Privacy Policy — Clothé: Clothing Care
Effective date: 1 November 2026
Last updated: 1 November 2026
1. Who we are
Clothé: Clothing Care ("Clothé", "we", "us") is provided by Darya Batura, running a sole proprietorship registered in Poland (CEIDG), NIP/VAT ID 5272976516, REGON 520385240.
We are the controller of the personal data described in this policy.
- Postal address: ul. Piaseczyńska 51/3, 00-765 Warszawa, Poland
- Privacy questions: [email protected]
- Support: [email protected]
[Québec] Person in charge of the protection of personal information: Darya Batura, [email protected].
2. The short version
- Clothé works on your iPhone. Your photos, labels, items, prices and notes are processed on the device.
- There are no accounts, no ads, no analytics and no tracking.
- If you turn on iCloud sync, your data is stored in your own iCloud account. We can't see it.
- Cloud AI reading is off by default. If you allow it, we send a small piece of data (a cropped label, a downscaled item photo or the text of a product page) to our AI provider to read what your iPhone couldn't.
- Apple handles payments. We never receive your card details.
3. Data that stays on your device
We do not receive this data:
| Data | Why the app uses it |
|---|---|
| Photos of items and labels, recognised text, fibre content, care symbols | Item passport and care advice |
| Prices, expenses, wears, notes, lists, reminders | Tracking and cost per wear |
| Your name, profile photo and preferences | Personalisation |
| Facts read from store pages and product images | The item card. Store images stay on your device only and are not synced |
Text recognition, care-symbol recognition and background removal run on your iPhone (Apple Vision and Core ML). Reminders are local notifications created on your device; we do not send push notifications from a server.
4. iCloud sync
If you turn on Sync with iCloud, your data is stored in the private database of your iCloud account under Apple's terms. We have no access to it. See Apple's Privacy Policy: https://www.apple.com/legal/privacy/.
5. Product links
When you paste a link, your iPhone opens the store's page directly, like a browser. The store receives an ordinary page request (for example your IP address and device type) under its own privacy policy. We don't see or keep that request.
6. Cloud AI reading (only with your permission)
When. Only when your iPhone could not read a label or a page by itself, and only after you allow it ("Just Once" or "Always"). You can turn it off at any time in Settings › Privacy & AI › Cloud Recognition.
What is sent.
- a cropped image of the care label (about 1000 pixels, with location and camera metadata removed), or a downscaled photo of the item with metadata removed, or the fabric and care text from a product page and, only if the text isn't enough, a screenshot of the page;
- technical data the service needs to work: an Apple App Attest device key, which proves the request comes from a genuine copy of the app, and Apple's proof of your Pro subscription (a signed transaction record that contains no name, email or payment details), used to count your 20 AI checks a month.
What is never sent. Prices, notes, your name, your profile photo, your other items and your history.
Who receives it.
- Cloudflare, Inc. (USA) hosts our relay server.
- Anthropic PBC (USA) provides the Claude AI model that reads the image or text.
How long it is kept.
- We do not keep the images or text you send. They pass through our server in memory only, and request logging is switched off.
- To count AI checks we keep only a keyed one-way hash (HMAC-SHA-256 with a secret key) of the device key or subscription ID, plus the number of checks used. A monthly Pro counter is deleted automatically 30 days after its subscription month ends; the counter of free checks is deleted 30 days after the end of the calendar month in which it was last used.
- To recognise genuine copies of the app we keep the public part of each App Attest device key, an identifier that Apple generates for it, and a usage counter. They are not linked to your name or Apple Account. They are deleted automatically 12 months after that copy of the app last used cloud AI reading.
- One-time security challenges are deleted after 5 minutes.
- Anthropic does not use this data to train its models. Anthropic may keep it for a limited time under its own policies; content flagged by its safety systems may be kept for up to 2 years.
