Privacy Policy
Last updated: 23 August 2026 · Data controller: ClosetWiz Ltd (United Kingdom) · Contact: privacy@closetwiz.co.uk
1. Who we are
ClosetWiz is an AI-powered virtual wardrobe and peer-to-peer secondhand-clothing marketplace. ClosetWiz Ltd (“ClosetWiz”, “we”, “us”) is the data controller for the personal data described here. This policy explains what we collect, why, who we share it with, where it is stored, how long we keep it, and the rights you have.
If you have any privacy question or want to exercise a right below, contact privacy@closetwiz.co.uk.
2. The data we collect
Information you give us
- Account: email address; password (stored only as a secure hash); or, if you use social sign-in, your Google/Apple account identifier (see §5).
- Profile: name, clothing sizes, gender (optional), and a profile photo or chosen avatar.
- Garment photos: the photos you take or upload of your clothing.
- Wardrobe data: attributes derived from your photos — item type, colours, brand, tags, and descriptions.
- Planning data: when you ask for an outfit for a planned day, the title and type of the calendar event you are styling for (free text you enter).
- Marketplace: listings you create, offers you make, and delivery/pickup addresses.
- Safety: reports you submit and users you block.
Information created when you transact
- Order and payment data: items bought/sold, amounts, currency, order status and timestamps, and the payment/transfer references from our payment processor. We never see or store your full card number — that is handled by Stripe (see §4).
- Shipping data: the delivery and pickup addresses on an order, shared with the carrier to produce a label.
Information collected automatically
- Product analytics (only if you opt in — see §6): app events and a pseudonymous identifier used to understand feature usage. Off by default.
- Basic technical data needed to operate the service (e.g. device/session information for security).
3. How we use your data, and our legal bases (UK GDPR Art. 6)
| What we do | Legal basis |
|---|---|
| Create and run your account; store your wardrobe; add, tag, and list items; process purchases, payouts, and shipping | Contract (Art. 6(1)(b)) — this is the service you sign up for |
| AI processing of your photos and item details (tagging, descriptions, outfit suggestions, background removal, and screening images before they go live) — see §4 | Contract (Art. 6(1)(b)) — this processing is the product |
| Send verification/OTP codes and transactional emails | Contract / legitimate interests (account security) |
| Screen content and enforce our rules (objectionable-content and abuse moderation) | Legitimate interests and legal obligation |
| Retain transaction and payment records | Legal obligation (tax/accounting) — see §8 |
| Product analytics | Consent (Art. 6(1)(a)) — opt-in, withdrawable |
4. AI processing of your photos (third-party AI)
ClosetWiz uses AI to make your wardrobe work. This means your garment photos and the details we derive from them are processed by third-party AI providers. We name them so you know exactly who receives what:
- Anthropic (Claude): receives your garment photos and item attributes, and — only when you ask for an outfit for a planned day — the calendar event title/type you enter as free text. Anthropic uses them to identify and tag garments, write item and outfit descriptions, draft listing copy, suggest outfits, and screen every uploaded image for objectionable content before it can be published. Listing-copy drafting sends only already-derived text attributes, not a new image.
- Claid: removes the background from your garment photos. Claid reads the photo directly from our EU storage and writes the cut-out back — we do not upload your photo anywhere else to do this.
This processing is essential to the service: without it, items cannot be added, tagged, or listed. You acknowledge it at sign-up. It is not an optional setting, and if you do not want your photos processed this way, please do not use ClosetWiz.
Where this happens: Anthropic processes your photos and item details in, and stores them in, the United States. Sending your photos to Anthropic is therefore a transfer of your personal data (including photographs) from the UK/EEA to the US, carried out under Standard Contractual Clauses (see §7).
5. Sign-in providers (Google and Apple)
If you choose to sign in with Google or Apple, that provider verifies your identity and returns a stable account identifier (and, where you allow it, your name and email) so we can create or access your account. We match your ClosetWiz account on that provider identifier, not on your email.
If you use Apple’s “Hide My Email”, Apple gives us a private relay address instead of your real one; email we send is delivered through Apple’s relay, and if you later turn the relay off, delivery to that address can stop.
6. Analytics and cookies
Product analytics are provided by PostHog, hosted in the EU (eu.i.posthog.com). Analytics are opt-in and off by default: we collect them only if you turn them on, and you can withdraw that consent at any time in Settings, after which we stop. Everything else in this policy is core processing needed to run the service, not analytics.
