Privacy policy
Last updated 17 October 2026
This policy covers the Drapr app and getdrapr.com. Drapr is run by Roars Technologies Pvt. Ltd, Sabarmati, Ahmedabad, Gujarat, India ("Drapr", "we"). Questions, requests and complaints go to hello@getdrapr.com.
The short version
- We keep what you put into Drapr (your clothes, looks, chats and receipts) so the app can work, and nothing about you that it doesn't need.
- We use Claude, an AI model made by Anthropic, an outside AI provider, to read your photos and receipts and to power the stylist. Anthropic does not use that data to train its models.
- We don't sell your data, show you ads, or track you across other apps or websites.
- You can turn photo analysis and personalization off in Settings, download everything, and delete your account from the app.
What we collect and why
| What | Why | How long |
|---|---|---|
| Email address, and your name if you give it | Your account, sign-in, and emails about your account | Until you delete your account |
| Password (stored only as a one-way hash), or your Google or Apple sign-in id | Signing in | Until you delete your account |
| Extra email addresses you confirm for forwarding receipts | Accepting receipts you forward from them | Until you remove them or delete your account |
| Photos of your clothes and outfits, and the details read from them (type, colour, brand and so on) | Your wardrobe, and building looks from it | Until you delete the piece or your account. Outfit photos used to find pieces are deleted after 24 hours |
| Your taste profile: style answers, colours, what you keep, wear, save or pass on | Styling that fits you (it only keeps learning while personalization is on) | Until you delete your account |
| Messages with the stylist | The stylist, and your conversation history | Until you delete the chat or your account |
| Purchases from receipts you forward or scan: shop, items, sizes, prices, order totals, order number and date, return deadline | Adding what you bought, and reminding you before a return window closes | Until you delete the piece or your account |
| Photos of paper receipts you scan | Reading the receipt | The original is deleted once read, within 24 hours at most. A copy with payment details blacked out is kept until 30 days after the return window closes, or 90 days if there isn't one |
| Which clothes you want to be styled in: womenswear, menswear or both | Choosing what to suggest. It is a preference about clothes, not a statement about who you are | Until you change it or delete your account |
| Pronouns, if you choose them | How the stylist refers to you. Used for wording only, never to profile you | Until you clear them or delete your account |
| Your sizes (top, bottom, shoes), if you add them | Filling in the size when you add a piece yourself. Not sent to Anthropic, and not used by the stylist | Until you clear them or delete your account |
| Approximate location, only while you use Style me | Checking today's weather, so outfit suggestions suit the conditions | Not stored by us, and we keep no location history. Your phone rounds its position to two decimal places (about a kilometre) and sends only that to Open-Meteo. We get back the weather, never the place |
| Profile photo, if you add one | Shown to you in the app, never to other users | Until you remove it or delete your account |
| Push notification token and your notification choices | Sending the notifications you've allowed | Removed when you sign out or delete your account. If you delete the app without signing out, the token stays until the next time we try to send you a notification, which fails and removes it. If we never need to send one, it stays until you delete your account |
| How you use the app (screens finished, looks saved, pieces worn), under a scrambled id, never your name or email | Seeing where people get stuck | Until you delete your account |
| Crash and problem reports, and messages you send us for support | Fixing bugs and answering you | Support messages are kept for 24 months, by Gleap (see who else sees your data) |
| A record that you agreed to how Drapr uses AI, and when | Showing what you agreed to | Until you delete your account |
What we don't collect
- We do not collect precise GPS location.
- We do not use advertising identifiers and we do not run advertising.
- We do not buy personal data about you from third parties.
- We do not track you across other companies' apps or websites.
- We do not ask for your gender. We ask which kind of clothing you want to be styled in: womenswear, menswear or both. That is a preference about clothes, not a statement about who you are, and you can change it at any time.
- You may optionally tell us your pronouns so the app addresses you correctly. Pronouns are used for how we write to you and are never used to decide what to suggest you wear.
We also don't collect your contacts or health data. The website sets analytics cookies only if you accept them (see Cookies on our website).
How we use AI, and your two switches
Drapr sends Anthropic, an outside AI provider, three kinds of data:
- the photos you add of your clothes and outfits;
- your messages to the stylist, with your wardrobe list and taste profile;
- the text of receipts you forward, with your name, address, phone and card numbers removed first, and photos of paper receipts you scan, as you took them. We black out payment details before we keep a copy.
We use Anthropic under its standard commercial API terms, so the data we send is not used to train its models. Anthropic never receives your email address or your location.
In the app, under You, then Settings & privacy:
- Photo analysis. Off means new photos are not sent to Anthropic, and you add a piece's details yourself. Pieces already read stay as they are.
