Privacy Policy

Effective November 13, 2026

1. Information we collect

• Account information: email address and password (stored as a salted hash by our authentication provider).
• If you sign in with Google: Google sends us your name, email address, profile picture and a Google account identifier. We use the email address to create and recognize your account and nothing else from your Google account: we cannot see your Gmail, contacts, calendar or files. This information is stored by our authentication provider (Supabase), is never used for advertising, is shared only with the providers listed in section 5, and is deleted when you delete your account.
• Payment information: subscriptions bought on the website are paid through Stripe. Stripe collects your card details: we never see or store them. We keep your plan, its status and its dates (trial end, renewal or cancellation).
• Wardrobe content you provide: photos of clothing items, item names, categories, colors, brands, notes, and related metadata you enter.
• Usage data: outfits you create, wear history you log, preferences you set (temperature sensitivity, preferred colors, styles).
• Location (optional): if you grant permission, we use your approximate location to fetch local weather for outfit recommendations. Location is stored only as a coordinate + city name on your profile.
• Technical data: standard server logs (IP address, user agent, timestamps) for security and debugging.

2. How we use your information

• Provide, personalize, and improve the service.
• Generate AI-powered outfit suggestions using your wardrobe and preferences (see "AI processing" below).
• Authenticate you and secure your account.
• Communicate service-related messages (e.g., email verification, password resets). We do not send marketing emails.

3. AI processing

Outfit suggestions and packing lists are generated by sending your wardrobe metadata (item names, categories, colors, tags — not your photos) to a large language model operated by Google LLC (Gemini). When you add an item with automatic tagging or use the try-on feature, the photo you submit is also sent to the AI so it can identify the garment. Background removal runs on our own servers (hosted by Vercel): your photos are not sent to any other company for it. These providers act as sub-processors bound by contractual data-protection obligations.

4. Where your data lives

• Application data (accounts, clothing items, outfits) is stored by Supabase Inc. in the United States.
• Photos are stored in object storage operated by Supabase Inc.
• Application data is protected by database row-level security so each user can only access their own records.

5. Data sharing

We do not sell your personal information. We share data only with service providers acting as sub-processors strictly to operate the service: Supabase (database, storage), Vercel (hosting and background removal), Google (AI, and sign-in if you choose it), Stripe (payments), Sentry (error monitoring), Upstash (the counters behind the usage limits and a one-week memory of your recent outfits, so suggestions don't repeat), Open-Meteo (weather forecasts and city search), BigDataCloud (finds the name of your city when you turn on "Follow my current location") and Resend (transactional email). The weather and city services receive an approximate position (rounded to about 11 km) or the city name you type and, like any service your device contacts, your IP address. They never receive your name, your email address or your wardrobe. We may disclose information if required by law or to protect the rights, property, or safety of users or the public.

6. Your rights

Subject to applicable law (including Quebec Law 25, the GDPR, and the CPRA), you may:

• Request access to the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Export your data in a portable format.
• Withdraw consent for optional data collection (e.g., location).

Contact us at hello@linette.app to exercise these rights. We will respond within 30 days.

7. Data retention

We retain your account data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where retention is required by law. How to delete your account, and what is deleted or kept, is explained on the account deletion page.

8. Security

We use industry-standard measures, including encryption in transit (HTTPS), encryption at rest (via Supabase and Vercel), and database row-level security. No system is perfectly secure; you use the service at your own risk.

9. Children

Linette is for adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, please contact us and we will delete it.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email. Continued use after a change constitutes acceptance.

11. Contact

Questions about this Privacy Policy? Email hello@linette.app.