Legal basis [EU/EEA, UK]: your consent (Art. 6(1)(a) GDPR) for sending the image or text; performance of our contract with you and our legitimate interest in protecting the service from abuse (Art. 6(1)(b) and (f)) for the device key and subscription check. Withdrawing consent does not affect processing that took place before.
Availability. Cloud AI reading is not available in some countries. You can always enter fabric and care details by hand.
AI results are suggestions. They are marked Suggested until you confirm them.
7. Purchases
Apple sells and processes subscriptions. Through StoreKit we receive only the status of your subscription so we can unlock Pro. We don't receive your name, email or card details. See Apple's Privacy Policy: https://www.apple.com/legal/privacy/.
8. Support, crash reports and beta testing
- Report a Problem / email. We receive your email address, your message and the device model and iOS version that the app adds to the email. We use them only to answer you and keep them for 24 months after the issue is closed. Legal basis: contract and legitimate interest. Cloudflare Email Routing forwards your email to our Google (Gmail) mailbox.
- Apple crash reports. If you chose in iOS settings to share analytics with app developers, Apple gives us anonymous crash reports.
- Beta versions (TestFlight). Test builds include a Diagnostics feature that can create an archive of recent imports on the device. A tester sends it to us only manually. The App Store version doesn't include this feature. We delete such archives once the issue is fixed, and no later than 6 months after we receive them.
9. Your choices and rights
- Export: Settings › iCloud & Data › Export.
- Delete: Settings › iCloud & Data › Delete All Data deletes your data on this iPhone, in your iCloud and on your other devices that sync with it.
- Cloud AI: turn it off in Settings › Privacy & AI.
[EU/EEA, UK] You have the right to access, rectify, erase, restrict and port your data, to object to processing and to withdraw consent. You can complain to a supervisory authority: in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl; in another EU country, your local authority; in the UK, the ICO, https://ico.org.uk.
[USA] We do not sell or share personal information for cross-context behavioural advertising. We don't track you, so we don't respond to Do Not Track signals differently.
[Canada] You may access and correct your information and withdraw consent. You can complain to the Office of the Privacy Commissioner of Canada; in Québec, to the Commission d'accès à l'information.
[Switzerland] You can complain to the Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch. Cloud AI data is transferred to the USA as described in section 10.
[Australia] You can complain to the Office of the Australian Information Commissioner (OAIC), https://www.oaic.gov.au.
[New Zealand] You can complain to the Office of the Privacy Commissioner, https://www.privacy.org.nz.
[Singapore] Our Data Protection Officer is Darya Batura, [email protected]. You can complain to the Personal Data Protection Commission (PDPC), https://www.pdpc.gov.sg.
Send requests to [email protected]. We answer within one month [EU/EEA, UK; extendable by two months where the law allows], 30 days [Canada] or 45 days [California]. Most of your data is only on your device, so you can often do it yourself with Export and Delete.
10. International transfers
Cloud AI requests are processed in the USA. For transfers from the EU/EEA, the UK, Switzerland and other countries that require safeguards we rely on the European Commission's Standard Contractual Clauses included in Anthropic's Data Processing Addendum, and on the Standard Contractual Clauses included in Cloudflare's Data Processing Addendum. [Québec] We assessed the protection of the information before the transfer.
11. Security
Data is sent over HTTPS. The AI provider's key is kept only on our server, never in the app. Our server accepts requests only from genuine copies of the app (Apple App Attest). Data on your device is protected by iOS. No system is perfectly secure.
12. Children
Clothé is not intended for children. We do not knowingly collect personal data from children under 13 [USA: COPPA]. Cloud AI reading is for users aged 16 or older, or younger users with a parent's permission. If you think a child has sent us data, contact us and we will delete it.
13. Changes
We will tell you about material changes in the app before they take effect. The "Last updated" date shows the current version.
14. Contact
[email protected] · ul. Piaseczyńska 51/3, 00-765 Warszawa, Poland