Privacy Policy

Last updated 21 September 2026

Valet builds a wardrobe from photographs you choose. This policy describes exactly what leaves your phone, what does not, and who sees it. It describes the app as built — where a section says something is not collected, it is because the code does not collect it.

Photographs

Valet reads only the photographs you select through the system photo picker. It does not browse, index or enumerate your camera roll, and it does not ask for photo-library permission — the picker hands back the images you tapped and nothing else.

A photograph you select is sent, over an encrypted connection, to Valet's analysis service and from there to our model provider (OpenRouter, which routes to Google Gemini) to identify the garments in it and to generate the catalogue image. It is used for that request and is not stored on our servers afterwards.

Photographs are never used to train models. Our provider is used under terms that exclude training on submitted content.

Your wardrobe

The wardrobe itself — every garment, its name, colour, material, the catalogue image, and any note you add about where you keep it — is stored on your device only. It is not uploaded, backed up to us, or readable by us. Deleting the app deletes it.

The one exception is a look you deliberately share with friends, described below. Nothing else about your wardrobe is sent, and nothing about it can be inferred from what is.

Friends

Friends is optional. If you never sign in to it, nothing in this section applies to you and no account exists.

Signing in uses Sign in with Apple. We receive a private identifier from Apple and, on the first sign-in only, the name you choose to give. We never receive your email address, and we do not ask for one.

When you share a look for a given day, the following is stored on our servers: the day, the look's name and its one-line description, and a small image of each garment in that look. It is visible only to people who follow you and whom you have not blocked. It is never public, never indexed, and never shown to anyone who is not signed in.

We also store who follows whom, the invite codes you create, and the reactions you send or receive. Reactions are chosen from a fixed list of four words; there is no free-text messaging in Valet.

You can stop sharing a look at any time, which deletes it and its images from our servers. Closing your Friends account deletes everything above, permanently.

Reports and moderation

If you report a look or a person, we store the report, who made it, what it concerns, and the reason given, so that we can act on it. Reports are reviewed within one day. Reporting someone also stops you seeing them.

The stylist

When you ask the stylist a question, the question and a summary of your wardrobe (garment names and attributes — not images) are sent to the same provider to produce an answer. Conversations are not retained on our servers.

Subscriptions

Purchases are handled by Apple and by RevenueCat, which manages subscription state. RevenueCat receives a random identifier generated on your device and your subscription status. It does not receive your name, your email, or anything about your clothes. Apple handles payment; we never see your payment details.

What we do not do

• No account is required to use the wardrobe, the scan, the outfits or the stylist
• No email address, ever — not even for Friends
• No public profiles, no discovery, no follower counts shown to anyone but you
• No free-text messaging, so nothing you write can reach another user
• No analytics or usage tracking SDK
• No advertising and no advertising identifiers
• No selling or sharing of personal data with third parties
• No location, contacts, microphone or health data

Children

Valet is not directed at children under 13 and does not knowingly collect information from them.

Your choices

Because the wardrobe lives on your device, you control it directly: remove a garment in the app, or delete the app to remove everything.

If you have used Friends, Start over in the profile screen deletes your Friends account and everything attached to it — shared looks, their images, your follows and your reactions — at the same time as it erases the wardrobe on the device. Deleting the app alone does not close a Friends account; use Start over first if you want it gone.

If you want the random subscription identifier cleared, deleting the app and signing out of iCloud Keychain will do it.

Changes

If this policy changes materially, the updated date above will change and the new version will be published here before it takes effect.

Contact

Questions about privacy: hello@nexauva.com