Privacy Policy

This Privacy Policy explains how Relera Consulting AB ("Andy", "we", "us"), Gävlegatan 4, 113 30 Stockholm, Sweden, collects, uses, and protects your information when you use the Andy mobile app and Andy website (together, the "Service"). We are the data controller under the EU General Data Protection Regulation (GDPR). By using the Service, you agree to the practices described here.

Information we collect

Account information. When you create an account we collect your email address and authentication details. If you sign in with Apple, we receive the information you choose to share through Sign in with Apple (which may be an Apple-relayed, private email address).
Wardrobe photos and content. Photos you take or upload of your clothing, and the catalog data we derive from them (such as category, colour, and fabric), are stored so the Service can function.
Location. With your permission, we use your approximate location to provide weather-appropriate outfit suggestions. You can disable location access at any time in your device settings; the rest of the app continues to work.
Subscription and purchase data. When you subscribe or purchase credits, Apple's App Store processes your payment. We receive purchase receipts and entitlement information, but not your card details.
Usage and device data. We collect limited technical data (device type, app version, and diagnostic/crash reports) to keep the Service reliable and secure.

How we use your information

We process your information on the following legal bases under GDPR:

Contract (Article 6(1)(b)). To provide core features: cataloging your wardrobe, generating outfit suggestions, managing your account and subscription.
Legitimate interests (Article 6(1)(f)). To diagnose problems, monitor errors, prevent fraud, and maintain the security and reliability of the Service.
Consent (Article 6(1)(a)). To access your approximate location, to send you push notifications, and, where you have separately opted in, to use your wardrobe photos to train or improve AI models. You may withdraw any consent at any time in your device settings or in-app Settings without affecting other features.

AI processing of your photos

To catalog your wardrobe and suggest outfits, your clothing images and related data are processed by automated systems, including third-party AI model providers acting as our processors. We share only what is needed to perform these tasks. We do not sell your photos, and we do not use them to advertise to you.

How we share information

We do not sell your personal information. We share it only with service providers who process data on our behalf under contract (acting as data processors):

Render.com: cloud hosting for the backend and database (Frankfurt, Germany, EU).
Cloudflare R2: storage for wardrobe photos and content (Eastern Europe region, EU).
OpenAI, Google, Black Forest Labs: AI model providers used to analyze wardrobe images and generate outfit suggestions. These providers are based in the United States; transfers are protected by Standard Contractual Clauses (SCCs).
Apple: authentication (Sign in with Apple) and App Store payment processing.
RevenueCat: subscription and entitlement management. RevenueCat receives your user ID and email address and is based in the United States; transfers are protected by SCCs.
Sentry: crash and error monitoring. Sentry is based in the United States; transfers are protected by SCCs.
LaunchDarkly: feature flag management. LaunchDarkly is based in the United States; transfers are protected by SCCs.
Simple Analytics: privacy-friendly, cookieless analytics for the Andy website. No personal data is collected.

We may also disclose information where required by law, or to protect the rights, safety, and security of our users and the Service.

International transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. Where such transfers occur, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives an adequate level of protection.

Data retention

We keep your information for as long as your account is active. When you delete your account (which you can do at any time from within the app), we delete or anonymize your personal data and wardrobe content within 30 days, except where we must retain it to comply with legal obligations or resolve disputes.

Your rights

As a data subject under GDPR, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data ("right to be forgotten").
Portability: receive your data in a structured, machine-readable format. You can request a data export by contacting us at [email protected].
Restrict or object to certain processing activities.
Withdraw consent at any time for location access and push notifications, without affecting the lawfulness of prior processing.

You can delete your account from within the app. For all other rights requests, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), at imy.se.

Security

We use industry-standard measures, including encryption in transit and at rest, to protect your information. No method of transmission or storage is perfectly secure, but we work continuously to safeguard your data.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under that age. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice through the app or by email.

Contact us

Questions about your privacy? Email us at [email protected].

Relera Consulting AB
Gävlegatan 4
113 30 Stockholm
Sweden