App Privacy Policy

Effective and last reviewed: 2026-09-25

In one line

The app works without signing in, and photos, measurements and your closet stay on your device. Sign-in is optional: if you sign in, only your height and body measurement numbers are kept in your account — photos, closet and looks never go to a server even when signed in. Try-on rendering, photo cutout, and photo-based measurements are performed on the device.

What we collect

Everything below is created or chosen by you inside the app, and it is stored on your device.

• Full-body and face photos from your camera or library, and images the app derives from them
• Garment photos, closet items, and looks you assemble
• Height in centimeters, body measurements you enter, and the body type you pick
• Color and body analysis results, and brand preference answers
• Notification settings and received notifications, if you turn notifications on

We do not ask for a phone number, postal address or payment details. An email address is collected only for the optional sign-in described under “When you sign in”. The app contains no usage-analytics SDK, no advertising identifier, and no crash reporting SDK.

When you sign in — height and measurements in your account

Signing in is optional; every feature works without it. If you sign in, the items below are kept on a Clad server so the same body can be rebuilt on a new device.

• Your email address — the sign-in method is a one-time code sent by email; there is no password
• Height in centimeters and body measurement numbers (shoulder width, circumferences and lengths, up to nine values), whether each value was estimated from a photo or measured by you, and the history of previous values
• Not sent: photos, images the app derives from them, your closet, looks, analysis results, preference answers
• Recipients: a Clad server (api.your-personal-color.com) and Supabase, which handles sign-in
• When: after you sign in, whenever you change height or measurements, and when the app opens and syncs
• If you registered for the web personal color analysis with the same email, it is the same account
• When signed in, the app can fetch the face-structure measurements of the analysis you saved on the web. Only a sign-in token is sent for that, and only face-structure measurements and their processing status come back — see “When you import a web diagnosis result” below

Signing out removes the sign-in from the device and stops all further transfers. “Delete account” inside the app deletes the account together with the stored height, measurements and history. Photos, closet and looks on the device remain.

Photo processing

Full-body and face photos, garment photos, and images created by the app are stored only on your device. Photo cutout, photo-based color and body measurements, and 3D try-on rendering are also performed on the device.

• Photos and garment images are not sent to an external image-generation service
• Photos and images created by the app are not uploaded to a Clad server
• You can decline photo access and use the app by entering height and measurements manually

When you import a web diagnosis result

There are two ways to import. If you paste a web diagnosis result link, the identifier carried in that link is sent to a Clad server. If you are signed in, the app instead looks up the latest analysis saved to your account, with no link. Either way, only face-structure measurements and their processing status come back. No photo is sent in this exchange, and importing by link needs no sign-in.

• Recipient: a Clad server (api.your-personal-color.com)
• When: when you paste a result link and run the import, when you tap “Import from my account” while signed in, and once right after signing in if no face structure is stored yet
• What is sent: the identifier in that link, or a sign-in token on the account path. Photos, measurements and your closet are not
• What comes back: only face-structure measurements and their processing status
• The app does not keep the pasted link or the result identifier it receives as-is — it keeps just enough of a converted form to tell whether a result is the same one
• Operations and security logs retain the source IP, request time, API route name, response status, and response size. They do not record the raw link identifier and are automatically deleted after 30 days
• If you never paste a link and never sign in, this exchange never happens

How we use it

Only to compute analysis results, organize your closet and suggest combinations, render 3D try-ons, and send notifications you have turned on. We do not use your photos for ad targeting or model training without separate consent, and we do not sell data created in the app.

Storage and deletion

Because the data lives on your device, you decide how long it is kept. You can delete photos, garments and looks individually inside the app, and deleting the app removes the data it stored. If you never signed in, Clad holds no copy of the photos, measurements, closet, or looks created by the app. Operations and security logs for web-result import are automatically deleted after 30 days as described above. Height and measurements kept in an account stay while you are signed in; delete them at once with “Delete account” in the app or ask us via the contact below.

Permissions

• Camera and photo library — to create your avatar and garment photos. The app still runs if you decline
• Notifications — only if you turn them on. They are scheduled on the device

Children

This app is not directed to children under 14. Please do not add a child's photo without the consent of a legal guardian.

Relationship to the web service

The web personal color analysis (your-personal-color.com) is a separate service with accounts and server-side storage, and it follows the web privacy policy. Sign-in is shared with the web service — the same email is the same account — but the app keeps only height and measurements in it, and the only thing it reads from the account is the face-structure measurements of analyses saved on the web. It never reads the web personal color analysis itself, photos, or member records. Without signing in, the only contact with a server is the single read described under “When you import a web diagnosis result”, and only if you paste a result link yourself.

Contact

Write to admin@lumx.im. We will ask only for the minimum needed to verify a request — please do not email photos or verification codes.

Changes

If the data we collect, the recipients of a transfer, or our retention basis change materially, we will say so in the app or on this page before the change applies and update the effective date.