ReWear — Privacy Policy

Effective date: [Effective date] · Data controller: ReWear, Israel · Contact: hello.rewearapp@gmail.com

We respect your privacy and collect as little personal data as possible.

1. Who this applies to

This policy explains how ReWear handles personal data of everyone who uses the ReWear app and website (the "Service"), worldwide.

2. What we collect

• Account data: when you sign in with Google, we receive your email address (and a basic Google profile identifier) to authenticate you and control access.
• Photos you upload: photos of garments you choose to upload, processed to generate design ideas and images (see §4).
• Usage / analytics data: events about how the Service is used — opening the app, uploading, starting a generation, viewing or liking a design, the style/target chosen, generation time and success/failure, and timestamps — tied to your account email so we can understand usage and improve the Service.
• Technical/log data: standard server logs (e.g., IP address, request time) used for security and reliability.

We do not collect special-category data, and we do not collect payment card details directly — any future payments are handled by a third-party payment processor.

3. How we use your data (legal bases under GDPR)

• To provide the Service (authenticate you, process your photos, generate designs) — legal basis: performance of a contract.
• To operate, secure and improve the Service and understand usage — legal basis: legitimate interests and/or your consent where required.
• To process your photos with AI — legal basis: performance of the contract, on your request.

We do not sell your personal data and do not use it for third-party advertising.

4. Your photos — processing and retention

ReWear is not a photo-storage service. Your uploaded photos and the generated results are used only to produce your designs, and are handled transiently:

• Photos are processed in memory only on our server while your designs are generated. They are not written to any database, permanent disk, log file, or backup.
• The generated results are held briefly in server memory only to deliver them to your browser, and are then automatically deleted — immediately once your browser has received them, and in any case within a few minutes.
• To create your designs, your photos are sent to our AI processing provider (Google / Gemini), which processes them transiently under its own terms. Their retention is governed by Google's API terms, not by ReWear.
• We do not use your photos to build advertising profiles, and we do not claim ownership of them (see the notice above and the Terms of Service).
• Please download any result you want to keep before leaving or starting a new generation — we do not keep a copy.

5. Who we share data with (processors)

We use trusted service providers who process data on our behalf: Google (Sign-In and AI generation via Gemini); a hosting provider (e.g., Render); and a database provider (e.g., Supabase) that stores the approved-emails list and usage analytics events (your photos are not stored there). These providers may process data in countries outside your own, including the United States. For EU/EEA/UK users, international transfers rely on appropriate safeguards (such as Standard Contractual Clauses).

6. Data retention

Account email and access are kept while your access is active. Usage analytics events are kept as long as needed to understand and improve the Service, then deleted or aggregated. Photos are processed transiently and not retained as a permanent store. We delete or anonymize data when no longer needed or on a valid deletion request.

7. Your rights

Depending on where you live (e.g., under GDPR/UK GDPR or similar laws), you have the right to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent at any time. To exercise any right, email hello.rewearapp@gmail.com. You may also complain to your local data-protection authority.

8. Children

The Service is not intended for children under 16 (or the higher age required in your country). We do not knowingly collect data from children below that age; contact us if you believe we have, and we will delete it.

9. Security

We use reasonable technical and organizational measures to protect your data (including access-controlled sign-in and encrypted connections). No method is 100% secure, but we work to protect your information.

10. Cookies and local storage

We use a sign-in session cookie necessary to keep you logged in. We do not use third-party advertising or tracking cookies.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will provide notice (for example, in the app). The "Effective date" shows the latest version.

12. Contact

Privacy questions or requests: hello.rewearapp@gmail.com.

Draft template — not legal advice. Have a qualified lawyer review before relying on it.