Privacy policy for HereMyFit
Last updated: 24 October 2026
HereMyFit is an app for organising your wardrobe. You add your clothes, put them in closets, combine them into outfits ("fits"), plan what to wear and, if you want, share things with other people. This policy explains which personal data we use for that, why, who else gets to see it, how long we keep it and what your rights are.
1. Who we are
The controller (in Dutch: "verwerkingsverantwoordelijke") for your personal data is:
HereMyFit Email: heremyfit@acdaling.me
HereMyFit is run by one person. We have not appointed a data protection officer, because the law does not require one for a business like ours.
2. What data we use, and why
We only use the data below. For every purpose we name the legal basis from article 6 of the GDPR.
2.1 Your account
When you sign in with Apple or Google, our login provider Clerk creates an account for you. We receive and store:
- a user ID (a random code made by Clerk)
- your name, as given by Apple or Google
- your email address (with Apple, this can be a "hide my email" relay address)
- your profile picture, if Apple or Google provides one
- whether you finished the welcome steps
Clerk also keeps technical data about your sessions, such as sign-in times, IP address and device or browser type, to keep your account secure.
Why: to create your account, sign you in and keep your data linked to you. Legal basis: performance of our contract with you (art. 6(1)(b)). Security logging at Clerk is based on our legitimate interest in protecting accounts (art. 6(1)(f)).
2.2 Your profile
You can add a display name, a short bio and a social media handle. Your display name starts out as the name from Apple or Google. You can change it at any time in the app.
Why: to show your profile, and to show your name next to your outfit if you take part in Outfit of the Day (see 2.6). Legal basis: contract (art. 6(1)(b)).
2.3 Your wardrobe: closets, items, outfits, plans and photos
This is the main content of the app:
- closets (name, description, cover photo, private or public setting)
- clothing items (name, description, category, colour, materials, size, style, fit)
- outfits (which items go together and how you arranged them)
- your outfit calendar (which outfit you planned for which date, and whether you wore it)
- photos of your clothes, including cut-outs made by background removal
- items and outfits you saved from other people's share links
We keep your closets on your phone as well, so the app works offline. They are synced with our servers so they appear on all your devices.
Why: this is what the app does. Legal basis: contract (art. 6(1)(b)).
Photos can show more than clothing, for example your face, your home or other people. Please keep that in mind when you upload. We do not analyse photos to recognise people.
2.4 Photo scan and background removal
You can take or choose a photo of someone wearing an outfit. The app then sends a smaller copy of that photo to our own image server. The server finds the pieces of clothing, cuts them out and compares them with items already in your wardrobe. The original photo is not stored. Only the cut-outs you choose to add are saved, as normal item photos. The same server removes backgrounds from item photos when you ask for it.
Why: to add items and outfits faster. Legal basis: contract (art. 6(1)(b)). You start every scan yourself.
2.5 Importing an item from a shop link
You can paste or share a link to a product page, for example on Vinted, Marktplaats or another web shop. Your phone opens that page, like a browser would, and reads the product name, description, size, material and photos. You can then save it as an item. Photos imported this way belong to the seller or shop. We keep them private: they are never shown in share links or in Outfit of the Day.
Why: to add an item you bought second-hand without typing everything in. Legal basis: contract (art. 6(1)(b)).
2.6 Sharing and Outfit of the Day
Share links. You can create a link to an item or an outfit. Anyone who has that link can see it without an account: names, descriptions, details and your own photos (never imported shop photos). Links expire after 30 days by default (you can choose up to 365 days), and you can delete a link at any time. We count how often a link is opened and when it was last opened. We do not record who opened it.
Public closets. A closet is public unless you make it private. Being public on its own does not show it to anyone. It only matters if you share it or put it forward for Outfit of the Day.
Outfit of the Day. This is opt-in. You take part only if you switch it on in your profile and for a specific public closet. Each day we pick a shortlist of outfits from those closets. Other signed-in users can then see the outfit, its photos, the closet name, your display name and your social handle, and they can vote. Each user gets one vote per day. Vote totals are shown only to people who already voted. We do not show other users who voted for what. The outfit with the most votes becomes the next day's Outfit of the Day. You can take your outfit off the shortlist or off the day's pick at any time, and switch Outfit of the Day off.
Reports and blocks. If you report an outfit, we store who reported it, whose outfit it is, the reason you picked and when, so we can review it. The person you report is not told who reported them. If you block someone, we store that you blocked them, so neither of you sees the other's outfits.
