Privacy Policy

1. Who operates LAYR

LAYR is operated by Brue ("LAYR," "we," "us," or "our"). You can contact the operator and privacy team at support@brue.cc. That email address is our current contact address for privacy, account, and legal requests.

2. Data covered by this policy

Account and profile data

We may process your email address, name, authentication identifiers, account settings, style profile, fit and color preferences, and the information you provide when you contact support. You can sign in with Apple, Google, or a one-time email code; Apple and Google share only the identity details you approve.

Closet and source images

LAYR processes garment images, background-free Clean Cut-Outs, outfit photos, selected merchant images, and related facts such as category, color, source, ownership signal, and import status. Camera and Photos preparation is designed to remove the background on your device; the original Camera or Photos image is not uploaded in that flow. The prepared Clean Cut-Out and minimal provenance are sent to LAYR so the item can be labelled and saved.

Outfit Import needs the source outfit photo to separate multiple garments. If you use it, the source photo is uploaded to LAYR and may remain in LAYR storage with the scan or import record. The current service does not automatically delete Outfit Import source photos within 24 hours. Contact us to request deletion if you do not have an available in-app control. Clean Cut-Outs for saved or reviewable garments may be retained as part of your Closet or Import Inbox.

Photo library scan and face matching

During onboarding you can let LAYR find your clothes in your photo library. You first take a selfie or choose one clear photo of your face. LAYR then checks up to your 2,000 newest photos you allow it to access, or only the photos you select if you grant limited access. Face detection, face matching, and garment cutting run entirely on your iPhone using models bundled with the app. Your face photo, the face measurements used for matching, and the photos it checks are not uploaded to LAYR or to any AI provider during the scan. If you later create an avatar, LAYR can reuse the same face photo, and it is then handled as described under Avatar, try-on, and selfie features. LAYR does not use face data for advertising, and does not use it to identify anyone other than you. Only the garment cutouts the scan saves become Closet Items in your account. You can skip the scan, pause it, or stop it at any time, and you can change photo access in iOS Settings.

The on-device clothing model uses Google's MediaPipe software, which may send performance and usage metrics (not your photos) to Google.

Avatar, try-on, and selfie features

If you create an avatar or use AI Try-On, the face and body photos you provide, your reusable avatar, and the selected outfit are sent to Google Gemini to create the preview. Those photos, the avatar, and completed previews are saved to your account until you delete them or your account. Color Analysis and Outfit Check send the selfie or outfit photo you choose to Google Gemini for analysis.

Location, voice, and support chat

If you allow location access, LAYR uses your approximate location on your device to request the weather from Apple Weather. LAYR does not store your location. Voice dictation in the stylist chat uses Apple speech recognition, and you review the text before sending it. In-app support chat is provided by Crisp, which receives the messages, images, and contact details you send.

Connected sources and website capture

If an order-email feature is available and you choose to connect or forward messages, LAYR processes only messages selected by the supported rule or by you. We keep normalized clothing and purchase facts needed for your Closet. Connected order-email import is not currently available. Before it ships, we will update this policy with the verified handling of raw bodies and attachments; we do not currently promise automatic deletion within 24 hours. We do not intend to keep unrelated mailbox content.

Website capture sends the product image you select, its source URL, and product facts. It does not need or retain browser cookies, passwords, login sessions, or a durable copy of the whole webpage.

AI inputs and outputs

We process the minimum garment image, outfit evidence, preferences, and prompt context needed to label clothes, extract garments, generate outfit suggestions, answer stylist chat messages, or perform a user-requested Prettify. LAYR asks for your permission before it first sends your photos or messages to an AI provider, and you can turn this off in Privacy & Data. We also process generated suggestions, validation results, request status, model identifiers, and cost and reliability telemetry.

Purchases and AI Credits

Apple handles App Store payment details. LAYR and RevenueCat receive purchase and subscription facts such as product, entitlement, renewal, cancellation, refund, transaction, environment, and a LAYR user identifier. LAYR keeps a server-authoritative ledger of AI Credit grants, reservations, uses, releases, refunds, and reconciliation events. We do not receive your full payment-card number from Apple.

