Privacy policy

Last updated 27 October 2026

Ezfit is a wardrobe app. This policy explains what Ezfit keeps, what it sends to other services and why, and how to delete it.

The short version

• Without an account, everything stays on your phone.
• With an account, your closet is backed up to your own private account, so it syncs between your phones.
• The AI features send only what they need, and only after you say yes. Ezfit doesn’t keep the photos you scan or your selfie, apart from each scanned piece’s cropped photo.
• Ezfit Plus is bought through the App Store or Google Play. Ezfit never sees your card or payment details.
• No ads, no tracking, and your data is never sold.
• You can delete your account and everything in it from the app, or by asking us.

What Ezfit keeps

On your phone

• Your profile: the name you give, your avatar (the gender, skin tone and hair you pick), your country, your answers about style, routine and goals, how warm you usually feel, your reminder and display settings, your color palette if you made one, and the pieces and pairs you asked to see less of.
• Your closet: each piece’s name, type, colors, fabric and style tags, whether it’s a favorite or in the laundry, how often and when you wore it, whether it’s in the donate basket, and what you paid for it if you add a price. Prices are only for you: they’re never sent to the AI.
• The rest of your wardrobe: saved looks, your outfit calendar, today’s outfit, laundry dates, the pieces you donated, sold or gave away, and the last 60 messages with the stylist.
• Piece photos: when you scan a photo, each piece keeps its own cropped photo, never the full photo. It’s saved again without the hidden details photos carry (location, time, phone model). If a person shows in the photo, Ezfit asks before keeping it. You can also add or retake a piece’s photo in its details. The white-background version of each photo is made on your phone and stays there.
• How you pick outfits: the suggestions you shuffle away and the pieces you swap or keep, for the last 90 days, so suggestions fit you better. It stays on this phone, and Start over, sign out and Delete account erase it.

Without an account, this is the only copy. Start over (in your profile) erases it.

In your account, when you sign in

• Sign-in details: your email address (or Apple’s private relay address if you use Hide My Email), an account ID, and the first name Apple or Google shares, which fills in your profile name if it’s empty. You sign in with Apple, with Google or with a one-time code sent to your email. Ezfit never sees your Apple or Google password.
• A copy of everything above, apart from the white-background photos and how you pick outfits, so it syncs between your phones. When you remove something, a deletion marker stays for 90 days so your other phones remove it too. Then it’s gone for good.
• Your piece photos, if Back up photos is on (it is unless you turn it off in your profile), in private storage that only your account can reach.
• AI usage records: for each AI request, which feature, when, and how much text it took (tokens). Never what was sent or answered. They’re used for the daily limits and to keep costs in check. After 90 days they’re folded into monthly totals per feature.
• Reports you send with the Report button: the text of the AI answer, your reason and your note.
• Ezfit Plus: whether you have it and until when, whether it renews, whether you’re on the free trial, which store it’s from, and, during the trial, whether your phone reminds you or Ezfit should email you, and the yearly price you saw. Never your payment details.

Crash reports

When the app or Ezfit’s server runs into an error or crashes, a report goes to Sentry so it can be fixed: what went wrong and where in Ezfit’s code, the app version, your phone’s model and system version, and a random ID for this installation of the app. From the server, it’s which request it was (like “POST /api/stylist”), never what was in it. Reports never include your name, email, account, photos, closet or chats, and IP addresses aren’t stored. You can turn crash reports off under Profile → Account and privacy → Send crash reports; it applies from the next time Ezfit opens.

What Ezfit doesn’t do

• No ads, no advertising IDs, and no analytics or tracking tools.
• Your data is never sold or shared for advertising.
• Your photos, selfie and closet are never used to identify you, for marketing, or for anything beyond the features you use.

The AI features

Photo scans, Your colors, the stylist and Restyle ideas send data to Anthropic’s Claude, an AI service, to get an answer. Before the first one, the app shows what’s sent and asks you. If you choose Not now, nothing is sent, and everything else in Ezfit keeps working. You can turn the permission off again under Profile → AI permission.

• Photo scans: the photo you pick, made smaller first (1280 pixels on its longest side). Ezfit doesn’t keep the full photo; it keeps only each piece’s cropped photo, as described above. Saved piece photos are never sent to the AI.
• Your colors (with Ezfit Plus or its free trial): your selfie, to estimate your skin’s undertone, depth and contrast for a color palette. It isn’t used to recognize you. Ezfit doesn’t keep the selfie, only the palette.
• Stylist: your recent messages, your closet as text (names, types, colors, fabrics, style tags, laundry state and when each piece was last worn), your saved looks and the coming week’s plans, your profile name, gender, style answers and color palette, and your city and its weather.
• Restyle ideas: the piece and the rest of your closet as text, your gender and style answers, and your city and its weather.
• Resell: nothing. Listings are written on your phone, with no AI. Older versions of the app used AI for them and sent the piece as text, the brand, size and condition you entered, and your country and currency.

Requests go through Ezfit’s server, which checks your sign-in and daily limits and passes them on. It doesn’t store what was sent or answered.

Anthropic handles this data as Ezfit’s service provider (a “processor”), under its commercial terms and data processing addendum. Under those terms it doesn’t train its models on it, and it deletes it within 30 days. The exceptions: if its safety systems flag a request under its usage policy, it may keep it for up to 2 years, and it keeps data longer where the law requires. More in Anthropic’s privacy center.

