Personal data
Privacy policy
Last updated: 1 October 2026
This English translation is provided for convenience. The French version, Politique de confidentialité, is the reference version and prevails in the event of any discrepancy.
A photo of your wardrobe says a lot about you. This page explains, without jargon, what DrAIssing does with your data, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
In short
- Your data is used only to run DrAIssing: no advertising, no resale, no advertising profiling.
- Your data (account, photos, wardrobe, outfits) is stored in the European Union, in Frankfurt.
- The AI providers that describe your items and create the try-ons do not train on your photos or your messages.
- You can export your wardrobe, your outfits and your history, empty your wardrobe in one tap and have your account deleted at any time.
Who is responsible for your data
The data controller is Nabil Fadel, publisher of DrAIssing. For any question about your data: contact@draissing.com.
What we collect, why and for how long
“Contract” means that the processing is necessary to provide the service described in the terms of use, which you accept when you create your account.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
Account Email, password (stored in hashed form, unreadable even to us), creation and last sign-in dates, IP address and browser of each open session. |
Create your account and sign you in on all your devices. | Contract | As long as your account exists; the IP address and browser of a session, until that session ends. After 2 years without signing in, we notify you by email, then delete the account. |
Style profile First name, city, style, constraints, silhouette, appearance chosen for the try-on model (skin tone, hair, apparent age), free or Premium plan. |
Put together outfits that suit you. | Contract | As long as your account exists. |
Wardrobe Photos of your clothes and their cut-out versions, item descriptions: category, colours, material, seasons, brand, size, price, notes, link. |
Build your wardrobe and put together outfits from what you own. | Contract | Until you delete the item, empty your wardrobe or delete your account. |
Outfits and history Saved outfits, the days you wore them, occasion, mood, weather, notes and rating. |
Avoid repetition and keep your history. | Contract | Until you delete them or delete your account. |
AI stylist Your requests and messages, together with what is useful to answer them: profile, list of your items, recent outfits, weather. |
Suggest outfits, describe your items from their photos or a shop link, and answer your questions. | Contract | Conversations are not saved: they disappear when you close the page. Anthropic, which runs the AI, deletes them from its servers within 30 days (up to 2 years for a request flagged as abusive). |
Realistic try-ons Photos of the outfit's items with their name, colours and material, appearance chosen for the model, generated images, number of try-ons this month. |
Show you your outfits worn by an AI-generated person. | Contract | As long as your account exists. Google keeps what it receives for 55 days at most, solely to detect abuse. |
Weather and location Chosen city, or approximate position (rounded to about a hundred metres) when you tap “Ma position” (My location) and your browser allows it. |
Adapt outfits to the weather. | Contract, at your request | The last location stays saved in your browser. Open-Meteo, which provides the forecasts, deletes its logs within 90 days. |
Beta list Email, first name and city (optional), phone type, language of the sign-up page. |
Let you know when the beta opens and invite you to it. | Consent, which you can withdraw at any time | Until you unsubscribe, or at most 12 months after the beta opens. |
Correspondence with us Your messages to contact@draissing.com and our replies. |
Answer your questions and requests. | Legitimate interest: replying to you | 3 years after the last exchange. |
Security IP address and technical information in our hosts' logs, time of your requests to the AI. |
Protect the service and limit abuse (60 AI requests per 10-minute window). | Legitimate interest: the security of the service | Times of AI requests: 24 hours. Logs: 1 day at Supabase; at Netlify, a period set by Netlify, which does not publish it. |
Only the email and password (for the account) and the email (for the beta) are mandatory. Everything else is optional: without a profile or photos, DrAIssing still works, but suggests less accurate outfits.
The AI's outfits are only suggestions. DrAIssing makes no automated decision that would produce legal effects concerning you or significantly affect you.
Your photos and artificial intelligence
- Item descriptions and stylist. When you add a photo or ask for an outfit, the relevant information is sent to Anthropic, whose AI describes the item or puts the outfit together. Anthropic is contractually prohibited from training its models on this data.
- Import from a link. When you paste a product link, our servers (Supabase, in Europe) read the product page and download its photos: the retailer's website sees our servers' address, not yours. The photos are added to your item and, together with the details from the page (name, brand, material, etc.), sent to Anthropic to fill in the item details. If the website refuses to be read, the link is sent to Anthropic, whose AI searches the web for the product; any photos found are downloaded by our servers.