- Personalization. Off means the stylist still works from your wardrobe but stops learning your taste from what you do.
You agree to how Drapr uses AI before using the app, and we ask again if what we send changes.
Styling. When you ask for an outfit, we send a text description of the relevant garments, what our system has read from your photographs rather than the photographs themselves, to Anthropic so it can assemble and explain a look. Images are not sent at this step.
Training
We do not use your photographs to train artificial intelligence models, ours or anyone else's, and we do not permit our providers to do so.
We do keep a record of what our system read from each photograph: the category, colours, fabric and similar attributes it identified, together with any correction you made. We use those records to measure and improve how accurately we recognise clothing. They contain no image. When you delete your account, these records are severed from your identity and retained only in a form that cannot be linked back to you, for 24 months.
What we never do with your photographs
We do not sell them. We do not share them with advertisers. We do not publish them. We do not show them to any other user.
Clothing sizes
You can tell us the sizes you wear, so we can fill in the size when you add a piece yourself. These are the sizes you give us. We do not take measurements from your photographs, we do not estimate your body dimensions, and we never use a photograph to identify a person.
Sizes are deleted when you delete your account.
Purchases and receipts
Prices and order totals are financial data, so we keep them on your own record only. They go with your data download and are deleted with your account. Any report we look at across users is a total for a group of at least three people, and anything used to improve Drapr is grouped into price bands, never an individual amount.
Receipts you forward are only accepted from your account email or from extra addresses you have confirmed in Connected sources. Mail from an address we don't recognise isn't added to any account, and we delete it from our mailbox within a day. We keep nothing from people who don't have an account.
Our legal reasons for using your data
| Purpose | Lawful basis |
|---|---|
| Creating and running your account | Performance of a contract |
| Recognising garments and generating styling suggestions | Performance of a contract |
| Storing clothing sizes, wardrobe preference and pronouns | Consent, withdrawable at any time by clearing them in the app |
| Approximate location for weather | Legitimate interest in a suggestion that suits the conditions |
| Safety classification of uploads | Legal obligation, and our legitimate interest in preventing unlawful content |
| Improving recognition accuracy from derived records | Legitimate interest in a working product |
| Crash reporting and diagnostics | Legitimate interest in a working product |
| Security and abuse prevention | Legitimate interest in protecting users and the service |
| Service emails | Performance of a contract |
| Counting visits to our website (Google Analytics) | Consent, given or refused in the cookie banner and withdrawable at any time from "Cookie settings" at the bottom of every page |
Who else sees your data
Only the services we need to run Drapr, and only what each one needs:
| Service | What it gets | For | Where |
|---|---|---|---|
| Anthropic | Photographs of garments for recognition, and text descriptions of garments for styling, with your wardrobe preference and wardrobe context. Also your messages to the stylist with your taste profile, the text of receipts you forward with personal details removed, and photos of paper receipts you scan | Reading photos and receipts, styling, the stylist | United States |
| A sign-in check if you use Google; push notification tokens and notification text | Sign in with Google, and push notification delivery (Firebase Cloud Messaging) | United States | |
| Google Analytics | Only if you accept analytics cookies on getdrapr.com: the pages you visit, your browser and device type, an approximate location worked out from your IP address (Google Analytics doesn't store the IP address itself), and a random cookie id. Nothing from the app, and nothing that names you | Counting website visits and seeing which pages are useful | United States |
| Apple | A sign-in check if you use Apple; notifications to your iPhone | Sign in with Apple, and delivering notifications to your iPhone | As set out in Apple's terms |
| Gleap | Your account id, name and email address when you sign in, plus crash reports and any bug report you submit, including a screenshot you choose to attach and basic device information | Fixing bugs, support | European Union (Frankfurt, Germany). Screenshots and attachments are stored by Cloudflare, which may hold them in any of its locations worldwide |
| Open-Meteo | An approximate location (your phone's position rounded to about a kilometre), sent straight from your phone. No account data is sent | Today's weather | European Union |
| Hetzner | Your email address and the emails we send you; receipt emails you forward to us, on our own mail server | Account email, receiving receipts | Germany (Falkenstein) |
| Hostinger | Your account and what Drapr keeps for it (wardrobe, photos, looks, purchases). All our application servers, databases and object storage are here | Hosting the app | Malaysia (Kuala Lumpur) |
We check photos for viruses and unsafe content, and cut out backgrounds, on our own server. None of that is sent anywhere else (see content safety). If you joined the early-access list, your first name and email are kept in our mailing tool (Sendy) to tell you when your invite is ready. We don't send marketing email.
