Privacy Policy

1. Who We Are

Clorg is operated by Fenix Integral Services ("Fenix", "we", "us", "our"), a company registered in the Federal Republic of Nigeria. We are the data controller for personal data collected through the Clorg mobile application (the "App"). We handle personal data in accordance with the Nigeria Data Protection Act 2023 and, where it applies to users in those regions, the EU and UK General Data Protection Regulation.

Questions: support@clorg.app

2. What Data We Collect

Identity and contact data: your name and email address, used to operate your account and communicate with you.

Age band: the age range you select during onboarding, used to enforce our minimum age requirement and personalise your experience.

City: the city name you enter, used only to look up local weather for outfit suggestions. We never collect GPS location.

Style preferences: your onboarding quiz answers, used to personalise outfit suggestions.

Closet data: photographs and details of clothing items you add, including names, categories, cost and wear history.

Body photographs: full-length photos you upload for virtual try-on, protected as described in Section 4.

Subscription and credit data: your plan and credit balance. We never receive or store card numbers or bank details; payments are processed entirely by Google Play or the Apple App Store.

Push notification token: if you turn on daily look notifications, a device token used only to deliver them. Removed when you log out or delete your account.

Usage data: which features you use, to operate and improve the App.

3. Legal Basis for Processing

We process data to perform our contract with you (account, subscriptions and credits), on the basis of your consent (body photographs, push notifications, which you can withdraw at any time), for our legitimate interests (improving and personalising the App), and where the law requires it.

4. Your Body Photographs

Body photographs are stored in private cloud storage with access restricted to your authenticated account and our backend processing. They are never shared with third parties for their own purposes, never sold, never licensed, and never used to train or improve any AI model, ours or anyone else's.

When you request a try-on render, and when the App generates your daily looks, your body photograph and the selected clothing images are transmitted, encrypted in transit, to OpenAI's image API solely to generate that render. OpenAI states that data sent to its API is not used to train or improve its models unless you opt in, and that abuse monitoring logs are retained for up to 30 days. Body photographs are not sent to any other AI provider. See Section 6 for full details.

You can delete all body photographs at any time in Settings, Privacy, Delete photos. Deletion is immediate and permanent.

5. Clothing Photographs

When you add an item to your closet, its photograph is sent to Replicate to remove the background and to Google's Gemini API to suggest tags such as category and colour. These photographs contain clothing, not you; if a clothing photo includes a person, we recommend cropping first. Clothing photographs are never sent to OpenAI, and your body photographs are never sent to Replicate or Google. Section 6 sets out what each provider receives and how their terms govern it.

6. Third Party AI Processing

Some features work by sending your photographs to external AI providers for processing. In every case the image is transmitted encrypted in transit, sent only to produce the result you asked for, and never sold, licensed or used for advertising. We do not send your name, email address or account identifier with these images.

OpenAI: receives your body photograph together with the clothing images for that look, to generate virtual try-on renders and daily look renders. OpenAI states that data submitted through its API is not used to train or improve its models unless you explicitly opt in, and that abuse monitoring logs containing prompts and responses are retained for up to 30 days unless a longer period is required by law. We have not opted in. Terms: https://openai.com/policies/api-data-usage-policies

Google (Gemini API): receives clothing photographs only, to suggest tags such as category, colour and season. Never your body photographs. Clorg uses the paid tier of the Gemini API. Under Google's terms for paid services, Google does not use your prompts, the files submitted with them including images, or the responses to improve its products, and its human reviewers do not read API input and output. Prompts and responses are logged for a limited period solely to detect and prevent violations of Google's Prohibited Use Policy and to meet legal obligations. Terms: https://ai.google.dev/gemini-api/terms

Replicate: receives clothing photographs only, to remove the background so the item appears cleanly in your closet. Never your body photographs. Retention and permitted use of that content are governed by Replicate's terms. Terms: https://replicate.com/terms

We do not control how long these providers retain data or exactly how they process it beyond the request itself. That is governed by each provider's own terms, linked above, which they may change. Where their terms permit use beyond returning your result, that use is outside our control and is not authorised by this policy. If you would rather not have a photograph processed this way, do not upload it: closet items can be added without AI tagging failing the item, and try-on and daily looks are optional features.

7. How We Use Your Data

To provide and personalise the App: closet organisation, outfit suggestions, virtual try-on, daily looks, trip packing lists and style insights. To manage your subscription and credits. To send service communications and, if you enable them, daily look notifications. Weather for suggestions is fetched from Open-Meteo using only your city's coordinates, never linked to your identity. We do not use your data for targeted advertising and we do not sell it.

8. Data Retention

Your data is retained while your account is active. When you delete your account, your data, including photos, closet, outfits and preferences, is deleted immediately and permanently from our systems. Deletion cannot be undone. We may retain anonymised, aggregated statistics that cannot identify you.

9. Third Party Processors

Supabase, Inc.: database and file storage for account, closet and photo data.

OpenAI: virtual try-on and daily look rendering, as described in Sections 4 and 6. Receives body photographs and clothing images.

Google (Gemini API): clothing item tagging, as described in Sections 5 and 6. Receives clothing photographs only, never body photographs.

Replicate, Inc.: clothing photo background removal, as described in Sections 5 and 6. Receives clothing photographs only, never body photographs.

RevenueCat, Inc.: subscription entitlement management. Receives store transaction identifiers and subscription status, not your payment details.

Google Play and Apple App Store: payment processing.

Open-Meteo: weather lookups using city coordinates only, with no account identifier.

Expo: delivery of push notifications, if you enable them.

Each processor acts on our instructions under its applicable data processing terms. For the three AI providers, Section 6 sets out exactly what is sent and how their own terms govern retention and use.

10. Your Rights

You may at any time, free of charge: access a copy of your data; correct inaccurate data; delete your photos or your entire account; receive a portable copy of data you provided; object to or restrict certain processing; and withdraw any consent. Nigerian users may complain to the Nigeria Data Protection Commission; EU and UK users to their local supervisory authority.

11. Exercising Your Rights

Use Settings, Privacy in the App to delete your photos, request a copy of your data, or delete your account, or email support@clorg.app. We acknowledge requests within 5 business days and respond within 30 days.

12. Cookies and Analytics

The App uses no cookies, no advertising networks and no cross-app tracking. If we ever introduce analytics that process personal data, we will update this policy first.

13. Children

Clorg is not directed at children under 13 and we do not knowingly collect their data. Contact us if you believe a child under 13 has created an account and we will delete it.

14. Changes

We will notify you in the App or by email at least 14 days before material changes take effect.

15. Contact

Fenix Integral Services, Lagos, Nigeria

Email: support@clorg.app