Privacy Policy

Privacy at a glance

The short version. The sections below give the detail.

• Your photos and wardrobe are stored in the EU, and the app runs on servers in the EU.
• Background removal runs on servers we operate. Your photo is not shared with anyone.
• AI features use Anthropic’s Claude, and generated item photos use OpenAI. Neither uses your data to train its models.
• No ads. We never sell your personal data.
• Analytics only if you say yes, and they are hosted in the EU.

Who we are

WRDRBR is operated by Happy Shark AB, a company registered in Sweden. We are the data controller for the personal data you provide when using WRDRBR. For any questions about how we handle your data, contact us at info@wrdrbr.com.

What we collect

When you sign up: your name, email address, date of birth, gender, and marketing email preference. When you use the app: photos you upload (outfit selfies and clothing item photos), wardrobe data (item names, categories, colours, brands, wear history), outfit logs, and an AI-generated style profile derived from your wardrobe and outfit history. If you allow location access, we save the place where you log an outfit as a place name, such as a neighbourhood or city, never as exact coordinates. You can edit or remove it on the outfit. We also detect your country automatically at sign-up based on your IP address.

Why we use it and our legal basis

• Core service (contract performance) — We process your account details, photos, and wardrobe data to provide WRDRBR: tracking your wardrobe, outfit history, AI outfit analysis, and style insights.
• Marketing emails (consent) — If you opted in at sign-up, we send product updates, tips, and feature announcements. You can unsubscribe at any time via the link in any email or in your profile settings.
• Analytics (consent) — We use PostHog to understand how users interact with WRDRBR: page views, feature usage, and performance. Analytics are only activated after you accept cookies.
• Aggregated insights (legitimate interest) — We anonymise and aggregate usage data to produce insights for brands and retailers, as described below. You can object to this at any time by contacting us.

Background removal

When you remove a background, it is done on servers we operate in the EU. Your photo is not sent to any other company and is not used to train any model.

Generated item photos

When you tap Generate on an item, we create a product-style photo of it from one of your outfit photos. Only an image of that garment, as you wore it, with faces blurred, is sent to OpenAI. We never send the full photo, your name or your account. The new photo is saved to your wardrobe, marked as generated, and you can delete it like any other photo. OpenAI keeps what it receives for up to 30 days for abuse monitoring and does not use it for training. Nothing is sent until you tap Generate.

Third-party services

We share only the data each provider needs to perform their function. We do not sell your data.

• Supabase — database and file storage for your photos and wardrobe data. Hosted in the EU.
• Vercel — app hosting, in the EU.
• Anthropic — AI analysis. It receives your photos when you scan an outfit, check an item or generate an item photo, and text descriptions of your wardrobe and outfits for suggestions, chat, your style profile, resale estimates and project ideas. Anthropic processes this outside the EU, including in the United States, and does not use it to train its models. See anthropic.com/privacy.
• OpenAI — generated item photos, only when you tap Generate. It receives an image of one garment with faces blurred. OpenAI processes this in the United States, keeps it for up to 30 days for abuse monitoring and does not use it to train its models. See openai.com/policies.
• PostHog — product analytics, only active with your consent. Hosted in the EU.
• OpenStreetMap (Nominatim) and Open-Meteo — place names and weather. They receive approximate coordinates and, for the place lookup, your device’s IP address. Never your name, email or account.
• Email service provider — transactional and marketing emails

Transfers outside the EU

Your data is stored in the EU. AI requests are processed by Anthropic, and generated item photos by OpenAI, outside the EU, including in the United States, and some of our providers are US companies whose staff or sub-processors may access data from outside the EU. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses or, where it applies, the EU–US Data Privacy Framework.

Aggregated insights

We never sell your personal data. We use anonymised, aggregated data about how WRDRBR is used, for example which clothing categories are worn most or how styles trend over time, to create insights that we share with brands and retailers. These insights combine data from many users and never include your name, photos, or anything that could identify you.

Cookies and analytics

We use cookies solely for product analytics via PostHog. We do not use advertising cookies. You will be asked for consent before any analytics cookies are set. You can withdraw consent at any time in your profile settings.

Data retention

We keep your data for as long as your account is active. If you delete your account, your personal data and uploaded content are permanently deleted within 30 days. Anonymised, aggregated data that cannot be linked to you individually may be retained for longer.

Deleting your account

You can request deletion of your account and all associated data at any time, free of charge, directly in the app: go to Profile and tap "Request account deletion". You can also email us from your registered address at info@wrdrbr.com. Once requested, we permanently delete your account, photos, wardrobe data, and history within 30 days and email you to confirm. Anonymised, aggregated data that cannot identify you individually may be retained.

Your rights

Under GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Restriction — ask us to limit how we process your data in certain circumstances
• Object — object to processing based on legitimate interest
• Withdraw consent — for marketing emails or analytics cookies, at any time

Children

WRDRBR is not intended for users under 16 years old. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has created an account, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or in-app notice. The "last updated" date at the top of this page always reflects the current version.

Contact and complaints

For questions or to exercise your rights: info@wrdrbr.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.