Privacy Policy

We collect only what Clad9 needs in order to catalog your wardrobe and dress you well:

• Account information — your name, your email address, and either a salted password hash or, if you sign in with a provider, the basic profile that provider shares with us.
• Wardrobe imagery — the photos and videos of your clothes that you upload, plus the structured details we derive from them: category, color, pattern, fabric, formality, and season suitability.
• Photos of you — any photo you choose to upload so Clad9 can analyze your proportions and coloring, build your avatar, and catalog any clothing you're wearing in the photo. This is always optional; Clad9 works without it, with less personalized results.
• Calendar data — if you connect a calendar, the titles, times, and locations of your upcoming events, so recommendations can suit what you're actually doing.
• Location and weather — the approximate location you share or that we infer from your IP address, used to fetch your local forecast and to season-weight recommendations.
• Usage and device information — pages and screens you view, actions you take, your IP address, browser and device type, and app version. On the website we use cookies and session-replay analytics for this — see "Cookies and analytics" below. We do not serve ads and we do not use an advertising identifier.

We use the information above to:

• build and maintain your digital wardrobe from what you upload;
• generate outfit recommendations tuned to your body, your coloring, the forecast, and your calendar — which requires sending your images and prompts to the AI providers named below;
• create and render your avatar and outfit collages;
• learn from the outfits you accept, skip, and wear, so recommendations improve over time;
• manage your account, take payment where you buy something, and send you service and account email;
• monitor use of the Service, diagnose faults, and prevent abuse;
• meet our legal obligations and enforce our terms.

We do not sell your personal information, we do not share it with data brokers, and we do not use it for third-party advertising.

Photos of yourself are the most sensitive thing Clad9 handles, so we're specific about the limits. We use them for two purposes: to work out the silhouettes, cuts, lengths, and color palettes that suit you and render your avatar, and to identify clothing items you're wearing so they can be added to your digital wardrobe — the same cataloging we do for your wardrobe photos and videos. We also use basic framing information — how many people appear, and what kind of shot it is — to decide whether a photo is usable for this; we never use it to identify who anyone is.

We do not run facial recognition on your photos, we do not create a biometric identifier or faceprint from them, and we do not use them to identify you anywhere else or match you against any other person or database.

We do not use your photos, or the photos of your wardrobe, to train general-purpose AI models for other users. Learning from your feedback improves your recommendations, inside your account.

Your photos are private to your account. Nothing you upload is shown to anyone else unless you share it yourself (see "Sharing a look" below), and a photograph of you is never shared, even then. Uploading a photo of yourself is optional and you can delete it at any time without losing your wardrobe.

You can make a link to a look, a lookbook, a piece or your closet and send it to someone. Anyone who has the link can see what it shows, without an account. Nothing is shared until you make a link, and each link is separate. The address is long and random, isn't listed anywhere, and tells search engines not to index it. But whoever you send it to can pass it on, so send it to people you'd show the look to yourself.

• What a link shows — the board of the look, laid out from pictures of your clothes, and, only where you turn them on: the names of the pieces, what the look was for (for a calendar event, that's the event's title), the day it was for, and your first name. A lookbook's link also shows the lookbook's name and note.
• What a link to a piece or your closet shows — the pictures of your clothes, and, only where you turn them on: their names, the brands and what each piece cost, and your first name. A closet link shows only what's in your closet now, from the categories you chose; a piece you've retired is never shown, and a link to it stops working when you retire it.
• What a link never shows — never a photograph of you. A piece Clad9 took from a photo of you, a Portrait or an outfit selfie, appears only as Clad9's studio image of it, and is left out if it has none. Nor does a link show your email address, your full name, where you are, the weather, your calendar, or anything else in your account.
• What we keep — a copy of each board made for the link, so the link can show it without pointing at your own pictures; when you made the link, what it shows, when it ends, and how many times it has been opened. We don't record who opened it, and the shared page loads no analytics.