Cookies on our website
This covers getdrapr.com only. The Drapr app doesn't use Google Analytics.
- Essential: always on. Your browser remembers whether you accepted or declined analytics cookies, so we don't ask on every page. That choice stays in your browser and is never sent to us.
- Analytics: off unless you press Accept. If you do,
Google Analytics sets two cookies,
_gaand_ga_6C9N5D278E, which last up to 2 years, so we can count visits and see which pages people find useful. We have switched off Google's advertising features and signals. We don't run ads. - Support chat: every page loads Gleap's chat button so you can ask us something or report a problem. Gleap keeps an anonymous visitor id in your browser so a conversation carries on between pages. It only receives what you type or attach, plus basic browser and device information.
Decline is one click, the same as Accept. You can change your mind at any time with "Cookie settings" at the bottom of every page. If you decline after accepting, we delete the analytics cookies.
Where your data is held
We are established in India. Our application servers, databases and all stored photographs are hosted by Hostinger in Kuala Lumpur, Malaysia. Our outbound email server is hosted by Hetzner in Falkenstein, Germany. Our support tool, Gleap, is hosted in the EU with attachments stored on Cloudflare's global network. Anthropic processes garment photographs in the United States.
Neither India nor Malaysia has an adequacy decision from the European Commission. For transfers of EEA and UK personal data we rely on the Standard Contractual Clauses, with the UK Addendum where relevant, together with encryption in transit and access controls.
Content safety
Every photograph uploaded to Drapr is automatically checked by a classifier running on our own servers before it enters your wardrobe. Nothing leaves our infrastructure for this check.
Where an upload is flagged, it is refused and held in a restricted review area so that a member of our team can assess it. Images in that area are blurred by default, the original is never sent to a reviewer's browser, and every view is logged against the person who made it.
Drapr does not permit sexual content involving minors in any form. Where we become aware of it we remove it, terminate the account, preserve the evidence in an isolated restricted record, and report it to the competent authorities as the law requires.
Keeping and deleting your data
While your account is open, we keep your wardrobe, looks and sizes so the app works.
When you delete your account, which you can do in the app under You, then Settings & privacy, at any time without contacting us (or by email if you can't sign in: see how to delete your account):
- You are signed out on every device immediately and the account is scheduled for deletion.
- For 24 hours you can sign in again and choose "Restore my account" to cancel. The app tells you this when you confirm.
- After 24 hours everything is permanently deleted: your profile, your photographs and every stored copy of them, your wardrobe, looks, chats, sizes, taste profile, purchases and prices, receipts, usage history and search data, including anything held in the safety review area.
Kept after deletion, without your name, email or photos:
- records of what the AI read from photos, and any corrections, used to improve recognition, kept for 24 months;
- counts of AI use, which are our billing record, kept for 8 financial years as the Companies Act 2013 (section 128) requires;
- a log of actions our team took on accounts, kept for 24 months;
- server logs, kept for 30 days for security.
Our hosting provider keeps server snapshots for 24 hours. When you delete your account, your data is removed from our live systems after the 24-hour grace period described above, and disappears from snapshots within a further 24 hours.
Support messages are kept for 24 months.
Records relating to a confirmed child safety incident are retained separately and for as long as the law requires.
Your choices and rights
- See and download your data: Settings & privacy, then Your data.
- Correct your details in the app, or ask us.
- Delete a piece, a chat, or your whole account in the app.
- Turn off photo analysis, personalization and any notification in Settings.
- Ask or complain at hello@getdrapr.com. We reply within 30 days. You can also complain to your local data protection authority.
Security
All data is encrypted in transit. Access to production systems is restricted to named administrators and every access is logged. Images in the safety review area are blurred and access to them is recorded. Passwords are stored hashed, never in plain text. Photos are kept in private storage and shown to you through links that expire in minutes.
Receipt photos are encrypted at rest, but not every store is encrypted at rest today, and we would rather tell you that than imply otherwise. Extending encryption at rest across our databases and object storage is work in progress.
No system is perfectly secure and we will not claim ours is. If a breach affects your personal data we will notify you and the relevant authorities as the law requires, including the Data Protection Board of India and, for EEA and UK users, within 72 hours of becoming aware.
Under 18s
Drapr is not for anyone under 18. It learns your taste from what you do in the app, and we don't do that for anyone under 18. If we find that an account belongs to someone under 18, we delete it and everything in it. If you believe someone under 18 has an account, email hello@getdrapr.com and we'll delete it.
Changes
If we change what we collect or who we share it with, we'll update this page and tell you in the app before it takes effect.