Privacy, in plain sight.

Overview

Closet is a personal wardrobe manager. It does not require a Closet account, operate an advertising or analytics service, sell personal data, or use data for cross-app tracking.

Wardrobe data is stored on the user's device and, when available, in the user's private iCloud storage. Some features contact Apple, a website selected by the user, or an AI provider selected by the user as described below.

Wardrobe content

Content a user creates or imports can include:

• Item names, brands, categories, sizes, colors, prices, purchase details, care information, notes, and source links
• Clothing, receipt, and wear-log photos
• Tags, custom categories, outfits, wear history, and wishlist records
• Backups and exported files

The app stores this content in its private local container using SwiftData and file storage. With iCloud available, SwiftData records and eligible assets synchronize through Apple's CloudKit private database.

Backups and exports are handled as follows:

• Automatic backups and Create Backup Now: saved to Closet's own folder in the user's iCloud Drive when iCloud Drive is available, otherwise on the device in Closet's Documents/Closet Backups folder. Backups there beyond the Maximum Backups setting on that device are removed, oldest first.
• Exports: written on the device first, then shared to wherever the user chooses in the share sheet or document picker.
• Emergency backups: if iCloud asks Closet to reset its local data, Closet first saves a backup on the device in Documents/Closet Backups.

Settings and credentials

App preferences are stored in UserDefaults on each device and are not synced, with these exceptions:

• My Colors (the user's saved color names) sync through Apple's iCloud key-value store.
• Theme: the chosen app theme stays on each device and does not sync.
• AI provider: while Sync AI Provider and Key is on (the default), the selected AI provider syncs through Apple's iCloud key-value store and that provider's API key through iCloud Keychain. Turning it off keeps the keys on the device and stops publishing the provider. The AI feature toggles, cloud AI consent decisions, and AI Stylist chat history are not synced.

Provider secrets are stored in Keychain; Closet does not commit them to the repository or send them through a Closet-operated server.

Optional AI features

Closet can process selected item text, wardrobe context, or images with one of these provider types:

• Apple Intelligence: Requests use Apple's system frameworks and are subject to Apple's platform behavior and privacy terms.
• Cloud providers such as OpenAI, Anthropic Claude, Grok (xAI), or a macOS custom endpoint: Available with Closet Pro and the user's own API key, and not offered on the China mainland storefront. Request content is sent directly from the device to the configured provider. Closet does not proxy it through a Closet-operated server. Custom endpoints are not available in the iOS app.

Before the first text or image transfer to a cloud provider, Closet names the destination, describes the data categories and purposes, explains provider retention and deletion responsibility, and asks the user to choose Allow & Continue or Don't Allow. Consent is local to the provider, custom endpoint, and disclosure version. Changing the provider or custom endpoint requires a separate decision. A declined request sends nothing. Consent can be reviewed or revoked under Settings → AI Features → Cloud AI Privacy; revocation blocks future transfers but cannot delete copies already retained by a provider.

Depending on the enabled feature and the current request, cloud AI content can include:

• Prompts, chat history, item names, brands, categories, colors, notes, and tags
• Wardrobe inventory, saved outfits, wear history, purchase details, prices, and total wardrobe value
• Selected item photos, order or receipt screenshots, and care-label images

Most cloud AI transfers follow an explicit AI action. An enabled photo feature can also request a cloud enhancement after the user selects or scans an image, such as smart import, color naming, or uncertain care-label recognition. The same consent boundary runs before these automatic enhancements, so selecting an image alone never authorizes a cloud transfer.

A user-supplied API key can associate a request with the user's provider account. Cloud providers process and may retain requests and ordinary network metadata under their own terms and privacy policies. A custom endpoint's operator controls its security, logging, retention, and deletion. Closet cannot verify or delete provider-held copies. See OpenAI's privacy policy Anthropic's privacy policy, and xAI's API data-handling FAQ.

The active provider, feature toggles, and sharing controls are available under Settings → AI Features / AI Provider.

Weather and location

If the user enables weather-based outfit suggestions, Closet requests location access and uses the resulting location with Apple's WeatherKit service to retrieve current conditions. Closet keeps the location and current weather state on the device, does not send them to a Closet-operated server, and does not use them for advertising or tracking. Apple handles WeatherKit service data under Apple's terms and privacy practices.

Web import and price checks

When a user imports a product URL or asks the app to check a wishlist price, the device contacts that website. The website can receive standard request information such as IP address, headers, cookies, and the requested URL under the website's own privacy policy. Parsed product data is stored with the user's wardrobe; Closet does not operate a browsing-history service.

The optional Amazon order import opens amazon.com inside a Closet-owned web view that uses its own local website-data profile. The user signs in directly with Amazon; Closet never sees, stores, or transmits the password, and the resulting cookies stay on the device in that profile until the user chooses Clear Amazon Sign-in in Settings. Closet reads only the order pages the user opens, extracts item titles, prices, dates, product identifiers, and product image links locally, and presents them for review before anything is saved. Product images are downloaded without the Amazon session cookies. Nothing from the order pages is sent to a Closet server.

The optional Safari and Chrome extensions run only when the user activates them on a page. They read that active page to extract product details locally, then open a local Closet review link only after the user taps Review in Closet. They do not request browsing-history or all-sites permission, upload the extracted payload to a Closet server, or save an item without native review.

Currency conversion

Closet retrieves public exchange rates from Frankfurter to display totals across currencies. This request does not include wardrobe records or item prices; the service receives ordinary network request information.

Purchases

The optional Closet Pro unlock is sold through Apple's StoreKit. Apple processes payment and transaction information. Closet receives product and entitlement status needed to present, unlock, and restore the purchase; Closet does not receive full payment-card details or operate a payment server.

Diagnostics and dependencies

The release app does not include a third-party analytics, advertising, or crash-reporting SDK. Diagnostic information generated by Closet remains on the device unless the user deliberately shares an export or diagnostic report.

Closet includes libraries for UI, local AI/model execution, networking support, and Apple-platform integration. Their manifests and behavior are reviewed as part of each release. If a future dependency begins collecting data, this policy and the App Store privacy disclosures must be updated before that version is submitted.

Data choices and deletion

Users can edit or delete individual records, clear caches, export or restore backups, disable optional AI features or AI provider sync, and revoke future cloud AI sharing in the app. Deleting the app removes its local container. Data already synchronized to iCloud is managed through the user's iCloud account and Apple's retention behavior; files exported by the user remain wherever the user saved or shared them. Revoking cloud AI consent or deleting Closet does not delete requests already retained by OpenAI, Anthropic, or a custom endpoint operator; those copies must be managed through that provider or operator.

Children

Closet is not directed to children under 13 and does not knowingly operate a service that collects children's data.

Changes and contact

Material changes will update the date above.

Questions: chen.he@icloud.com