You can stop a link at any time from Shared links in your account settings, and it stops working immediately: the page and its pictures no longer open for anyone, and we delete the copies made for it. A link also stops working on the date you chose when you made it, and when you delete what it shares or your account.

We share personal information only with service providers who process it on our behalf, under contract, and only for the purposes below — plus where the law requires it.

• AI processing providers — your uploaded images and the associated prompts are sent to third-party cloud AI platforms to catalog garments and generate recommendations. This is how the Service works; it can't produce a recommendation without it.
• Cloud hosting and storage providers — running Clad9 and storing and delivering your uploaded and generated images.
• Identity providers — where you choose to sign in with a third-party account, to authenticate you.
• Calendar and weather providers — where you connect a calendar, and to fetch the forecast for your area.
• Payment processors — taking payment and validating receipts where you buy something. Card and bank details go to the processor, never to us.
• Analytics and email providers — measuring how Clad9 is used, including the session recordings mentioned above, and sending you service and account email.

These providers operate in the United States and elsewhere, so your information may be transferred and processed outside your country. We may also disclose information where the law requires it, to protect our rights or someone's safety, or in connection with a merger or acquisition — in which case this policy continues to apply to the information transferred.

The Clad9 Closet Capture Chrome extension lets you save a product photo from any shopping site into your closet — by clicking "Capture" in the extension popup, or by right-clicking a product image and choosing "Add to Clad9 closet." It only ever reads or sends a page's content when you take one of those two actions, or once, when you click "Connect" to link the extension to your account — never automatically or in the background.

• When you capture a product (via the popup button or the right-click menu): the product photo (either the image itself, or its web address if the photo can't be read directly), its title, brand, and price if listed, and the page's address — sent to Clad9 to identify and add the item to your closet, the same AI processing already described above.
• When you click Connect: a private connection code is created and stored only in your browser's extension storage, on your device — never in a cookie, never readable by the websites you visit, never shared with anyone else. It authenticates the extension to your Clad9 account and nothing more.
• Each time you open the extension's popup while connected, it asks Clad9 for your name and how many items you've added today, to show a personalized greeting and a running count — this is an account lookup, not a page read, and involves no content from the site you're on.
• The extension does not read, collect, or send anything about the other websites you visit, your browsing history, or any page's content you haven't explicitly captured.

You can disconnect the extension at any time from Account Settings or from the extension itself, which also revokes its connection code immediately. Anything it imports becomes part of your wardrobe like any other item, and is deleted the same way (see "Keeping and deleting your data").

If you connect a Google Calendar, Clad9 asks for read-only access to your events (the calendar.readonly scope). We read the titles, times, and locations of your upcoming events, and we use them for one thing: suggesting outfits that suit what you actually have on. We never create, change, or delete anything in your calendar.

Clad9's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We don't use your calendar data for advertising, and we don't sell it.
• We don't pass it to anyone else except where we need to in order to run the calendar features you asked for, where the law requires it, or if the business is acquired.
• Nobody at Clad9 reads your calendar data unless you've asked us to look at something specific, we need to investigate abuse, the law requires it, or the data has been aggregated and stripped of anything identifying.
• You can disconnect your calendar at any time from your Calendar page, which deletes the stored tokens and any cached events. You can also revoke access yourself at myaccount.google.com/permissions.

Clad9 can be connected to an AI assistant — Claude, ChatGPT, Gemini, or your own tools — so you can ask about your wardrobe in the place you're already working. This only happens if you set it up yourself: either by creating a connection key on your connections page, or by approving a request on a Clad9 screen that names the assistant and lists, in plain language, everything it is asking for. Nothing is connected by default, and every connection is separate — you can connect one assistant and not another, allow one of them more than the other, and disconnect either without touching the rest.

When you ask an assistant about your wardrobe, your question and the details Clad9 sends back are handled by whoever makes that assistant, under their own privacy policy and their own retention and training terms — not ours. The assistant is not Clad9. We have no control over what they keep or what they do with it, and we can't delete it for you. Read their policy before you connect them, and connect only the ones you're willing to share this with.