- Realistic try-ons. The photos of the outfit's items, with their name, colours and material, together with the appearance chosen for the model and the image of that model, are sent to Google, whose AI creates the image. Google does not use this data to improve its products and keeps it for 55 days at most, to detect abuse. The person in the image is generated by AI: they do not exist, and they are never created from your face or body. Each image is labelled as AI-generated in the app and carries an invisible watermark (SynthID) added by Google.
- What you photograph. Only add photos of clothes. Avoid faces and other people, especially children: crop to the garment.
- Free-text fields. DrAIssing never asks for sensitive data (health, religion, opinions…): do not enter any in your profile or when talking to the stylist.
Who has access to your data
Your data is accessible only to you, to the publisher when necessary (support, security) and to the providers below, which process it on our behalf, on our instructions and under contract. We do not sell it, rent it or share it for advertising purposes.
| Provider | Role | Place of processing |
|---|---|---|
| Supabase Pte. Ltd. | Accounts, database, photos and server functions | European Union: Amazon Web Services servers in Frankfurt (Germany) |
| Netlify, Inc. | Hosting of the website pages | United States and a worldwide server network |
| Anthropic (Anthropic Ireland, Limited) | AI stylist and photo descriptions | United States |
| Google (Google Cloud France SARL) | Realistic try-on AI | European Union and outside the EU, notably the United States |
| OpenMeteo GmbH | Weather forecasts and city search | Switzerland |
| OVH SAS | Domain name and the contact@draissing.com mailbox | France |
Open-Meteo is an exception: your browser queries it directly, with no contract between us, and it handles these requests under its own privacy policy.
Your data may also be disclosed to an authority, but only where the law requires it.
Transfers outside the European Union
Some providers process data outside the European Union. These transfers are covered by the safeguards provided for by the GDPR:
- an adequacy decision of the European Commission: for Switzerland (Open-Meteo) and for US companies certified under the EU–US Data Privacy Framework;
- the European Commission's standard contractual clauses, included in our providers' contracts (Supabase, Netlify, Anthropic, Google).
You can obtain a copy of these safeguards by writing to contact@draissing.com.
Cookies and storage in your browser
DrAIssing uses no advertising cookies and no analytics tools, and embeds no third-party trackers. Fonts and libraries are served by draissing.com itself: opening a page contacts neither Google Fonts nor any other outside service. After that, the app communicates only with our servers (Supabase) and, for the weather, with Open-Meteo.
The app stores in your browser only what it needs in order to work:
- your sign-in session, so that you don't have to sign in again at every visit;
- your display preferences (rack or realistic view);
- the last weather and location you chose;
- the list of photos to erase, when a deletion could not be completed (erasure is retried the next time you open the app).
As this information is strictly necessary for the service you request, it does not require your consent. You can clear it in your browser settings: you will then be signed out.
So that it can be installed as an app on your phone or computer, the website also stores in your browser a small technical program (a “service worker”) and a page to display if your connection drops. They contain no personal data.
Security
- All connections are encrypted (HTTPS).
- Each account can access only its own data: these access rules are enforced by the database itself.
- Photos are kept in a private area and are displayed only through temporary links.
- Passwords are stored in hashed (irreversible) form, and data is encrypted on our host's disks.
- The access keys to the AI services stay on the server, never in your browser.
In the event of a data breach that poses a risk to you, we notify the CNIL (the French data protection authority) within 72 hours and, if the risk is high, the people concerned.
Your rights and how to exercise them
You have the right of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time, and the right to give instructions about what happens to your data after your death.
- Access and portability: in the app, go to Profil, then Mes données (Profile, then My data): “Exporter (.json)” (Export) downloads your profile, your wardrobe with its photos, your outfits and your history. To obtain a copy of your other data (account, plan, try-ons, cut-out versions of photos), write to us.
- Rectification: edit your profile, your items and your outfits directly.
- Erasure: delete an item or an outfit whenever you like, or empty your whole wardrobe with “Tout effacer” (Erase everything): items, photos, outfits and history. To delete your account as well (email, profile, try-ons), write to us from your account's email address.
- Beta: to unsubscribe, reply to one of our messages or write to us.
- Any other request: contact@draissing.com.
We reply within one month (which may be extended by two months for a complex request, in which case we let you know). We may ask you to confirm your identity, for example by writing from your account's email address.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL: cnil.fr/fr/plaintes, or CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or with the data protection authority of the European Union country where you live.
Minimum age
DrAIssing is only open to adults (18 and over). If you believe that a minor has sent us data, write to us: we will delete it.
Changes to this policy
We may update this policy, for example when the paid Premium plan launches. The date of the last update appears at the top of the page; any significant change will be announced to you in the app or by email before it applies.