ClosetMe Privacy Policy

1. If you do not sign in, your wardrobe, outfit and calendar records and photos stay on this device and are never sent to the Operator's server.
2. If you sign in, the original of your records is in your account on the Operator's server, with a copy on the device. Original clothing photos stay on the device even when you sign in.
3. Only posts you publish to the community are visible to others. Item photos and body information are published only if you turn on each option when posting.
4. We never receive or keep passwords or email addresses. We do not collect advertising identifiers or run personalized ads.
5. Our servers and data are in the Republic of Korea (AWS Seoul region). Some processing, such as push delivery, is handled by overseas providers (Section 7).
6. App-usage analytics is off by default and collected only with your opt-in consent.

We process personal information only to: (1) create and manage accounts (identification, duplicate-account notice, keeping you signed in, account deletion); (2) provide the Service (storing account records and showing them on multiple devices, weather, product link information, notifications, data export); (3) run the community (profiles, posts, comments, follows, likes, saves, moderation, reports and blocks, and notifying members of actions taken on their posts and account restrictions); (4) operate safely (abuse prevention, incident response, disputes, legal obligations); (5) improve the Service through opt-in analytics; (6) run ads (per-ad impression and click totals and ad reports, without distinguishing users); (7) answer inquiries. If a purpose changes we take the steps required by PIPA Article 18, such as obtaining separate consent.

2.1 Users who are not signed in

We keep no service records on our server. Using the following features sends the values needed to handle the request; wardrobe, outfit and calendar records and photos are never included.

2.2 When you sign up (sign in)

We do not receive passwords. Our server only verifies the token signed by Google or Apple with that provider's public key and cannot access your Google or Apple password. Because we do not keep your email address, we cannot email you.

2.3 While a member uses the Service

2.4 Optional app-usage analytics (opt-in)

Analytics is off by default and sent to our server only if you opt in under Settings > Privacy. Declining or withdrawing has no disadvantage. We collect fixed screen and button identifiers, action names and their success or failure, random session and action UUIDs, a random event UUID to detect duplicates, a pseudonymous identifier, platform, app version and time. Members' analytics records are linked to the account and are therefore not anonymous. We do not collect what you type, photos, location or advertising identifiers, and we use no third-party analytics SDK. Consent state, policy version and consent-verification values are kept separately, and consent secrets are never stored in plain form.

2.5 Inquiries

If you email us, we process your email address, name (if shown), the message and attachments.

2.6 What we do not collect

Passwords, email addresses, phone numbers, resident registration numbers or other unique identifiers, payment information, advertising identifiers (IDFA/AAID), contacts, or stored location coordinates.

The 30-day grace period after account deletion is the minimum needed to respond to disputes and lawful requests from investigative authorities. During it, the same sign-in method cannot be used to sign up again; signing in after 30 days creates a new account.

1. Personal information is destroyed without delay when its retention period ends or its purpose is achieved.
2. Electronic files are deleted so they cannot be recovered. Thirty days after account deletion, database records are deleted first and then stored photos; photo deletion is retried until it succeeds. We keep no personal information on paper.
3. Information the law requires us to keep (such as access logs) is stored separately and destroyed when the period ends.

We do not provide or sell your personal information to third parties, except with your consent, where a law specifically requires it, or where unavoidable to meet a legal obligation (such as a lawful request from investigative authorities), and then only as the law allows. Posts and public profiles you publish yourself are visible to other users.

We use these processors under their published data processing terms, which prohibit processing beyond the entrusted task and require technical and organizational safeguards and limits on sub-processing. We will update this policy if processors or tasks change.

To perform our service agreement with you, we entrust or store personal information overseas as follows (PIPA Article 28-8(1)(iii)).

Coordinates sent to the Norwegian Meteorological Institute are grid values sent without any account or device information and cannot identify you, but we list them because they come from your location.

On Android devices, the notification component (Firebase) may contact Google when the app is first launched to prepare for notifications, creating an installation identifier and a notification token. This token is not registered with our server before you sign in.