AI answers can be wrong. The terms say more, and every answer has a Report button.

Location and weather

• Weather comes through Ezfit’s server, from Apple Weather or Open-Meteo (the app shows which). Without location, it’s the forecast for your country’s main city. If you allow location (“Use my location”), the app sends Ezfit’s server your position rounded to about 5 km and your phone’s time zone. The server asks the weather service for that area and keeps the forecast for about 30 minutes so people nearby share it, without anything that identifies you. Ezfit doesn’t store your position, and the weather services see Ezfit’s server, not your phone. Open-Meteo keeps its server logs, which can include those rounded coordinates, for up to 90 days. Apple says location is used only to provide the forecast, isn’t linked to personal information and isn’t tracked between requests.
• Your town’s name comes from your phone’s own maps service (Apple on iPhone, Google on Android).
• Donate: to find charity shops and clothes banks near you, Ezfit sends your rounded position to public OpenStreetMap (Overpass) servers run by volunteers. Your exact position stays on your phone, just to show distances.
• The daily outfit reminder is scheduled on your phone. No push server is involved. So is the reminder two days before an Ezfit Plus free trial ends; if your phone doesn’t allow notifications, Ezfit emails you instead, once.

Who else handles your data

• Anthropic (United States): the AI answers, as described above.
• Supabase: accounts, the database and the photo backup, stored in the United States (Oregon).
• Cloudflare (Workers): runs Ezfit’s server and these pages. It keeps basic request logs (time, address requested, result, approximate region) for a limited time. The weather request carries your rounded position in its body, not its address, so these logs don’t hold it.
• RevenueCat (United States): keeps track of Ezfit Plus purchases made through the App Store and Google Play, so Plus follows your account. It gets your account ID and your purchase history (which plan, when, the price and the store), never your payment details.
• Resend: delivers the sign-in code email when you choose to sign in with your email, and the one email before an Ezfit Plus free trial ends when your phone doesn’t allow notifications. It gets your email address and the email’s text.
• Apple and Google: Sign in with Apple and Sign in with Google. They also deliver the app through the App Store and Google Play, and take payment for Ezfit Plus under their own privacy policies.
• Apple (WeatherKit) and Open-Meteo: the weather, through Ezfit’s server. They get a rounded area, never your account or your phone’s address.
• OpenStreetMap (Overpass servers): places nearby to donate.
• Sentry (Functional Software, Inc., data stored in the United States): crash and error reports, as described above.

Some of these companies are in the United States. Where data protection law requires it, transfers are covered by the European Commission’s standard contractual clauses.

How long it’s kept

• On your phone: until you delete it, Start over, sign out or delete the app.
• In your account: as long as you keep the account.
• Stylist chat: the last 60 messages; older ones drop off.
• Deletion markers: 90 days.
• AI usage records: 90 days, then monthly totals until the account is deleted.
• Piece photos: until the piece is deleted, donated, sold or given away (shortly after, so Undo still works), until you remove the backed-up photos in your profile, or until the account is deleted.
• Reports: as long as needed to look into them, and never longer than the account.
• Ezfit Plus: as long as the account; RevenueCat’s record is deleted with it.
• At Anthropic: up to 30 days, with the exceptions above.
• Crash reports: 30 days at Sentry.
• Sign-in code emails: Resend keeps a record of each email it delivers (address, subject, whether it arrived) for a limited time. The codes stop working within an hour.

Deleted data can stay in the database’s automatic backups for a few more days, until those backups are replaced.

Deleting your data

• One thing at a time: delete a piece, look or calendar entry, start a new chat to clear the stylist chat, or turn off Back up photos and choose Remove.
• Everything: Profile → Delete account. It deletes your account and everything in it, backed-up photos and your Ezfit Plus purchase record at RevenueCat included, and clears this phone. Other phones signed in to the account keep their own copy until you sign out or delete the app there. It doesn’t cancel an Ezfit Plus subscription: cancel that first in your phone’s Settings (or Google Play), or the store keeps charging.
• Without the app: follow the steps on Delete your account.
• Sign in with Apple: deleting an account signed in with Apple asks Apple to confirm once more, then removes Ezfit from your Apple Account. You can also remove it yourself in your iPhone’s Settings → your name → Sign-In & Security → Sign in with Apple. Deleting an account signed in with Google also removes Ezfit from your Google account’s connected apps.

Your rights

Depending on where you live (for example under the GDPR in the EU and UK, or in California), you can ask to see, correct, export or delete your data, to object to or limit how it’s used, and to withdraw your consent. Most of it you can see and change in the app; for anything else, write to support@clapd.app. You can also complain to your local data protection authority.

In the EU and UK, Ezfit relies on these legal bases:

• Contract: running the app and your account, and Ezfit Plus when you buy it.
• Consent: the AI features and location. You can withdraw it any time (Profile → AI permission, or your phone’s location settings).
• Legitimate interests: keeping the service safe and affordable (daily limits, usage records, reports and request logs) and fixing what goes wrong (crash reports).

Children

Ezfit isn’t meant for children under 13, and we don’t knowingly collect their data. If you think a child has given us data, write to support@clapd.app and we’ll delete it.

Changes

When this policy changes, the date at the top changes. If what the AI features send, or who receives it, changes, the app asks for your permission again.

Contact

For questions or requests about your data, write to support@clapd.app.