Analytics and technical data

LAYR uses PostHog to understand onboarding, feature use, app lifecycle, screen views, and interactions. Analytics may include event names, coarse device and app information, identifiers, timestamps, and properties such as the intake source or outcome. Server logs may include request identifiers, timestamps, error details, IP-derived security information, and operational metrics. We do not use this data to sell targeted advertising.

3. How we use data

• Provide, personalize, sync, and improve your Closet and outfit features.
• Process imports and AI requests and show their status.
• Authenticate accounts, prevent duplicate imports, and protect the service.
• Manage subscriptions, AI Credits, restores, refunds, and support.
• Measure reliability and product use and diagnose failures.
• Comply with law and enforce our Terms of Use.

4. Service providers and sharing

We share data only as needed to operate a feature, protect users, complete a transaction, comply with law, or support a business transfer. Current or planned production services include:

• Cloudflare for the Worker API, database, file storage, networking, and security.
• Google Gemini for garment labelling, outfit suggestions, stylist chat, Prettify, Color Analysis, and generated images including AI Try-On.
• fal.ai for background removal, Cloudflare Workers AI as a fallback when needed, and OpenAI or Replicate for some outfit import paths.
• Crisp for in-app support chat.
• Apple for Sign in with Apple, App Store payments, weather, and speech recognition, and Google for Google Sign-In and the MediaPipe metrics described above.
• RevenueCat for subscription and entitlement processing, with Apple as the App Store payment provider.
• PostHog for product analytics when analytics is configured in the app.
• Microsoft only if you choose a supported Outlook connection when that feature is available.

A provider receives only the artifact and context needed for its task. Provider systems may keep limited security, abuse-monitoring, or service records under their own terms even after LAYR deletes its copy. Retention can differ by provider, account configuration, and legal requirements. We do not promise that every provider deletes every record immediately.

We do not sell your personal data. We do not share your personal data for cross-context behavioral advertising. If those practices change, we will update this policy and provide controls required by law.

5. Retention and deletion

• Prepared Camera or Photos work waiting offline is stored locally in encrypted form for no more than seven days, unless you remove it sooner.
• Current Outfit Import source photos can remain in LAYR storage with the associated scan or import record. They are not currently subject to an automatic 24-hour purge. You can contact us to request deletion.
• Deleting a Closet Item in the current service marks it deleted and excludes it from active use, but related server-side images and provenance may remain until we process an account or data-deletion request. The planned 30-day recovery window and automatic post-window artifact purge are not currently available, and this policy does not promise that they occur today.
• A discarded Import Inbox candidate is deleted after the brief undo period.
• Non-content records may remain where needed for billing integrity, fraud and abuse prevention, exact-import deduplication, security, backups, or law.

Backup and log copies age out on operational schedules and may not disappear at the same moment as active records. We limit their use to recovery, security, and legal purposes.

6. Your choices

Depending on the available app version, you can remove queued work, discard Import Inbox candidates, mark Closet Items deleted, restore purchases, and control available analytics settings. Closet Item recovery and connected-source controls are not currently available. You can contact us to access, correct, export, or delete personal data associated with your account.

Delete your account

Use the in-app account deletion control when available, or email support@brue.cc from your account address. We may need to verify your identity. Account deletion removes or de-identifies content unless we must retain limited non-content records for billing, fraud prevention, security, dispute resolution, or law. Deleting LAYR does not cancel an Apple subscription; manage that subscription in your Apple Account settings.

7. Your privacy rights

Subject to your location and applicable law, you may have rights to know about, access, correct, delete, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent where consent is the basis for processing. You may also have the right to appeal a decision or complain to your local data protection authority. We will not discriminate against you for exercising a privacy right.

8. Security and international processing

We use administrative, technical, and organizational safeguards appropriate to the service, including authenticated access, encrypted transport, scoped credentials, and separation of sandbox and production purchase events. No service can guarantee absolute security. Providers may process data in countries other than yours, subject to their safeguards and applicable transfer rules.

9. Children

LAYR is not directed to children under 13. If local law requires a higher age to consent to data processing, a parent or guardian must authorize use. Contact us if you believe a child provided personal data without required permission.

10. Changes to this policy

We may update this policy as LAYR, its providers, or legal requirements change. We will publish the revised date here and provide additional notice when a material change requires it. Features described as conditional or not yet available are governed by this policy when they ship.