• What it can read — only what you allowed. The permissions are: what's in your closet, your laundry basket and your style profile; the outfits Clad9 has recommended you and what you told us you wore; and your upcoming calendar events and what Clad9 thinks they call for. Each is granted separately and named on the screen where you grant it.
• What it can do — ask Clad9 for an outfit, change pieces of a look, up to two at a time, mark an outfit as worn, and move clothes in and out of the laundry basket, again only where you allowed it. Everything it can change, you can change back in the app.
• What it can never do — upload photographs, add or delete anything in your closet, change your account, your plan or your payment details, or disconnect your calendar. These aren't permissions you can grant; they aren't offered at all.
• Photographs of you never leave, whatever you connect. Your FaceBooth photos, the self-photos you upload and your fit-check pictures are never sent to a connected assistant, at any permission level, in any form. Clad9 will tell an assistant which garments a fit check matched; it will not give it the picture. Photographs of your clothes, and the outfit images Clad9 generates, can be shared — that's what makes the answer useful. A photograph of you is a different thing, and we don't send it.
• What we record — which assistants you've connected, what you allowed each one to do, when you approved it, and when it last made a request, so your connections page can show you the truth and so we can spot a connection being abused. We don't keep a copy of your conversations with the assistant; those happen on their side, not ours.

You can disconnect an assistant at any time from your connections page, and it stops working immediately — we revoke the credential on our side, so it can no longer read anything whether or not it still holds one. Disconnecting never deletes anything from your Clad9 account, and anything an assistant added to your wardrobe stays yours and is deleted the same way as everything else (see "Keeping and deleting your data").

The Clad9 app for Android is another way into the same account. It shows the same closet and looks as the website, and what you add in it goes to the same place, so the rest of this policy applies to it as written. This section covers what is different on a phone.

• Camera and microphone — the app asks to use the camera the first time you tap to photograph your clothes or take an outfit selfie, and the microphone the first time you tap to dictate. It never asks when it opens, and it uses neither in the background. Photos you choose from your phone come through Android's own photo picker, so the app never asks to read the rest of your photos.
• Dictation — your phone's own speech recognition writes down what you say, under your phone's settings, and that audio doesn't come to Clad9. Only if your phone can't do it does the app record what you say and send the recording to Clad9, where Google's Gemini writes it down. Clad9 doesn't store the recording.
• Notifications — the app registers your phone with Firebase Cloud Messaging, Google's service for delivering notifications, and we keep the address it gives us, a device token, with whether you've allowed notifications, so we only send to that phone when you have. A notification carries its title, a sentence and the screen it opens, never a photo. Signing out of the app or deleting your account deletes the token, and you can turn notifications off in the app's settings or your phone's.
• Paying through Google Play — a plan bought in the app is paid to Google Play, which takes the payment under its own terms and privacy policy, so your card never reaches us. RevenueCat, which manages app subscriptions for us, tells us which plan you bought and when it renews or ends, matched to your Clad9 account. Deleting your account cancels the subscription, but Google Play keeps its own record of your payments, which we can't delete.
• Crash and error reports — when the app crashes, or meets an error it can't handle, it sends us a report: what went wrong and on which screen, the app's version, your phone's model and Android version, and your account if you're signed in. We use these only to find and fix faults.
• No analytics in the app — the app itself runs no analytics or session-replay software and uses no advertising identifier. A few pages open from the app in a browser tab, signed in to the website; those are web pages, and Google Analytics and FullStory run on them as on the rest of the site (see "Cookies and analytics" below).
• Deleting your account — you can delete it in the app, from You, then Profile. Uninstalling the app doesn't delete it. clad9.com/account-deletion explains every way to delete your account, and what is deleted.

The app never asks for your phone's location. Your city comes from your IP address or from what you type, as on the website (see "Location and weather" below).