Why: to let you show your outfits to others when you choose to. Legal basis: contract (art. 6(1)(b)), because you choose to use these features. For Outfit of the Day, you also give consent by switching it on (art. 6(1)(a)), and you can withdraw it at any time by switching it off.
2.7 Your location and the weather
If you allow it, the app reads your phone's approximate location to show the weather in the outfit calendar, on the home screen card and in the widget. The app asks for permission the first time you tap to see the weather there, and only while you use the app (never in the background). iPhone shares an approximate location by default. Before anything leaves your phone, the app rounds the coordinates to about 1 km.
The app sends those rounded coordinates to our server, which uses them to get a forecast from Apple WeatherKit. Apple receives only the coordinates from our server, not your name, account or your phone's IP address. We do not save your location in your account or database. Our server keeps the forecast in memory for up to 30 minutes so nearby requests can share it; that copy is not linked to you. Where we show Apple Weather data, we show Apple's attribution and a link to Apple's legal page. The forecast is available to everyone on the free plan. We do not sell Apple Weather data or put it behind a paywall.
You can turn location access off at any time in your phone's Settings. The app then shows no weather; everything else keeps working.
Why: showing the weather and weather-based outfit suggestions. Legal basis: contract (art. 6(1)(b)). Location access is optional and needs your permission on the phone.
2.8 Notifications
We create in-app notifications for Outfit of the Day events (your outfit was shortlisted, your outfit won, the outfit you voted for won). These arrive live through our own real-time server. If you allow push notifications on your phone, we also store your device's push token, the platform (iOS) and your app language, and send pushes through Expo's push service and Apple Push Notification service. You choose which pushes you get in the app. The daily "voting is open" reminder is off unless you turn it on.
Why: to tell you about activity you care about. Legal basis: contract (art. 6(1)(b)) for in-app notifications. For push notifications, your consent through the iOS permission prompt and the in-app switches (art. 6(1)(a)).
2.9 Premium subscription and payments
If you buy Premium, the payment is handled by Stripe. We never see or store your card details. We store your Stripe customer ID, subscription ID, plan, status, billing cycle, trial end date and the end of the current period. Stripe stores your payment details and billing information.
Why: to give you Premium and handle billing. Legal basis: contract (art. 6(1)(b)). We keep invoices and payment records because tax law requires it (art. 6(1)(c)).
2.10 Crash and error reports
The app, website and our server send error reports to Sentry so we can find and fix bugs. A report contains technical data: what went wrong, the app version, device model, operating system and the steps just before the error. It also contains your user ID (not your name or email). We do not send your IP address. Only when an error happens in the app, Sentry also records a short replay of the screens around it, with all text and images hidden. If you send feedback through the in-app feedback form, Sentry receives your message and the name and email you enter.
Why: to keep the app working and secure. Legal basis: our legitimate interest in a stable, working app (art. 6(1)(f)). We weighed this against your interests: reports are used only for fixing problems, are limited to technical data, and are deleted after [SENTRY RETENTION, e.g. 90 days].
2.11 Server logs and security
Our servers and reverse proxy keep technical logs (IP address, time, requested address, error messages) to keep the service secure and to fix problems. We also count requests per IP address for a short time to block abuse, for example on public share links.
Legal basis: legitimate interest in security (art. 6(1)(f)).
2.12 Data on your phone
The app stores some data on your phone: your closets (for offline use), a cache of recently loaded data, your sign-in session (in the iOS keychain) and the data for the "Today's outfit" widget and Siri shortcuts. This data stays on your device and is removed when you delete the app.
3. What we do not do
- We do not sell your data.
- We do not use your data for advertising, and there are no advertising or tracking tools in the app.
- We do not track you across other apps or websites.
- We do not make automated decisions that have legal or similarly significant effects on you. The Outfit of the Day shortlist is chosen by a simple rotation and by votes. It has no consequences beyond the feature itself.
