Privacy Policy

Klozt is made by Tobin Labs, an independent software studio based in Ireland. For this service, Tobin Labs is the data controller. You can reach us at hello@tobinlabs.dev.

• Account data — your email address and a password (stored only as a secure hash by our authentication provider).
• Your wardrobe — the photos you upload and the item details attached to them (category, colours, description and so on). Photos live in private storage scoped to your account.
• Feature usage counts— how many suggestions, shop checks and taggings you've used, so fair-use limits work. These are counts and timestamps, not content.
• Billing data— handled by Stripe. Your card details never touch our servers; we store only Stripe's customer and subscription identifiers and your plan status.
• Location, only if you use weather styling— your device coordinates (with your permission) or a city you type, used solely to fetch a forecast. We don't keep a location history.
• Technical basics — sign-in cookies, security logs and rate-limiting identifiers needed to keep the service working and safe.

Everything we do with your data exists to provide the product you signed up for: cataloguing your wardrobe, suggesting outfits for the occasion and weather, and checking shop items against what you own.

To do that, your item photos and descriptions are processed by Anthropic's ClaudeAI models via their API — that's what tags an item's colours and fabric, assembles outfit suggestions, and judges whether a shop item goes with your closet. Under the API terms we use, your inputs and outputs are not used to train Anthropic's models. Photos taken for a shop check are processed transiently and deleted from storage right after the check completes.

Weather styling sends coordinates (or your typed city) to MET Norway for the forecast — without your name, email or any account identifier attached.

We do not sell your data, show ads, or let brands influence your styling suggestions. Recommendations are computed from your own wardrobe, the occasion and the weather — nothing else.

We use a small set of service providers to run Klozt:

• Supabase — database, authentication and photo storage (hosted in the EU)
• Vercel — web hosting
• Anthropic — AI processing of your items, as described above
• Stripe — payments and subscription billing
• Resend — transactional email (sign-up confirmations, password resets)
• Upstash — rate limiting, to protect the service from abuse
• MET Norway / Open-Meteo — weather forecasts and city-name lookup

Each receives only what it needs for its job. Some (like Anthropic and Vercel) may process data outside the EU; where they do, transfers are covered by standard contractual clauses or equivalent safeguards.

Under the GDPR we rely on: contract (processing needed to provide Klozt to you, including the AI features), legitimate interests (security, abuse prevention, service improvement), and consent (device geolocation — which you can decline and type a city instead).

Photos are stored in a private bucket with per-user access rules; the database enforces row-level security so accounts can only read their own data. Everything is encrypted in transit. Our database and photo storage are hosted in the EU.

We keep your data while your account exists — including after a trial ends, when your wardrobe stays visible to you read-only. If you delete your account, your photos, items and account data are deleted. Billing records are retained as required by tax law.

You can delete your account yourself at any time — on the web from your Account page, or in the app under Account → Delete account. Deletion removes your photos, items and account data immediately.

You can also ask for access to, correction of, deletion of, or a copy of your data, object to processing, and withdraw consent at any time — email hello@tobinlabs.dev and we'll act on it promptly. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.

Klozt uses only essential cookies: the ones that keep you signed in. Your theme preference is stored locally on your device. There are no advertising or third-party analytics cookies.

Klozt is for people aged 16 and over.

If we change this policy in a way that matters, we'll update the date above and, for significant changes, tell you in the app or by email.