Privacy Policy

Clairop is an AI styling app operated by Pavado Technologies Inc., a corporation formed in the Province of Ontario, Canada. You give it a photo of yourself, and it designs an outfit and can render an AI image of you wearing it. This policy explains exactly what happens to that photo and everything else.

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and with the additional rights described below for users in the EU, UK and California.

The short version

• Your photos are stored on your device, not on our servers.
• To build a fit, your photo is sent to our AI providers (Anthropic and Google) for processing, then discarded.
• Those providers are in the United States, so your photo is processed outside Canada. See Where your data goes.
• You sign in with Apple or Google, so we hold your email address, and if you use Google, the name and profile picture on that Google account.
• We don't sell your data, we don't run ads or third-party analytics, and we never use your photos to train AI models.

What we collect, and why

Photos

When you take or choose a photo, it is saved locally on your device so you don't have to retake one every time you want a new fit. You can delete saved photos at any time in the Me tab, or remove everything with Reset all data in the Style tab.

To generate a fit or a try-on image, the photo is transmitted to our AI providers for processing. It is held in memory for the duration of that request and is not written to our databases or file storage. We do not retain a copy.

You are signed in when you make that request, so the upload is associated with your account while it is being processed. That is why our App Store privacy label lists photos as linked to you. What it does not mean is that we keep them: nothing on our side stores a photo once the request finishes.

Style preferences

Your onboarding answers (aesthetic, fit, colours, pieces, budget, sizes, and any free-text notes) are stored on your device and sent with each styling request so the result is tailored to you.

Your account

You create an account at the end of setup using Sign in with Apple or Sign in with Google. We never see or store a password: the provider confirms who you are and passes us an email address and an account identifier.

What we receive depends on the provider. Sign in with Apple gives us an email address only, and if you choose Hide My Emailthat is Apple's private relay address, which works perfectly well with Clairop. Sign in with Google also returns the name and profile picture on your Google account, because Google includes them in the standard sign-in profile and does not let an app request less.

Clairop never displays or uses your name or picture. They sit unused on your account record and are erased when you delete your account. No phone number and no contact list, from either provider.

Your account is what ties your style profile, saved fits and usage counts together, which is what lets them follow you to a new phone. It also means the data described below is linked to you, rather than to an anonymous device.

Usage counts and subscription status

We store a daily count of fits and try-on renders against your account, and whether you have an active Clairop Pro subscription. These enforce fair-use limits and control our costs. Subscription status is confirmed with Apple; we never see your payment details.

Saved outfits

The outfits Clairop designs for you are backed up against your account so they follow you to a new device: the style name, the description, the colour palette, and the list of pieces. Your photo and your try-on renders are never uploaded and are not part of this backup. They stay on your device.

App analytics

We record a small set of product events against your account, such as finishing onboarding, starting a scan, a scan failing, or a purchase completing, along with the app version and coarse error categories when something goes wrong. This tells us which parts of the app break or confuse people.

These events never contain your photos, your outfits, the notes you typed, or any contact details. We use no third-party analytics or advertising SDK, and there is no tracking identifier: the data goes to our own servers and nowhere else.

Marketing email

When you create your account there is a separate, unticked box asking whether you want tips, new features and offers from Clairop. We only send marketing email if you tick it, in line with Canada's anti-spam legislation (CASL), and every message has an unsubscribe link. Declining it changes nothing about the app.

Waitlist email

If you enter your email address on this website, we store it solely to notify you when Clairop launches. You can ask us to remove it at any time by emailing support@team.clairop.com.

What we do not collect

No password, phone number, contacts, location, health data, advertising identifier, or third-party analytics or tracking of any kind. We do not track you across other apps or websites, and we never sell or share your information with data brokers.

