Clothé

Privacy Policy — Clothé: Clothing Care

Effective date: 1 November 2026
Last updated: 1 November 2026

1. Who we are

Clothé: Clothing Care ("Clothé", "we", "us") is provided by Darya Batura, running a sole proprietorship registered in Poland (CEIDG), NIP/VAT ID 5272976516, REGON 520385240.

We are the controller of the personal data described in this policy.

[Québec] Person in charge of the protection of personal information: Darya Batura, privacy@clothecare.app.

2. The short version

3. Data that stays on your device

We do not receive this data:

Data Why the app uses it
Photos of items and labels, recognised text, fibre content, care symbols Item passport and care advice
Prices, expenses, wears, notes, lists, reminders Tracking and cost per wear
Your name, profile photo and preferences Personalisation
Facts read from store pages and product images The item card. Store images stay on your device only and are not synced

Text recognition, care-symbol recognition and background removal run on your iPhone (Apple Vision and Core ML). Reminders are local notifications created on your device; we do not send push notifications from a server.

4. iCloud sync

If you turn on Sync with iCloud, your data is stored in the private database of your iCloud account under Apple's terms. We have no access to it. See Apple's Privacy Policy: https://www.apple.com/legal/privacy/.

5. Product links

When you paste a link, your iPhone opens the store's page directly, like a browser. The store receives an ordinary page request (for example your IP address and device type) under its own privacy policy. We don't see or keep that request.

6. Cloud AI reading (only with your permission)

When. Only when your iPhone could not read a label or a page by itself, and only after you allow it ("Just Once" or "Always"). You can turn it off at any time in Settings › Privacy & AI › Cloud Recognition.

What is sent.
- a cropped image of the care label (about 1000 pixels, with location and camera metadata removed), or a downscaled photo of the item with metadata removed, or the fabric and care text from a product page and, only if the text isn't enough, a screenshot of the page;
- technical data the service needs to work: an Apple App Attest device key, which proves the request comes from a genuine copy of the app, and Apple's proof of your Pro subscription (a signed transaction record that contains no name, email or payment details), used to count your 20 AI checks a month.

What is never sent. Prices, notes, your name, your profile photo, your other items and your history.

Who receives it.
- Cloudflare, Inc. (USA) hosts our relay server.
- Anthropic PBC (USA) provides the Claude AI model that reads the image or text.

How long it is kept.
- We do not keep the images or text you send. They pass through our server in memory only, and request logging is switched off.
- To count AI checks we keep only a keyed one-way hash (HMAC-SHA-256 with a secret key) of the device key or subscription ID, plus the number of checks used. A monthly Pro counter is deleted automatically 30 days after its subscription month ends; the counter of free checks is deleted 30 days after the end of the calendar month in which it was last used.
- To recognise genuine copies of the app we keep the public part of each App Attest device key, an identifier that Apple generates for it, and a usage counter. They are not linked to your name or Apple Account. They are deleted automatically 12 months after that copy of the app last used cloud AI reading.
- One-time security challenges are deleted after 5 minutes.
- Anthropic does not use this data to train its models. Anthropic may keep it for a limited time under its own policies; content flagged by its safety systems may be kept for up to 2 years.

Legal basis [EU/EEA, UK]: your consent (Art. 6(1)(a) GDPR) for sending the image or text; performance of our contract with you and our legitimate interest in protecting the service from abuse (Art. 6(1)(b) and (f)) for the device key and subscription check. Withdrawing consent does not affect processing that took place before.

Availability. Cloud AI reading is not available in some countries. You can always enter fabric and care details by hand.

AI results are suggestions. They are marked Suggested until you confirm them.

7. Purchases

Apple sells and processes subscriptions. Through StoreKit we receive only the status of your subscription so we can unlock Pro. We don't receive your name, email or card details. See Apple's Privacy Policy: https://www.apple.com/legal/privacy/.

8. Support, crash reports and beta testing

9. Your choices and rights

[EU/EEA, UK] You have the right to access, rectify, erase, restrict and port your data, to object to processing and to withdraw consent. You can complain to a supervisory authority: in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl; in another EU country, your local authority; in the UK, the ICO, https://ico.org.uk.

[USA] We do not sell or share personal information for cross-context behavioural advertising. We don't track you, so we don't respond to Do Not Track signals differently.

[Canada] You may access and correct your information and withdraw consent. You can complain to the Office of the Privacy Commissioner of Canada; in Québec, to the Commission d'accès à l'information.

[Switzerland] You can complain to the Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch. Cloud AI data is transferred to the USA as described in section 10.

[Australia] You can complain to the Office of the Australian Information Commissioner (OAIC), https://www.oaic.gov.au.

[New Zealand] You can complain to the Office of the Privacy Commissioner, https://www.privacy.org.nz.

[Singapore] Our Data Protection Officer is Darya Batura, privacy@clothecare.app. You can complain to the Personal Data Protection Commission (PDPC), https://www.pdpc.gov.sg.

Send requests to privacy@clothecare.app. We answer within one month [EU/EEA, UK; extendable by two months where the law allows], 30 days [Canada] or 45 days [California]. Most of your data is only on your device, so you can often do it yourself with Export and Delete.

10. International transfers

Cloud AI requests are processed in the USA. For transfers from the EU/EEA, the UK, Switzerland and other countries that require safeguards we rely on the European Commission's Standard Contractual Clauses included in Anthropic's Data Processing Addendum, and on the Standard Contractual Clauses included in Cloudflare's Data Processing Addendum. [Québec] We assessed the protection of the information before the transfer.

11. Security

Data is sent over HTTPS. The AI provider's key is kept only on our server, never in the app. Our server accepts requests only from genuine copies of the app (Apple App Attest). Data on your device is protected by iOS. No system is perfectly secure.

12. Children

Clothé is not intended for children. We do not knowingly collect personal data from children under 13 [USA: COPPA]. Cloud AI reading is for users aged 16 or older, or younger users with a parent's permission. If you think a child has sent us data, contact us and we will delete it.

13. Changes

We will tell you about material changes in the app before they take effect. The "Last updated" date shows the current version.

14. Contact

privacy@clothecare.app · ul. Piaseczyńska 51/3, 00-765 Warszawa, Poland