject to the limited exceptions above.
Minimum age: 13
Clofit is not available to children under 13. A neutral date-of-birth screen is used during profile completion and access is rejected when the user is under 13. If we learn that an under-13 account was created, we will disable it and delete the associated personal information.
For a user who is 13, Clofit requires parent or legal-guardian consent. Other jurisdictions may require consent at a higher age; users must satisfy the rule that applies where they live. Guardians may contact us to request access to or deletion of a minor’s information.
Access, correct, export or delete
Depending on your location, you may request access, correction, deletion, withdrawal of consent, portability or information about how a decision was made. In-app controls also let you change visibility, delete garments and outfits, block accounts and permanently delete your account.
To exercise a privacy right, email support@clofit.app. We may need to verify that the request belongs to the account holder.
Designed with practical safeguards
Clofit uses authenticated API routes, ownership checks, encrypted network connections, server-side storage credentials and Apple Keychain for iOS sessions. Administrative access is restricted and reports are logged for moderation.
No service can promise zero risk. Use a unique password and avoid uploading identity documents, private addresses, payment information or images of people who did not consent.
Questions are welcome
Material changes will be posted here and, when appropriate, communicated in the app or by email before they take effect. Continued use after the effective date means the updated policy applies.