4. Who receives your data
We use the following service providers ("processors"). They may only use your data on our instructions and under a data processing agreement.
| Provider | What for | Data | Where | Safeguard for transfer outside the EU |
|---|---|---|---|---|
| Contabo GmbH | Hosting of our servers and database | All data in sections 2.1 to 2.11 | [HOSTING REGION, e.g. Germany] | Not needed if in the EU |
| Backblaze, Inc. | Storage of photos; encrypted backups | Photos; encrypted database backups | [B2 REGION, e.g. EU Central (Amsterdam)] | [If EU region: no transfer. Otherwise: EU-US Data Privacy Framework / SCCs] |
| Clerk, Inc. | Sign-in and account management | Account data, session and device data | United States | EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs) [VERIFY] |
| Apple | Sign in with Apple; push notifications (APNs); weather forecasts (WeatherKit, intended for launch) | Sign-in data; push token and message; approximate coordinates (rounded to about 1 km) | United States / worldwide | Apple's EU entity and SCCs [VERIFY] |
| Sign in with Google (only if you use it) | Sign-in data | United States | EU-US Data Privacy Framework [VERIFY] | |
| Expo (650 Industries, Inc.) | Sending push notifications | Push token, notification text | United States | Standard Contractual Clauses [VERIFY] |
| Functional Software, Inc. (Sentry) | Crash and error reports | User ID, device data, error data, masked replays of errors | [SENTRY REGION: EU (Germany) or United States] | [If US: EU-US Data Privacy Framework / SCCs] |
| Stripe Payments Europe, Ltd. | Payments for Premium | Payment and billing data, user ID | Ireland, with transfers to Stripe, Inc. (US) | EU-US Data Privacy Framework and SCCs |
Stripe is partly an independent controller for payment data, for example for fraud prevention and its own legal obligations. Apple and Google are independent controllers for your Apple or Google account.
Other users only see what you share: share-link content (with anyone who has the link) and Outfit of the Day content (with signed-in users), as described in section 2.6.
We may also have to give data to authorities if the law requires it.
5. How long we keep your data
| Data | How long |
|---|---|
| Account, profile, wardrobe, photos, outfit plans | Until you delete it or delete your account |
| Share links | Until you delete them. A link stops working when it expires; the expired link record stays until you delete it or your account |
| In-app notifications | Until you delete them or your account |
| Outfit of the Day votes, shortlist entries and daily picks | 12 months |
| Reports | 12 months after we handled the report; reports about you are deleted with your account |
| Blocks | Until you unblock the person, or either account is deleted |
| Push tokens | Until you sign out, the token stops working, or you delete your account |
| Subscription records | As long as you have an account; invoices and payment records for 7 years (Dutch tax law) |
| Crash and error reports (Sentry) | [SENTRY RETENTION, e.g. 90 days] |
| Server logs | 30 days for Laravel logs; reverse-proxy retention depends on the production configuration |
| Backups | Up to 6 months (daily backups kept 7 days, weekly 4 weeks, monthly 6 months) |
| Photo scan photos | Not stored |
When you delete your account, we delete your account and wardrobe data from our live systems straight away. Copies in backups disappear automatically within 6 months. We do not restore deleted accounts from backups.
6. How we protect your data
- All connections use HTTPS (TLS).
- Every request to our API needs a valid sign-in token. Access to each item, closet and photo is checked against its owner.
- Photos are not public. They are served through links that stop working after a few minutes.
- The database is only reachable from the server itself, not from the internet.
- Backups are encrypted before they leave the server.
- Sign-in sessions are stored in the iOS keychain on your phone.
- Only the owner of HereMyFit has access to the servers.
If a data breach happens that is likely to put your rights at risk, we report it to the Autoriteit Persoonsgegevens within 72 hours and, where the law requires, tell you.
7. Your rights
Under the GDPR you have the right to:
- access the data we have about you;
- correct data that is wrong;
- delete your data;
- restrict our use of your data in some cases;
- data portability: receive your data in a common, machine-readable format;
- object to use based on legitimate interest (sections 2.10 and 2.11);
- withdraw consent at any time, without affecting what we did before.
How to use them:
- Change your data: edit your profile, closets, items and outfits in the app.
- Delete your account: in the app, go to Profile and tap "Delete account". This deletes your account, closets, items, outfits, photos, outfit plans, share links and notifications.
- Stop Outfit of the Day or push notifications: switch them off in your profile or in iOS Settings.
- Everything else (a copy of your data, objection, questions): email heremyfit@acdaling.me. We answer within one month. We may ask you to confirm the request from the email address linked to your account.
If you are not happy with how we handle your data, please contact us first. You also have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in the EU country where you live.
8. Children
HereMyFit is meant for people aged 16 and older. If you are younger than 16, please do not use the app. If we learn that a child under 16 has an account, we delete it.
9. Changes to this policy
We may update this policy, for example when we add a feature or change providers. The date at the top shows the latest version. If a change matters for you, we tell you in the app before it takes effect.
10. Contact
Questions about privacy? Email heremyfit@acdaling.me.