Privacy

What we keep, and who sees it.

StyleOS is a small wardrobe app run by two people, not a company. Nothing here is for sale. StyleOS is for adults aged 18 and over. This page says plainly what it stores, where that lives, and which other services it hands your data to. Last updated 27 October 2026.

What you give it

• Your account. Your email address, the name you chose, your password if you set one, and, if you sign in with Google or Apple, the account it is linked to. These are held by Clerk, our sign-in provider (below). The password is never stored as you typed it, only as a one-way hash. The six-digit codes emailed to you are kept for a few minutes, until they are used or expire. We also keep the dates and times when you confirm you are 18 or older and agree to AI processing. The age confirmation does not ask for your date of birth or an identity document.
• Photos of clothing. The pictures you upload, and the standardised version made from each one.
• One full-body photo, if you add it. It exists so the stylist can show an outfit on you. Nothing else uses it.
• Your wardrobe. Every item and its attributes, your outfits, and the links to retailer pages you saved.
• Your profile. Height, weight, sizes, coloring, location, and the style notes you write.
• Your chats. The full history of what you asked the stylist and what it answered, plus the short memories it writes down about your taste. You can read and delete those memories on your profile page.
• Usage measurement, on the website only. Google Analytics records page views and rough location from your IP address. It runs in its cookieless mode here, so it stores nothing in your browser and cannot follow you between visits. The iOS app has no analytics of any kind.

Where it lives

Everything sits on Railway, in the operator’s account: a Postgres database for your text, and private storage buckets for your images, one of them a backup copy. Nothing is on a public bucket. Image URLs need you signed in and only ever serve your own files.

Who else receives it

• OpenAI — your chat messages, your profile, the wardrobe details the stylist looks up and any photo you attach to a chat, so the stylist can answer. Also each photo you add, or ask the stylist to add pieces from, to find the pieces in it; each piece’s photo, to work out what the piece is and to standardise it; and your clothing photo together with your full-body photo, to render a try-on. When you ask for a try-on to be worn a particular way, your full-length photo and the rendered image, so a model can check the render did what you asked before you see it. The text of a retailer page goes the same way, to pull out an item’s attributes. And your item descriptions and your stylist memories, turned into embeddings so search works.
• Firecrawl — the retailer URL you paste, so the page can be fetched and read.
• OpenWeather — the location on your profile, so the stylist can look up its forecast.
• Langfuse — a record of each request StyleOS makes to OpenAI: what was sent, including your messages, profile, wardrobe details and photos, and what came back. Standardising a photo and rendering a try-on are logged without their prompts or pictures. It exists so the operator can find out why the stylist got something wrong. Each record carries your account id.
• Clerk — signing in: your email address, name, password hash, Google or Apple link, sessions and the devices you sign in from. Clerk also sends the emails about your account: the code to confirm your address, the code to reset your password, and the code for a password sign-in from a new device. It compares passwords with Have I Been Pwned’s collection of passwords exposed in data breaches, and refuses one found there.
• Google — only if you choose to sign in with Google: Google tells Clerk your name and email address.
• Apple — only if you choose to sign in with Apple: Apple tells Clerk your name and email address, or a private relay address if you hide yours.
• Cloudflare — on the sign-up page only: Clerk’s bot check (Cloudflare Turnstile) runs in your browser and sees your IP address and browser details, to tell a person from a script.
• Google Analytics — from the website only: page views, device and browser, approximate location. No identifier that links one visit to the next.
• Railway — the host, so it holds all of the above at rest.

That is the whole list. Your data is not sold, not shared with advertisers, and StyleOS does not use it to train any model. Each service above is used on business terms that require it to give your data the same or equal protection to what this page states: it receives only what the line beside it names, uses it only to return that result to StyleOS, keeps it confidential, and does not pass it on. OpenAI does not train its models on what is sent through its API, and keeps it for up to 30 days to check for abuse, longer only if the law requires it or to prevent harm. StyleOS has no zero-data-retention agreement with OpenAI, so that copy is kept.

Agreeing to that, and changing your mind

Before you can use the AI features, StyleOS asks you to confirm you are 18 or older and agree to the AI processing described above. Both are required, including for existing accounts that have not yet confirmed their age. This happens during sign-in on the website, in the iOS app and in the browser extension, which all use the same sign-in pages. You can withdraw your AI consent whenever you like: your profile page on the web has a setting to withdraw it, and the iOS app’s profile links you straight to it. Withdrawing signs you out of every device, and keeps every app and assistant you connected out until you agree again. It does not delete anything already stored; for that, delete the account.

If you cannot confirm you are 18 or older, or do not want to agree to AI processing, choose Delete my account instead on that screen. You can delete your account without giving either confirmation.

Cookies

Only the cookies that sign you in: the one that keeps you signed in, and short-lived ones that hold a step of signing in for a few minutes, all set by Clerk, our sign-in provider. Nothing else is stored in your browser: analytics runs without cookies, there is no advertising, and there is no tracker asking you to accept anything.

In the iOS app

The app asks for the camera the first time you photograph a piece, and for your photo library the first time you pick a picture from it; each is used only for the picture you choose at that moment, and nothing is read from your library in the background. The app keeps its sign-in token in the iOS Keychain, where signing out wipes it, and keeps pictures it has already downloaded in its cache folder on the device, so a list does not fetch them twice; that cache is trimmed as it grows and goes when you delete the app. There is no analytics in the app and no third-party SDK in it at all: it talks to StyleOS, and to Clerk to sign you in, and to nothing else.

How long it is kept

Everything is kept until you delete it — there is no other expiry, and nothing is kept on for a separate purpose after it goes. Delete an item and its photos go with it. A photo you add is kept whole only while you pick the pieces in it: once they are added it goes, and one you did not add pieces from goes within a day. An admin can ban an account, which signs it out everywhere and refuses every sign-in until the ban is lifted; the data, sign-in methods and password stay in place until the account is deleted. If you asked for a place on the old waitlist before signup opened, your name and email are kept only to send you one email saying StyleOS is open, and are deleted after that.

Deleting your account

Deleting your account removes everything StyleOS holds about you, immediately and for good; you do it yourself, and no email to anyone is needed.

On your profile page, on the web or in the iOS app, choose Delete account, type “delete” and confirm it is you by signing in again. It happens at once and cannot be undone: your wardrobe, photos, outfits, try-ons, chats, memories and profile are removed, from the database, the image storage and its backup copy, and your Clerk account with your password and Google or Apple link; if Clerk cannot confirm that, nothing is deleted and you are asked to try again. Every device and every app you connected is signed out. A second pass runs 15 minutes later to catch anything that was still being processed at that moment. It also deletes the Langfuse records of your requests, which Langfuse finishes removing within about 15 minutes. An admin removing a member does the same thing.

Two things are outside that button. The services listed above keep their own short-lived copies of what they processed, under their own API terms (OpenAI, for example, keeps API data for up to 30 days). And the database’s own backups age out on Railway’s schedule rather than on the spot.

What you can ask for

Ask for a copy of your data or a correction, and it will be done by hand — there is no automated export yet. Email developer@styleos.dev. That address is the operator and the admin, and is the only contact for this app.

Age requirement

You must be 18 or older to use StyleOS. Please do not sign up if you are younger. If you believe someone under 18 has an account, email developer@styleos.dev so we can remove it.

Changes

If what the app does with your data changes, this page changes with it and the date at the top moves. Anything that would widen who receives your data will be said in the app before it happens.