7. Who we share data with, and where it is stored
We do not sell your personal data. We share it only with the processors below, each for the purpose stated:
| Processor | Data | Purpose | Location / safeguard |
|---|---|---|---|
| Anthropic (Claude) | Garment photos, item attributes, calendar event titles | AI tagging, descriptions, outfit suggestions, content moderation | United States (processed and stored in the US) — Standard Contractual Clauses |
| Claid | Garment photos (read from our EU storage) | Background removal | See provider terms |
| Amazon Web Services (S3) | Your uploaded photos (wardrobe + profile) | Image storage | EU — Stockholm (eu-north-1) (stored at rest in the European Union) |
| Neon | Your account and marketplace data (email, name, addresses, order/payment records, wardrobe details) | Our primary database (managed, automatically backed up) | UK — London (eu-west-2) |
| Stripe | Buyer/seller identity, payment amounts, payout/bank + verification details, billing/shipping addresses | Payment processing and seller payouts | PCI-handled by Stripe; card data never reaches our servers |
| Shippo | Delivery + pickup addresses, names, package details | Carrier shipping labels and tracking | Shared with the carrier |
| Resend | Email address | Verification codes and transactional email | United States — covered by the EU-US/UK Data Privacy Framework and Standard Contractual Clauses |
| PostHog | Pseudonymous analytics events (opt-in only) | Product analytics | EU-hosted |
| Google / Apple | Sign-in identifier (+ name/email if you allow) | Social sign-in identity verification | Only if you use social sign-in |
Where your data lives: your photos are stored in Amazon S3 in the EU (Stockholm, eu-north-1), and your account and marketplace data (email, name, addresses, orders) is stored in our Neon database in the UK (London, eu-west-2). Both are in the UK/EU. Separately, when a photo is processed by our AI provider Anthropic, a copy is transferred to and stored in the United States by Anthropic (see below).
International transfers: some processors above process your data outside the UK/EEA:
- Anthropic (United States) — your garment photos and item details are transferred to, processed in, and stored in the US. This is our main international transfer and covers our most sensitive data (your photos). It is carried out under Standard Contractual Clauses.
- Resend (United States) — your email address, for transactional email, under the Data Privacy Framework and Standard Contractual Clauses.
All other processing of your photos and core account data takes place in the UK/EU.
We may also disclose data where required by law, to protect our rights or users’ safety, or as part of a business transfer (e.g. merger or acquisition), in which case this policy continues to apply.
8. How long we keep it, and account deletion
You can delete your account at any time from Settings → Delete Account in the app. When you do:
- Your personal data is deleted — your photos (removed from storage), wardrobe, outfits, profile, addresses, saved sign-in credentials, and analytics identifiers.
- Anonymised transaction records are retained. Where you have completed marketplace transactions, we keep the order and payment records with your personal identifiers removed (no name, no addresses, no photos) because we are legally required to retain financial/transaction records. These anonymised records cannot be used to sign in and are not linked to you.
- If you have activity in progress — an order still shipping or settling, or a payout on its way — deletion is paused until that finishes (you will see how many orders are in progress, and can cancel them where allowed). Deletion is always available once your obligations complete; it is never a permanent block.
Retention period for anonymised financial records: up to 6 years after the transaction, consistent with UK business-record/tax retention requirements (HMRC).
Personal data we hold while your account is active is kept only as long as needed to provide the service.
9. Your rights
Under UK GDPR you have the right to: access your data; correct it; delete it (“right to erasure”); restrict or object to processing; withdraw consent (e.g. analytics) at any time; and data portability (receive a copy of the data you provided in a portable format). Many of these you can do directly in the app (edit profile, toggle analytics, delete account); for anything else, contact privacy@closetwiz.co.uk and we will respond within one month.
You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
10. Security
We protect your data with encryption in transit, hashed passwords, access controls, and EU-based storage for your photos. No system is perfectly secure, but we work to protect your information and to notify you and the regulator of any breach as required by law.
11. Age requirement (18+)
ClosetWiz is a payment marketplace (buying, selling, offers, and payouts) and is intended for adults aged 18 or over. It is not directed to anyone under 18, and we do not knowingly collect personal data from under-18s. If you believe someone under 18 has provided us data, contact privacy@closetwiz.co.uk and we will delete it.
12. Changes to this policy
We may update this policy from time to time. Material changes will be notified in-app or by email, and the “Last updated” date above will change. Continued use after an update means you accept the revised policy.
13. Contact
Privacy questions and requests: privacy@closetwiz.co.uk (or admin@closetwiz.co.uk). ClosetWiz Ltd, United Kingdom.