How to refuse and what happens

• Push notifications (Google, Apple): turning off notifications in device or app settings, or signing out, stops transfers for member notifications; you will not receive member notifications.
• Public post delivery (CloudFront): not posting, or deleting posts, stops it; you cannot use community publishing.
• Inquiry email (Gmail): not emailing us stops it; you can still exercise your rights directly in the app (export, deletion, account deletion).
• Weather (Norwegian Meteorological Institute): not granting location permission stops it; weather guidance will not be shown.

Google and Apple sign-in is authentication you perform directly with those companies; we only receive the result and do not transfer personal information overseas for it.

"Server (original) + device copy" means the server version is authoritative; the device copy lets you view records offline. The device keeps guest records and each account's records separately so they never mix.

Moving guest records to an account: when you sign in on a device with guest records, the app asks and moves them only if you choose "Move". If the account already has records for the same date, outfits, photos and photo tags are all kept, notes are joined, the account's rating, place and weather take priority, and clothing types and outfit categories with the same name are merged. Original clothing photos, inspiration photos and the inbox are not uploaded; they move within the device to the account's storage. Guest records on the device are deleted only after everything is confirmed on the server, and you can cancel and undo before the move finishes. A record-transfer job record is kept on the server for undo and recovery (Section 3).

1. Location is used only to look up the weather. Denying location permission affects only weather guidance.
2. When you view the weather, the app sends the device's coordinates to our server. The server handles weather requests without account authentication, so the coordinates are not linked to your account, and looks up the weather from the Norwegian Meteorological Institute using coordinates converted to an approximately 1.2 km grid.
3. The server does not log coordinates and uses only the grid values as cache keys. Location is not stored in your account.
4. If we introduce a feature that needs to store coordinates, we will update this policy and ask for your consent first.

1. Background removal runs on your device with a model bundled in the app; photos are not sent to our server or any external service for it.
2. No photo is uploaded while you are not signed in.
3. When you sign in, clothing display photos and wear photos are stored in private storage under a path for your account. Other users cannot access them, and the app downloads only your own photos through signed addresses valid for 1 hour.
4. Original clothing photos are never uploaded. The display photo uploaded is the background-removed version made on the device or, if removal failed, a downscaled copy with metadata such as photo location (EXIF) removed.
5. Wear photos are kept on the server while you are signed in. To remove one from the server, delete it; the server copy is deleted by a cleanup job after 1 hour.
6. Outfit share links contain no photos, only categories, colors, layout, names and shop links.
7. When you post to the community, the outfit snapshot or one wear photo you choose, your caption and the community room are sent to the server and published. Private account photos never become posts on their own.
8. Private account photos are never shown to other users, are processed only for providing the Service, customer support and safe operation, and are not used to train machine-learning models.

1. The Service shows ads that the Operator reviews and places directly, on the home screen and community feed, to signed-in members only.
2. Ads are not chosen using your photos, wardrobe, outfits, calendar, body or location information, or app usage records. We do not run personalized ads, collect advertising identifiers (IDFA/AAID) or use third-party ad SDKs.
3. When an ad is shown or tapped, the server only adds one to that ad's impression or click total. We do not store who saw or tapped which ad. To prevent abuse, requests are counted temporarily against the account identifier for at most one day.
4. When you report an ad, only the reason is stored with the ad; the reporter's account is not stored.
5. View counts that keep the same ad from appearing too often, and the list of hidden ads, are stored only on this device.
6. Tapping an ad opens the advertiser's website in your browser, where the advertiser's privacy policy applies.
7. We do not send promotional push notifications without your separate consent.

1. The app does not use cookies. The website uses no cookies to analyze behavior or for advertising; it uses cookies only to keep operators signed in to the admin console.
2. We do not collect behavioral information for personalized advertising.
3. Shops opened in the in-app browser may use their own cookies; the app does not read them, and they are governed by each shop's policy.
4. The app records unexpected errors only on the device and never sends them off the device. File paths, addresses, identifiers and email fragments are removed before recording.

