Skip to the text

The small print

Privacy notice

In effect from 25 October 2026 to 8 November 2026

You are reading an earlier version of this text. Read the current version

You give us photos of your clothes, what you wear and what you tell Romy, so can dress you. It stays yours. We don’t sell it, we don’t use it for advertising, and the AI services that read it work for us, not for themselves. You can export or delete all of it from inside the app.

is built by GetWear Ltd, a company registered in England & Wales under company number 17220112. We decide what happens to your data, which makes us the controller under the UK GDPR and the EU GDPR. For anything in this policy, write to [email protected] — we read everything.

  • Your account. Your name and email address, from Google or Apple when you sign in with them, or the email you give us for a one-time code. There is no password.
  • Your wardrobe. The photos you take of your pieces, the clean versions we make of them, and what we know about each one: type, colour, brand, size.
  • Your looks and what you wore. The outfits you build or keep, and the days you log as worn.
  • Photos of a day you wore. Up to four a day, if you add them. They are private to you, no AI service reads them, and they are never placed on a public host.
  • A photo of yourself, only if you want to try a look on. You give a separate consent for it, and you can withdraw it.
  • Your conversations with Romy, typed or spoken, and the notes she keeps about your style. When you talk out loud we keep the words, as in a written chat, not the audio. A voice memo is turned into text.
  • What you tell us about yourself: sizes, the labels you like, the colours you wear, where you live.
  • Your location, coarsely. Only if you allow it, and only for the weather. Your phone turns your position into the name of your town or city, and only that name reaches us. Your exact position stays on your phone.
  • Shopping. The pieces you save or buy through us (the shop, the product and when), orders you forward to your own forwarding address (we keep the order’s lines, not the email), and photos you take in a shop.
  • Your phone’s notification token, if you turn notifications on.
  • Usage analytics, only if you agree: which screens you open, counts and yes or no results, and screen recordings in which every image and every text field is hidden. Analytics never carry a word you typed, a photo or your location.

To run the app you signed up for: to name your pieces, build your looks, check the weather, let Romy answer you and find pieces that would finish a look. That is our lawful basis for most of it. Analytics, the try-on photo, your location and shop links that may earn us a commission each ask for your consent first, and you can change your mind. We also keep logs to keep the service secure and to fix what breaks. We never sell your data, share it with advertisers, or build a profile of you for anyone but you.

Romy and the wardrobe run on models from other companies. Each one gets only what its job needs, never more. None of them is pinned to the EU today, so this data can be processed in the US.

  • OpenRouter (US) passes Romy’s conversations and photos of your pieces to Google’s Gemini models, and a piece’s photo to Microsoft’s and Google’s image models to draw it on white. OpenRouter does not store what we send, and Google and Microsoft do not use it to train their models on this route.
  • Google Gemini, directly, hears your voice while a spoken conversation with Romy is open, and reads English descriptions of your pieces (never a photo) so you can search your wardrobe. Under Google’s paid API terms it does not use this to improve its products. It keeps it briefly to prevent abuse, and a live session for up to a day so a dropped call can reconnect.
  • TypeSafe answers quick yes or no checks from short English notes and counts, never a photo or your name. It has committed not to train on customer data. Its region is not confirmed yet.
  • Soniox (US) turns a voice memo into text. We delete the audio from Soniox once it is read, and Soniox does not train on it.
  • Pruna makes a try-on picture from your own photo and the pieces you try, only with your consent. Its terms let it use them only to provide that service. Its region is not confirmed yet.
  • Replicate (US) cuts the background out of our drawing of a piece. It never receives your photo or anything about you.
  • Hetzner (EU) hosts the app, the database and every photo. The photo storage is private, and the app opens each photo with a short-lived link.
  • Resend (EU) sends our emails, such as sign-in codes, and receives the orders you forward to us.
  • PostHog (EU) holds the usage analytics, only if you agree.
  • Google and Apple (US) sign you in, if you choose them. Expo and Google Firebase (US) deliver notifications to your phone.
  • Open-Meteo gets your city’s name and its coordinates, and nothing about you, to return a forecast.
  • Shopping and search: Serper (Google’s results), Shopify, Parallel, Firecrawl, Jina and Zyte receive search words, a country and language, a cropped picture of a piece, or a public shop link, to find a piece or read a shop’s page. Never your name or your account. Sovrn turns a shop link into one that may pay us a commission when you open it. Most of them are in the US.
  • RevenueCat (US) handles subscriptions: an id without your name, and your plan.

Your wardrobe, looks, wears, photos and conversations stay until you delete them or your account. Remembering is the point. A few things go sooner: a shop photo is deleted after a day unless you keep the piece or buy it, and we don’t keep a forwarded email once its order lines are read. Resend keeps a received email for its own retention period. An export stays ready for seven days.

  • Export. In the app, You, then Export my data: one archive with your pieces, looks, wears, answers, notes and photos.
  • Delete. In the app, You, then Delete my data. We delete your photos first and your account second. If a single photo cannot be deleted, nothing is, and you are told so you can try again. Our live systems are empty at once and our backups clear within 30 days.
  • Everything else. Under the UK GDPR and the EU GDPR you can also ask us to correct your data, restrict or object to what we do with it, or withdraw a consent.

Email [email protected] and we’ll act within seven days. You can also complain to the UK Information Commissioner’s Office (ico.org.uk), or to the data protection authority where you live in the EU, but we’d rather hear from you first.

This site sets no cookies. We count visits with Plausible, which we run on our own server in the EU: it counts pages, referrers and rough device and country, not who you are. The fonts load from Google Fonts, so Google sees your IP address as it would for any web request.

When you join the waitlist we store:

  • The email address you typed.
  • Which form you used (homepage hero or the final block).
  • The timestamp of submission.
  • Your IP address, kept solely for spam and abuse prevention.

We use it to email you when opens, plus a welcome note and the occasional update if there’s something genuinely worth saying. Our lawful basis is your consent, given when you submit the form, and every email has a one-click unsubscribe. The list lives on the server that runs this site, in a Google Sheet (Google Workspace) and with Resend, which sends the emails. All three act on our instructions only, and nobody else gets it.

We keep it until launches, plus 30 days after our launch email so we have a window to follow up. After that, we delete addresses that haven’t become accounts. Ask us and we’ll delete yours sooner.

is for people aged 16 and over.

If we add a service that receives something of yours, or change what one receives, this page changes and the date at the top moves. When a change is material we’ll tell you in the app, and email the waitlist, before it takes effect.