Legal
Privacy Policy
rack is a wardrobe app. This page explains, in plain language, exactly what it stores, what leaves your phone, and who else can see it.
The short version. Your account, your wardrobe and your clothing photos are stored on our servers so they can sync and survive a lost phone. When you use the AI styling or try-on features, the relevant photos and wardrobe details are sent to Google to generate a result. We show no ads, run no analytics or tracking SDKs, and never sell your data.
Who we are
rack is built and operated by Khizar Alam. For any privacy question, or to request a copy or deletion of your data, email khizaralam20@gmail.com.
What we collect
| What | Why |
|---|---|
| Account details — email address, password (stored only as an Argon2 hash, never in readable form), display name, username, time zone, and your app preferences. | To create your account, sign you in, and keep your settings consistent across devices. |
| Apple sign-in identifier, if you sign in with Apple. | To recognise you on return without you creating a password. If you choose Apple's Hide My Email, we only ever see the relay address. |
| Your wardrobe — garments, outfits, closets, canvas boards, what you wore and when, and achievements. | This is the content of the app. It syncs so your wardrobe is on every device you sign into and survives losing your phone. |
| Clothing photos — both the original photo you take and the background-removed cut-out. | Stored so your wardrobe images load on any device. Retained until you delete the item or your account. |
| Subscription status — whether a plan is active, and the Apple transaction identifier for it. | To unlock paid features. We never see your card number; Apple handles payment entirely. |
| Feedback you send — your message, plus the app version and device model. | To reproduce and fix what you reported. |
What we do not collect
- No advertising identifiers, no ad networks, no analytics SDK, no third-party trackers.
- No precise location. Outfit suggestions use approximate seasonal weather, not GPS tracking.
- No contacts, no browsing history, no microphone.
- No profiles built about you for marketing, and nothing sold or rented to anyone, ever.
AI styling and try-on
Two features send data off our servers to Google's Gemini API:
- Outfit suggestions. Details about the garments in your wardrobe are sent so a look can be assembled.
- Try-on previews. The photos of the specific garments you selected are sent so an image can be generated. The prompt explicitly asks for a mannequin with no people and no faces.
These requests are made by our server using our own API key, and they are only made when you actively use one of those features. Google processes the data to return a result under the Gemini API terms. If you never open those features, nothing is sent to Google.
Importing from a link
If you paste a web address to import a garment, our server fetches that page and its images so we can pull out the product photo and details. The address you paste is used for that request and nothing else.
Who else handles your data
We use a small number of service providers. They process data on our behalf and are not permitted to use it for their own purposes.
| Provider | What they handle |
|---|---|
| Supabase | Our database and file storage — your account, wardrobe and photos live here. |
| Google (Gemini API) | AI outfit suggestions and try-on image generation, only when you use those features. |
| RevenueCat | Manages subscription status. Receives purchase events and an anonymous app user identifier. |
| Apple | Processes all payments and, if you use it, Sign in with Apple. We never receive your payment details. |
Keeping it secure
All traffic between the app and our servers is encrypted in transit with HTTPS. Passwords are stored as Argon2id hashes, which cannot be reversed back into your password. Your session token is kept in the iOS Keychain on your device. No system is perfectly secure, but we do not store anything we do not need.
How long we keep things
We keep your data for as long as your account exists. Delete an item and it goes; delete your account and all of it goes.
Deleting your account
In the app, go to Settings → Account → Delete account & data. This permanently removes your account, wardrobe, outfits, photos, wear history and preferences from your device and from our servers. It cannot be undone, and you do not need to email us or wait for approval.
If you would rather we did it, email khizaralam20@gmail.com from your account's email address.
Your rights
Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it. If you are in the UK, EU, or a US state with its own privacy law, you also have the right to object to how we handle your data and to complain to your local data protection authority. Email us and we will respond within 30 days. We will not treat you differently for exercising any of these rights.
Children
rack is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, email us and we will remove it.
International transfers
Our servers and service providers may process your data in countries other than your own, including the United States. Where required, we rely on standard contractual clauses to protect it.
Changes to this policy
If this policy changes in a way that affects you, we will update the date at the top and note the change in the app. Continuing to use rack after a change means you accept the updated policy.
Contact
Questions, requests, or anything that looks wrong: khizaralam20@gmail.com.