Clad9 asks roughly where you get dressed each day, so a recommendation for a cold, rainy Tuesday actually accounts for the weather where you are, rather than guessing. This is set once during onboarding and can be changed any time from your account settings.

• How it's resolved — from your device's IP address when you set it up, or from a place name you type yourself. We never ask your browser or device for a precise GPS location, and we never resolve it silently: we show you the place we found and you confirm it, reject it, or type your own before it's saved.
• What it's used for — one thing: looking up the day's forecast for outfit recommendations, from Google's Weather API. It is never used to identify you to anyone, shown to other users, or shared with a connected AI assistant beyond the weather line it produces.
• A city is needed to join — the survey you answer when you join can't be finished without one. You can clear it later from your account settings; recommendations then don't factor in the weather, and nothing else about the account is affected.

You can view, change, or clear your stored location any time from Location and weather in your account settings.

We use cookies to run Clad9 and to understand how it is actually used. We do not use them for advertising, we do not sell what they tell us, and we do not share it with data brokers.

• Cookies that keep the site working — these keep you signed in, protect forms against cross-site request forgery, and remember whether you last signed in with email or Google. The site can't work without them.
• Analytics and session replay — Google Analytics, which counts page views and visits, and FullStory, which records a replay of your session so we can see where the interface goes wrong. We treat these as part of operating the service: they are how we find the broken screen, the form nobody can finish, the step where people give up. They load on every page, including before you have an account.

There is no cookie banner. We would rather tell you plainly here what we collect than ask you to dismiss a box. FullStory masks the text you type by default, and we have deliberately left the sign-in and sign-up pages masked, so your email and password are not captured in a replay. If you would rather we did not record your sessions at all, email privacy@clad9.com and we will exclude you.

We keep your information for as long as you have an account, and no longer.

You can delete individual garments, remove a photo, disconnect your calendar, or delete your entire account at any time from your account settings.

Deleting your account deletes everything. Your account closes the moment you confirm: you're signed out, any subscription is cancelled, and your email address is free to use again straight away. Within minutes we then delete everything that was in it, files included: your wardrobe and every photo of it, your photos of yourself, your fit checks, every look and picture we made for you, your lookbooks, trips, inspiration and notes, your calendar connections and events, and your connected assistants. Nothing is kept, and it can't be undone.

We also withdraw what we held elsewhere on your behalf: we revoke Clad9's access to your Google Calendar and your Sign in with Apple at Google and Apple. Microsoft offers apps no way to revoke access, so for an Outlook calendar we delete our copy of the access, and you can remove Clad9 from your Microsoft account yourself.

One record stays outside our systems. Payments are handled by Stripe, which keeps its own record of your payments, as payment processors must, under its own privacy policy. We cancel your subscription; we can't delete Stripe's records.

If you'd rather we deleted something than waited for you to find the right setting, email privacy@clad9.com and we'll do it.

Depending on where you live, you have rights over your personal information — and we extend the core of these to every Clad9 user regardless of location. You can:

• access the personal information we hold about you, and get a copy of it;
• correct information that's wrong or incomplete;
• delete your information, as described above;
• object to or restrict certain processing, and withdraw a consent you previously gave;
• ask us not to sell or share your information — which we don't do in any case.

To exercise any of these, email privacy@clad9.com. We'll respond within the time the applicable law allows, and we won't treat you differently for asking.

Your data is stored on encrypted infrastructure, in transit and at rest, and access to production systems is limited to the people who need it to run the Service.

No system is perfectly secure, and we won't claim otherwise. If a breach affects your personal information, we'll notify you and the relevant regulator as the law requires.

Clad9 is intended for adults and is not directed at children. We don't knowingly collect personal information from anyone under 18. If you believe a child has given us their information, email privacy@clad9.com and we'll delete it.

We'll update this policy as Clad9 develops. The date at the top always reflects the current version, and where a change materially affects how we handle your information we'll tell you by email or in the app before it takes effect.