Privacy policy

1. Who we are

Vanity is a virtual try-on application for iOS, operated as a sole trader business. We provide AI-powered virtual try-on services that allow users to see themselves wearing clothing items from online retailers before purchasing.

Contact: hello@vanity.app

2. Information we collect

We collect the following categories of information:

• — Account information: Your name and email address, collected when you sign in via Apple or Google.
• — Reference photos: Photos you upload of yourself, used to generate virtual try-on images. Stored securely in private cloud storage.
• — Product data: URLs and product images from online retailers that you share with Vanity.
• — Generated images: AI-generated images of you wearing products, stored in your personal closet.
• — Device information: Device type and operating system version, used to ensure compatibility and diagnose issues.
• — Usage data: Basic usage metrics such as the number of try-ons generated, subscription tier (trial/starter/pro/unlimited/expired), and trial expiry date.
• — Analytics: Anonymised usage analytics collected via PostHog on the Vanity website and within the app to improve the service. No personally identifiable information is shared with PostHog.

3. How we use your information

Your information is used solely to provide the Vanity service:

• — Generating virtual try-on images using your reference photo and the product image.
• — Storing your generated try-ons in your personal closet.
• — Managing your account and subscription.
• — Sending push notifications when your try-on is ready.

We do not sell your data. We do not use your photos for training AI models without explicit consent.

4. How we store your data

Your data is stored using Supabase, hosted in the EU (EU-West-1 region). All data is encrypted at rest and in transit. Reference photos and generated try-on images are held in private storage buckets that require authenticated, time-limited signed URLs to access. Database records are protected by row-level security policies tied to your authenticated session.

Authentication is managed by Clerk, which stores your name and email address on their infrastructure. Subscription state is managed by RevenueCat.

5. Third-party services

Vanity uses the following third-party services to operate:

• — Clerk: Authentication and account management. Processes your name and email address.
• — Supabase: Database and file storage. Stores your reference photos and generated images in encrypted, private storage buckets.
• — Nano Banana / FASHN (via fal.ai): AI image generation. Your reference photo and the product image are sent to these services to generate the try-on result. Images are processed in memory and are not stored by these providers beyond the duration of generation.
• — Apple: Push notifications, in-app purchases, and sign-in. Subject to Apple's privacy policy.
• — RevenueCat: Subscription management. Processes subscription state and purchase history.
• — PostHog: Anonymised product analytics, used to understand how the service is used and to improve it. No personally identifiable information is shared.

6. Data retention and deletion

Your reference photos and generated try-on images are kept for as long as your account is active, or until you choose to delete them individually. There is no automatic expiry — you control when your data is removed.

You can delete your entire account from within the Vanity app by navigating to the You tab and selecting Delete Account. Deletion is processed immediately and permanently removes:

• — All reference photos you uploaded
• — All generated try-on images
• — All database records associated with your account
• — Your account information held by Clerk

This action cannot be undone. Subscription records may be retained by Apple for tax and legal purposes per their policies. If you have an active paid subscription, you should cancel it in iOS Settings before deleting your account.

7. Your rights (GDPR)

If you are in the UK or European Economic Area, you have the right to:

• — Access a copy of your personal data
• — Correct inaccurate data
• — Request deletion of your data
• — Object to processing
• — Data portability

To exercise these rights, contact us at hello@vanity.app.

8. Cookies and tracking

The Vanity mobile app does not use cookies. This website (vanity.app) uses PostHog for anonymised usage analytics. PostHog does not use tracking cookies and does not collect personally identifiable information.

9. Security

Your photos and data are stored in private, encrypted storage buckets. Access requires authenticated requests. We use HTTPS for all data in transit. We do not share access to your personal storage with any third party.

10. Changes to this policy

We may update this privacy policy as the service evolves. Material changes will be communicated via the app. Continued use of Vanity after changes constitutes acceptance of the updated policy.

11. Contact

For privacy questions or data requests, contact: hello@vanity.app