What is linked to your account

Because Clairop requires an account, the data below is associated with you rather than with an anonymous device. This mirrors the privacy label on our App Store listing:

• Your email address, and your name and picture if you signed in with Google
• Photos, while a request is being processed, though never afterwards
• Your saved outfits and style profile
• Your account identifier
• Your subscription and purchase history
• Usage counts and product analytics events
• Coarse error diagnostics

None of it is used to track you across other companies' apps or websites, and none of it is sold or shared with data brokers.

Consent

Before your first scan, the app shows a consent screen explaining that your photo will be sent to third-party AI providers, and you must agree before anything is sent. Continuing to use the styling and try-on features constitutes ongoing consent. You can withdraw consent at any time by ceasing to use those features or deleting the app; withdrawal doesn't affect processing already carried out.

Where your data goes

We use the following processors. Each receives only what it needs to do its job.

Processing outside Canada.As the table shows, your personal information, including your photo, is processed by service providers located outside Canada, primarily in the United States. While it is in another country it is subject to the laws of that country, and may be accessible to that country's courts, law enforcement and national security authorities under their lawful access regimes. We remain accountable for your information while those providers handle it on our behalf, and we use contractual and technical measures to require a comparable level of protection. If you would rather your photo not be processed outside Canada, please don't use the styling or try-on features, because they cannot function without it.

We do not sell personal information, and we do not share it for advertising or cross-context behavioural purposes.

Children

Clairop is not directed at children. Our Terms require you to be at least 16 to use the app. We do not knowingly collect personal information from anyone under 13, and we do not ask for or infer a user's age.

If we learn that we hold personal information belonging to a child under 13, we delete the account and everything attached to it, including any photos still in transit to our AI providers. A parent or guardian who believes their child has created an account can write to support@team.clairop.com and we will delete it without requiring proof of the account credentials.

AI-generated images

Try-on images are generated by an AI model, not photographs. They are an approximation of how an outfit might look and will differ from reality. Every render is labelled AI-generatedin the app. Please don't present them as real photographs of yourself or anyone else.

Your choices

• Delete individual photos: Me tab.
• Delete everything: Style tab → Reset all data. Clears the preferences, saved fits and photos on this device, and erases the matching records on our servers, including your saved outfits, usage counts, subscription record and analytics events.
• Delete your account: Style tab → Delete Account. Permanently erases your account and everything attached to it, on your device and on our servers: saved fits, usage history, subscription record and analytics events. This cannot be undone.
• Delete the app: removes all local data, including every photo. Your account and its saved fits remain until you delete the account itself.
• Manage your subscription: Style tab → Manage Subscription, or through your Apple account settings.

Your rights

Under PIPEDA you have the right to access the personal information we hold about you, to ask for corrections, and to challenge our compliance with this policy. Email support@team.clairop.comand we'll respond within 30 days. If you're not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

If you are in the EU or UK, you also have rights of erasure, restriction, objection and data portability under the GDPR / UK GDPR. If you are a California resident, you have rights of access, deletion and correction under the CCPA, and the right not to be discriminated against for exercising them. We honour all of these through the same contact address. Because we hold so little about you, most requests are satisfied by the in-app deletion options above.

Retention

Photos: kept on your device until you delete them; never retained on our servers. Usage counts and analytics events: retained for up to 90 days, then deleted. Email address, saved outfit metadata and subscription records: kept while your account exists, and erased when you delete it. Waitlist emails: until you ask us to remove them, or until launch plus a reasonable follow-up period. Purchase records: held by Apple under Apple's policies.

Children

Clairop is not intended for anyone under 16, and we do not knowingly collect information from children. If you believe a child has used the app, contact us and we'll remove any associated records.

Security

All traffic between the app and our servers is encrypted in transit (HTTPS/TLS). Your session token is stored in the iOS Keychain. Access to our backend is restricted and our database tables deny access by default. No system is perfectly secure, but we keep the amount of data we hold deliberately small.

Changes

If this policy changes materially, we'll update the date above and note the change in the app before the new version takes effect.

Contact

Questions, requests, or privacy complaints go to our Privacy Officer at support@team.clairop.com.

Pavado Technologies Inc.
Province of Ontario, Canada