Privacy Policy

Last updated: September 22, 2026

This Privacy Policy explains how YesOne ("we," "us," or "our") collects, uses, shares, and protects your information when you use the YesOne app. By using YesOne, you agree to this Policy. If you do not agree, please do not use the app.

Information We Collect

We collect the following categories of information:

• Account & profile: your email address, the password you set (stored in hashed form by our authentication provider), and profile details you add such as a display name, avatar, and body or sizing information you choose to enter.
• Photos & images: photos of your clothing, and — only if you use try-on or avatar features — photos that include your face and body, plus the images our AI generates for you.
• Content & social activity: outfits, posts, styling-challenge (Arena) and Spotlight submissions, chat messages, comments, likes, and the people you follow.
• Purchases: when you subscribe or buy credits, Apple and our subscription manager (RevenueCat) provide us a transaction identifier, product, and subscription status. We never receive or store your full payment-card number.
• Email order data (optional): if you use email import, the extracted order details described in "Email Import" below.
• Location (optional): if you enable weather features, your approximate coordinates, used only to fetch a local forecast.
• Usage & device data: device model, operating system, app version, IP address, in-app activity, and basic diagnostic/analytics events we use to operate, secure, and improve the app.

How We Use Your Information

We use your information to organize your closet; generate outfit suggestions, avatars, and virtual try-on results; operate social features; process your subscription and credits; keep the app safe (including content moderation and fraud prevention); provide support; improve our features; and comply with legal obligations. We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use your photos to train third-party AI models.

Photos, Face & Body (Try-On & Avatars)

To create avatars and virtual try-on images, you may upload photos that include your face and body. We use these photos only to generate the images you request, and we send them to the AI image providers listed below, which process them on our behalf to return a result. We do not use facial-recognition technology and we do not create, capture, store, or use a scan of your face or body geometry, a "faceprint," or any other biometric identifier to identify you. We do not sell your photos and do not use them for advertising. Your uploaded photos and generated images are retained only so you can access them in the app, and are permanently deleted when you delete the item or your account. These features are optional — the rest of the app works without them, and by using them you consent to this processing.

AI Processing & Third Parties We Share Data With

We share data with a limited set of service providers that process it on our behalf to run the app. They are contractually permitted to use it only to provide their service to us — not to identify you, build their own profiles of you, or serve ads. They are:

• Supabase — hosting, database, file storage, and authentication.
• OpenAI — analyzing clothing photos, powering the AI stylist and outfit rating, and (if you use email import) identifying clothing orders from extracted email text.
• Google (Gemini), fal.ai, Replicate, and Photoroom — generating virtual try-on and avatar images and cutting out / enhancing clothing photos.
• RevenueCat and Apple — processing and managing subscriptions and purchases.
• Open-Meteo — returning a local forecast from approximate coordinates (weather feature only).

The content sent to these providers is not anonymized first — it is sent as needed to perform the feature you requested. We may also disclose information to other users (for content you choose to share publicly), to comply with law or protect rights and safety, and in connection with a business transfer such as a merger or acquisition.

Email Import (Optional)

If you choose to import clothing from your order emails, you connect your mailbox using an app-specific password over IMAP. That password is stored only on your device (in the device keychain) and is never sent to our servers. Your emails are read on your device to find clothing orders; only the extracted order details (such as sender, subject, and a short snippet of order text and product images) are sent to our server and to OpenAI to identify items. We do not store the full contents of your emails, and we do not use email data for advertising or to train AI models. This feature is entirely optional and the app works fully without it. You can disconnect at any time and revoke the app-specific password in your email provider's settings.

Location (Optional)

If you enable weather-based outfit suggestions, the app requests your device location and sends your approximate coordinates to Open-Meteo to fetch the local forecast. Your coordinates are used only to retrieve weather and are not stored on our servers or tied to your identity. This is optional.

Subscriptions & Payments

Purchases and subscriptions are processed by Apple. We use RevenueCat to manage subscription status, which receives a purchase identifier and transaction details to keep your plan and credits in sync. We never receive or store your full payment-card details.

Social & Public Content

Content you choose to share publicly — such as outfit posts, Arena and Spotlight submissions, comments, and your public profile — is visible to other users. Once shared publicly, others may view or copy it, so please do not post anything you would not want shared. You can delete your public content or your account at any time.

How We Share Information

We do not sell your personal information, we do not share it with data brokers, and we do not use third-party advertising cookies, tracking pixels, or ad SDKs. We share data only with the service providers listed above, with other users for content you make public, for legal and safety reasons, and in a business transfer.

Security

Your data is stored on secure cloud infrastructure (Supabase) using industry-standard encryption in transit and at rest. We use access controls and store email credentials only in your device keychain. No method of transmission or storage is 100% secure, but we work to protect your information and ask that you keep your login credentials safe.

Data Retention & Deletion

We keep each category of data only as long as needed to provide the app to you. You can permanently delete your account and associated data at any time from within the app (Settings → Account → Delete Account). Deletion removes your profile, photos, closet, posts, messages, and other account data from our systems and signs you out. Residual copies may persist briefly in backups. We may retain limited records where required by law or to prevent abuse. If you ask us to delete your data by email, we will do so within 30 days.

International Users & Data Transfer

YesOne is operated from, and your information is processed and stored in, the United States, where privacy laws may differ from those in your country. By using the app you understand that your information will be transferred to and processed in the United States and other countries where our service providers operate.

Your Privacy Rights

Depending on where you live, you may have the right to access a copy of your personal information, correct it, delete it, restrict or object to certain processing, receive it in a portable format, and withdraw consent. If you are in California (CCPA/CPRA), you have the right to know, delete, and correct your information, to opt out of its sale or sharing (we do not sell or share it), to limit use of sensitive information, and not to be discriminated against for exercising these rights. If you are in the EU or UK (GDPR), we process your data based on your consent, the performance of our contract with you, our legitimate interests, and legal obligations, and you may lodge a complaint with your local data-protection authority. To exercise any right, use in-app account deletion or email us below; we will respond as required by law.

Children's Privacy

YesOne is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us information, contact us and we will delete it.

Push Notifications

If you allow notifications, we may send you push notifications about activity and features. You can turn these off at any time in your device settings.

Changes to This Policy

We may update this Policy from time to time. When we do, we will update the "Last updated" date above and, for material changes, provide reasonable notice in the app. Your continued use of YesOne after changes take effect means you accept the updated Policy.

Contact Us

For privacy questions or requests, email us at support@yesoneapp.com. YesOne is operated by Prolinx Technology Inc.