Privacy Policy
Last updated September 28, 2026
This Privacy Policy explains what information What Should I Wear? collects when you use the Service, how we use and share it, and the choices and rights you have. By using the Service, you agree to the collection and use of information as described here.
Interpretation and Definitions
Capitalized words have the meanings below, whether singular or plural.
- "We", "Us", "Our" or "the Operator" means Sahaab Mohammad, an individual doing business as WhatShouldIwear, 1212 N La Salle Dr, Chicago, IL 60610, United States. For the purposes of the GDPR, the Operator is the Data Controller.
- "Service" means the What Should I Wear? website and web app at whatshouldiwear.io.
- "Account" means the account created when you sign in to the Service with Google.
- "Personal Data" means any information that relates to an identified or identifiable person.
- "Usage Data" means information collected automatically when you use the Service, such as the pages you visit and the features you use.
- "Service Provider" means a company that processes data on our behalf to run the Service. Under the GDPR, Service Providers are Data Processors.
- "You" means the person using the Service.
Information We Collect
Account information
When you sign in with Google, we receive your email address and a unique account ID. We do not receive your Google password.
Camera video
When you go live in the mirror, video from your camera is streamed in real time to our AI provider, which generates the try-on video you see. We do not record or store your live camera video on our servers. We do not collect, store or use biometric identifiers or biometric information, such as scans of face geometry, and we do not use your video to identify you.
Clothing photos
Photos you add to your closet are uploaded to our AI provider's storage so the Service can use them for try-ons. We send each photo to an AI model that writes a short description of the garment, and when you combine pieces, to an AI model that creates an outfit image. Please only upload photos of clothing. Your closet list itself is saved in your browser on your device.
Photos and videos you take
Photos and videos you capture in the mirror are kept only on your device, in your browser's storage, until you save or delete them. We do not upload them to our servers.
Payment information
Purchases are processed by Stripe. Your card details go directly to Stripe and are never sent to or stored by us. We receive limited information from Stripe, such as your Stripe customer ID, what you bought, and the status of your subscription.
Usage Data
We collect information about how you use the Service, such as how much live try-on time you use, which features you use, the kind of item you try on, your device and browser type, IP address, and diagnostic information about connection errors. Some of this is collected through our analytics provider, PostHog.
Cookies and Similar Technologies
- Essential cookies. We use a cookie to keep you signed in for up to 30 days, and a short-lived cookie during Google sign-in. The Service does not work without them.
- Local storage. We store your closet list, camera preference and captured photos in your browser on your device.
- Analytics. PostHog sets cookies or local storage to understand how the Service is used. We do not record your screen or sessions.
You can block or delete cookies in your browser settings, but you may not be able to sign in or use parts of the Service.
How We Use Your Information
- To provide the Service, including sign-in, live try-on, and tracking your live time.
- To process purchases and manage subscriptions, including gifted minutes.
- To send you emails about your account, such as a welcome email, when your time runs out, when you are gifted minutes, or reminders if you haven't visited in a while. You can unsubscribe from these at any time using the link in the email.
- To understand how the Service is used, fix problems and improve it.
- To prevent fraud and abuse, and to comply with the law.
We do not sell your Personal Data, and we do not use it for targeted advertising.
Service Providers We Share Data With
We share information only with Service Providers that help us run the Service, and only what they need:
- Google and Supabase, for sign-in and account storage.
- fal.ai, and the AI model providers it uses (including Decart and Google), to generate try-on video, describe clothing photos and create outfit images.
- Stripe, to process payments, subscriptions and taxes.
- PostHog, for product analytics.
- Resend, to send emails.
- Railway, which hosts the Service.
Each provider handles data under its own privacy policy. These providers may process data in the United States and other countries.
Other Disclosures
- Business transfers. If the Service is involved in a merger, acquisition or sale of assets, your Personal Data may be transferred. We will give notice before it becomes subject to a different privacy policy.
- Legal requirements. We may disclose information if required by law or in response to valid requests by public authorities, or to protect the rights, property or safety of the Service, its users or others.
Data Retention
We keep your account information, live-time balance and purchase records while your Account exists, and purchase records longer where needed for tax and accounting. Usage Data is kept for a shorter period, except where we need it to improve the Service or meet legal obligations. Clothing photos stay with our AI provider for as long as it needs them to provide the Service. Photos and videos on your device stay until you delete them.
Deleting Your Data
You can delete captured photos and closet items in the app at any time. To delete your Account and the Personal Data we hold about you, email us at hello@whatshouldiwear.io. We may keep some information where the law requires it, such as payment records.
Security
We use reasonable measures to protect your information, including encrypted connections and signed sign-in cookies. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your Rights Under the GDPR
If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete or receive a copy of your Personal Data, to object to or restrict its processing, and to withdraw consent at any time. We process your data to perform our contract with you (providing the Service), for our legitimate interests (improving and securing the Service), and with your consent where required. You may also complain to your local data protection authority. To use these rights, email us.
Your Rights Under the CCPA
If you are a California resident, you have the right to know what Personal Data we collect, use and disclose, to request deletion, to correct inaccurate data, and not to be discriminated against for exercising these rights. We do not sell or share Personal Data for cross-context behavioral advertising. To make a request, email us. We will verify your request by confirming your account email.
Do Not Track
The Service does not respond to Do Not Track signals.
Children's Privacy
The Service is not intended for anyone under 13, and we do not knowingly collect Personal Data from children under 13. If you believe a child under 13 has given us Personal Data, contact us and we will delete it.
Links to Other Websites
The Service may link to websites we don't operate, such as Stripe's checkout page. Their own privacy policies apply there.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the date at the top. For significant changes, we will let you know by email or in the app before they take effect.
Contact Us
Questions about this Privacy Policy or your data:
- Email: hello@whatshouldiwear.io
- Phone: +1 (470) 907-4431
- Mail: WhatShouldIwear, 1212 N La Salle Dr, Chicago, IL 60610, United States