Last updated: August 2026
本隐私政策说明我们如何处理你的个人数据。它属于我们的条款与隐私政策，完整文件见「条款」页面。 查看完整条款与隐私政策
In compliance with Colombian Law 1581/2012, the GDPR (EU Regulation 2016/679), Brazil's LGPD (Lei 13.709/2018), California's CCPA/CPRA, Mexico's LFPDPPP, and other applicable data protection regulations: • Data controller: Anddress (soporte@anddress.com). • Data collected: name, email, garment images, try-on model photo, style preferences, country, preferred language, and usage data. • Purpose: personalize the virtual wardrobe experience; enable virtual garment try-on; generate AI outfit suggestions; and display relevant store, price, fashion news and trend recommendations based on your country and language. • Automatic country and language detection: if you do not provide your country, we attempt to infer it from your browser's language setting or timezone (e.g., "America/Bogota" → Colombia). This data is indicative and you can correct or remove it from Settings → My profile. We do not use geolocation APIs or external services for this inference. • Optional fields: country and language are optional. Not providing them does not limit the app's core features; it only reduces the regional personalisation of recommendations. • Legal basis (GDPR/LGPD): explicit consent given at registration and when using specific features such as photo upload or AI avatar. • Your rights: access, rectification, erasure ("right to be forgotten"), portability, objection, and restriction of processing. Exercise them via Settings in the app or by writing to soporte@anddress.com. • International transfers: data stored on Supabase (AWS infrastructure, Virginia, USA). Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework are used as transfer safeguards. • We do not share personally identifiable data with third parties without your explicit consent, except as required by law.
If you use the virtual try-on feature with your real photo (Pro plan): • Your full-body photo is stored encrypted on secure cloud servers (Supabase / AWS, Virginia, USA) with AES-256 encryption at rest. • Google Gemini Vision transiently analyzes it solely to validate technical requirements (full body, no glasses). This analysis is not used to train AI models and is not stored by Google. • The image is processed via Google Vertex AI / Imagen 3 exclusively to generate virtual garment try-ons. • You can delete your photo at any time from Settings → Delete model photo. After deletion, the photo is removed from our servers within 30 days. By uploading your photo, you grant express consent for this processing under Colombian Law 1581/2012, CCPA/CPRA (California), the GDPR, and the LGPD.
If you use the AI photorealistic avatar feature: • You configure your traits via dropdowns (skin tone, body type, hair color, etc.). This data is stored in your profile. • Google Gemini generates a synthetic image (avatar) based on that configuration. Only the generated avatar is stored if you choose to keep it. • The generated avatar is a synthetic image, not a real photograph. If it bears visual resemblance to you, that derived image is stored with your express consent. • You can delete your generated avatar at any time from Settings.
Garment images, your model photo (if uploaded), and your profile data are stored on secure servers operated by Supabase (AWS infrastructure, Virginia, USA) with TLS encryption in transit and AES-256 encryption at rest. By accepting these terms, you authorize such international transfer with the safeguards described in section 3.
To provide the service, we use the following sub-processors that may access your data: • Supabase Inc. (database and file storage · AWS Virginia, USA) • Google LLC / Google Cloud (Gemini and Vertex AI Imagen 3 for garment analysis, photo validation, avatar generation, virtual try-on and suggestions; reCAPTCHA Enterprise for anti-fraud security) • Paddle.com Market Ltd. and/or Stripe Inc. (payment processing as Merchant of Record, depending on region) • Resend Inc. (transactional email delivery) • PostHog Inc. (product analytics and usage metrics) • SerpAPI LLC (visual product search for shopping recommendations) • Vercel Inc. (application hosting, content delivery network and page performance analytics · USA) • Functional Software, Inc. (Sentry) (technical error logging for diagnostics and stability; may include the visited URL, device, browser and approximate IP-derived location · USA) All operate under Data Processing Agreements (DPAs) compatible with GDPR/LGPD and SCCs for international transfers.
Written policy for the retention and destruction of images. Anddress processes photographs that may show your body and generates synthetic images from them. These are the concrete schedules we apply automatically: • Photos you upload for a quick try-on (garments or your own photo): deleted from storage within a maximum of 7 days. They are ephemeral inputs — the model processes them in seconds. • Try-on results (renders): automatically deleted 60 days after creation, together with their file and cache entry. • Model / avatar photo: kept while you keep it on your profile. You can delete it at any time from Settings and it is removed immediately. • Wardrobe garment photos: kept while the garment exists in your wardrobe. Deleting the garment deletes the image. • Usage counters (how many try-ons you ran): purged after 30 days. • Access logs: 90 days, for security purposes. • Account deletion: when you delete your account, your images and personal data are erased within a maximum of 30 days, unless retention is legally required. Additional commitments. We do not sell or disclose your images. We do not use them to train artificial intelligence models, either our own or third parties'. The providers that run the virtual try-on process them solely to generate your result. AI-generated images are labelled as such. To exercise your right to erasure or request a copy of your data, write to soporte@anddress.com.
Anddress uses cookies and similar technologies for: (a) strictly necessary cookies (session, security), which require no consent; (b) product analytics (PostHog) to understand usage and improve the app; and (c) advertising (Google AdSense) on the web version of the free plan only. • Consent: in the EU, UK and regions with equivalent laws, we show a cookie banner and only enable analytics and ads after your consent (Google Consent Mode v2). You can change your choice anytime from the banner or Settings. • Personalized ads: if you accept, ads may be personalized. If you decline, you will see NON-personalized ads. • Minors: users identified as minors are shown only non-personalized ads, in line with COPPA and GDPR-K. • Apple Devices (iOS / iPadOS): in native Anddress applications for iOS / iPadOS available on the Apple App Store, no tracking cookies are used, no cross-app tracking occurs, and no targeted ads are served (No ATT tracking). • See our Cookie Policy for details.
You can optionally (opt-in) enable "Assistant memory": Anddress remembers durable style preferences (likes, fit, occasions) you reveal, to better personalize suggestions. • Legal basis: your explicit consent, off by default. • Only style preferences are stored; never sensitive or health data. • Transparency and control: you can view everything the assistant remembers and delete individual facts or all memory from Profile → Assistant memory. • Turning consent off stops learning; deleting the memory removes the data.