1. You may ask us to let you access, correct or delete your personal information, to stop processing it, or to withdraw consent.
2. In the app you can directly: export your data (Settings > Privacy; built on the device, with only missing photos downloaded from the server); delete your data (guest: all guest records and photos on the device and scheduled notifications, plus analytics withdrawal; member, online: analytics records and consent, wardrobe, outfit, calendar, body and transfer records deleted from the database immediately and then photos, while the account, public profile, posts and guest records remain); sign out (tokens revoked, device notifications removed, account records kept on the device); sign out and remove from this device; delete your account (immediately marked deleted, analytics deleted immediately, the rest 30 days later; guest records kept); keep body data on this device; withdraw analytics consent; turn off notifications; edit your public profile; delete posts and comments.
3. For other requests, email the address in Section 19. We will act within 10 days of receipt and tell you the result, or the reason if the law allows us to limit access or suspension.
4. You may make requests through a legal representative or an authorized agent, who must submit a power of attorney in the form set by the PIPC notice on processing methods.
5. Because we do not keep email addresses, we may ask for the minimum information needed to confirm you own the account (for example, the handle shown on the app's account screen).
6. Deleting your account does not make us ask Google or Apple to disconnect the app; you can remove ClosetMe from your Google or Apple account settings yourself.
7. Device-only records (original clothing photos, inspiration photos, inbox) have no server copy and cannot be recovered once deleted.

• Administrative: only the Operator handles personal information; the admin console is limited to authorized operators, and its activity (audit records) is kept for 1 year.
• Technical: encryption in transit (HTTPS); database encryption at rest; private photo storage with server-side encryption and 1-hour signed addresses; least-privilege access; a log redaction list (auth tokens, cookies, email hashes, latitude and longitude, body measurements, raw IP addresses in app-server logs) with tests that check it; blocking internal-network access when the server fetches external addresses; response checks that keep sensitive fields out of API responses.
• Physical: servers and data are protected by the physical security of AWS data centers.

1. We do not collect sensitive information under PIPA Article 23 (ideology or beliefs, union or party membership, political views, health, sex life, genetic information, criminal records, biometric information, race or ethnicity) or unique identifiers.
2. Body information (gender, height, body proportion indices, body shape, personal color) is optional input used for the silhouette preview that helps judge garment length and for comparing similar body types; we do not treat it as information about illness or health. Because it concerns the body, we protect it as if it were sensitive: it is never logged, detailed indices are never sent to other users, and it is stored with a post only if you turn on body information when posting, in which case other users see only the values needed for comparison, such as height and body shape.
3. Turning on "Keep body data on this device" (Settings > Privacy) deletes the server copy and stores body data only on the device from then on; similar-body comparison in the feed turns off, and you will need to re-enter it on a new device.
4. Wear photos and post photos may show your face, but we perform no technical processing, such as face recognition, to identify individuals. Information in photos or captions you publish may become visible to other users, so please check before posting. You can delete a post at any time.

The Operator does not currently check public post images with any external image analysis service. Public posts are reviewed by the Operator directly when they are reported or when the Operator notices them, and may be hidden or deleted based on that review (Terms of Service, Article 12). If three different members report the same post, it is hidden automatically before the Operator reviews it, and the Operator then reviews it and restores it or keeps it hidden. If the Operator introduces an external image analysis service, it will first add that processor and any overseas transfer to this policy before using it. If you disagree with a review result, you can ask for another review at the address in Section 19.

1. Children under 14 cannot create accounts. By agreeing on the sign-in screen to the Terms of Service, which include the 14-or-older condition, users confirm they are 14 or older.
2. We do not knowingly collect personal information from children under 14 and will delete without delay any account or optional analytics record we learn belongs to a child under 14.
3. Records of features used without signing in stay on the device.

We do not make further use or provision under PIPA Articles 15(3) and 17(4) and do not process pseudonymized information. We operate no video surveillance devices and are not required to designate a domestic representative.

The Operator has no separate department; the privacy officer handles privacy matters and complaints directly.

For reports or consultation about privacy infringement, you may contact: Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr); Personal Information Infringement Report Center, KISA (118, privacy.kisa.or.kr); Supreme Prosecutors' Office (1301, www.spo.go.kr); Korean National Police Agency (182, ecrm.police.go.kr).

1. This policy takes effect on November 7, 2026.
2. We announce changes on the website and in the app from 7 days before they take effect, and important changes, such as new items collected or new overseas recipients, from 30 days before. Changes are recorded in the history below.