draft

this is a draft, not yet reviewed by a lawyer, and may change before garmini launches. highlighted parts are still to be filled in.

privacy policy

this policy explains what personal data [COMPANY LEGAL NAME] ("garmini", "we"), [REGISTERED ADDRESS], collects when you use garmini, why, who it is shared with and what you can do about it. garmini is only for people 18 and over. version 2026-11-03.

what we collect

  • account: your email, a hashed password or your google account id (if you sign in with google), your referral code, your beta access status, and the terms version you accepted, when, and that you confirmed you are 18 or older.
  • sign-up answers (optional): your name, whatsapp number, what you shop for (menswear / womenswear / both), style, fit and how often you shop.
  • style profile: sizes, budget, colours, likes and dislikes that you give or that the stylist learns from the chat. you can see and change it in your profile.
  • where you are: a city and country, for the weather, the seasons and the currency. if you haven't given one, we guess it from your device's time zone and the country our network provider (cloudflare) reports for your connection, without asking for your location and without storing your ip address. the guess is marked as detected in your profile, and you can change or clear it there; what you type or tell the stylist always replaces it.
  • chats: your messages, the stylist's replies and the looks and products shown.
  • closet photos: photos of clothes you upload, the cut-out of each garment, and what was read from them (type, colours, pattern). we remove location and camera data (exif) before storing a photo.
  • saved items, saved and shared looks.
  • shopping links: when you tap a product link we record the click (which product, when, and your account) so the merchant's sale can be attributed to garmini.
  • usage and device: pages viewed, how you use the app (google analytics), and technical logs (ip address, browser, errors) for security and to keep the service running.

why we use it

we don't sell your personal data, and we don't use it to identify you from your face. closet photos are used to read clothes, never to recognise people.

  • to run garmini for you: answer your messages, find products in your size and budget, style looks around your own clothes, and keep your chats and saved items. (contract)
  • to measure and improve garmini, prevent abuse and keep it secure, including rate limits and blocking misuse. (legitimate interests)
  • to attribute purchases to garmini and get paid commissions by merchants. (legitimate interests)
  • analytics cookies where the law requires consent, with your consent.
  • to comply with the law.

ai model providers

to answer you, your messages, the relevant part of your style profile and the products in the conversation are sent to ai model providers: anthropic (claude) and openai. closet photos and product images are analysed with google's gemini models on google cloud (vertex ai). these providers process the data on our behalf, under terms that don't let them use it to train their models. some of them process data in the united states.

to debug and improve the stylist we keep traces of chat turns with langsmith (langchain). turns that include a closet photo are not traced.

who else sees it

  • merchants: when you follow a link to buy, the merchant receives the click through the tracked link and handles your order under its own privacy policy. we don't give merchants your name, email or chats.
  • service providers: hosting (railway), network and security (cloudflare), a private storage bucket for closet photos, google analytics, and the ai providers above. each processes data only for us.
  • people you share a look with: a share link shows only the look's name and pieces.
  • authorities, when the law requires it, or to protect garmini, our users or others.

closet photos

closet photos are kept in a private storage bucket, never public. pictures are shown to you through links that expire after 15 minutes. a photo you add but don't keep is deleted after 30 days. when you remove a piece from your closet, its photo is deleted for good.

cookies and the installable app

we use cookies to keep you signed in, to carry a message you typed through sign-in, and for google analytics (when enabled). if you install garmini as an app, it stores only the app's own files on your device (not your chats or photos) so it opens fast.

how long we keep it

  • your account, profile, chats, saved items and closet: until you delete them or your account.
  • unkept closet photos: 30 days.
  • shopping link clicks: [RETENTION PERIOD]. when you delete your account they are kept without any link to you, for merchant accounting.
  • security and technical logs: [RETENTION PERIOD].
  • google analytics data: [RETENTION PERIOD] (set in google analytics).

your choices and rights

you can see and edit your profile, remove closet pieces and saved items, stop sharing a look, and delete your account in profile → settings → "delete my account". deleting it removes your account, chats, profile, saved items, closet photos and shared links at once.

depending on where you live (for example under the gdpr, uk gdpr, egypt's personal data protection law 151/2020, or california law) you may also have the right to access, correct, delete, restrict or object to the use of your data, to data portability, and to withdraw consent. write to [CONTACT EMAIL]. you can also complain to your data protection authority.

children

garmini is not for anyone under 18, and we don't knowingly collect their data. if we learn an account belongs to someone under 18, we delete it. if you tell the stylist you are under 18, it stops personalising and won't help you shop. if you believe a child has given us data, write to [CONTACT EMAIL].

international transfers

our providers may process data outside your country, including in the united states and the european union. where the law requires it we use appropriate safeguards (such as standard contractual clauses) [AND ANY LICENCE OR APPROVAL REQUIRED LOCALLY].

security

data is encrypted in transit, passwords are hashed, closet photos are private, and access to production data is restricted. no system is perfectly secure; tell us at [CONTACT EMAIL] if you find a problem.

changes

when we change this policy in substance we'll tell you in the app before it applies.

contact

[COMPANY LEGAL NAME], [REGISTERED ADDRESS]. email: [CONTACT EMAIL]. [DATA PROTECTION OFFICER / LOCAL REPRESENTATIVE, IF REQUIRED].