Privacy Policy

Last updated: August 12, 2026

This policy explains how TOP — The Outfit Planner ("TOP", "we") collects, uses and protects your data. We keep the language plain on purpose. By using the app, you agree to what's described here.

Data we collect

Account: name and email to create and access your account.
Photos: photos of your clothes and face photos you upload for garment registration and personal color analysis.
Profiles: name, wardrobe type and the profiles you create (yours, a partner's, or someone you manage).
Usage: basic technical data to keep the app working and secure.

How we use it

Your photos are used solely to identify pieces, extract colors and analyze your personal coloring — to build your outfits and color ranking. We do not sell your data or use your photos for advertising.

Cookieless visit counting (no consent needed)

To know how many people reach the site, we use our own counter — Umami, open-source software running on our server, with no advertising company in between. It doesn't ask for consent because it doesn't track you: no cookie, nothing written to your browser's storage, and no identifier that follows you across pages, visits or sites.

Each visit records only: the page opened, where you came from (the previous link or search engine, including campaign parameters in the URL), the page title, your screen size, your browser language, and — inferred from your IP address and browser — the country and device type. The IP address is not stored: it is only used to generate a scrambled number that groups pages from the same visit within the same day, and the scrambling changes daily, so that number cannot recognize you later. The data stays on our server, is not sold and is not shared with third parties.

If you'd rather not be counted, the counter honors your browser's Do Not Track signal, and any ad blocker will stop it too.

Third-party cookies and measurement tools

These — and only these — depend on your acceptance. The site theoutfitplanner.com only loads them after you accept through the banner shown on your first visit. If you accept, the two tools used are:

Google Analytics (via Google Tag Manager): counts visits and traffic sources in aggregate. Uses cookies from google.com/analytics.
PostHog (EU region): measures on-page behavior (clicks, scroll) to adjust the content. Uses first-party cookies on this domain.

If you decline, no request to those tools leaves your browser while you use the site — on any page, in any future session. Your choice (accepted or declined) is stored only in the site's own local storage (the top-consent key in localStorage), with no third-party cookie for that, and is not shared with anyone. To change your choice, use the Cookies link in the footer of any page — it reopens the banner.

Facial recognition

Color analysis and outfit registration may process images of your face. This only happens with your explicit consent, given inside the app (a versioned consent screen), and you can revoke it anytime in Profile › Privacy.

What face data: only the photos you upload — your profile base photo and outfit photos, which may contain faces. We do not collect any other biometric data.

How we use it: (1) to analyze your personal coloring; and (2) when a photo contains more than one person, to identify which person is the profile owner. This identification is an ephemeral, real-time comparison performed within a single call to our vision AI provider (currently Google Gemini): the images are sent for processing and the response contains only the detected garments and colors. We do not create or store any facial template, embedding, or biometric identifier.

Sharing: images are processed by the AI provider (Google Gemini) solely for these purposes, under contract, and are not used to train models or for advertising. Photos are kept in private storage (Cloudflare R2), accessible only via expiring signed URLs.

Retention: photos are kept while your account exists and are permanently deleted when you delete your account. The facial comparison is ephemeral and leaves no stored biometric data.

Sharing

We share data only with providers that operate the service (image storage and AI processing), under contract and only as needed. Profiles within the same account share access with one another.

Your rights (LGPD/GDPR)

You can access, correct, export and delete your data anytime. Deleting your account permanently erases your data and photos — see the Delete account & data page.

Retention

We keep your data while your account exists. When you delete the account, we remove personal data and photos from our systems.

Children

Children's profiles are managed by a responsible adult on the account. The app is not intended for minors to create their own accounts.

Contact

Privacy questions: privacidade@theoutfitplanner.com.

⚠ Reference template. Review with legal counsel and fill in your legal entity, tax ID and DPO before publishing.