Privacy Policy

1. Who operates LAYR

LAYR is operated by Brue ("LAYR," "we," "us," or "our"). You can contact the operator and privacy team at hey@brue.cc. That email address is our current contact address for privacy, account, and legal requests.

2. Data covered by this policy

Account and profile data

We may process your email address, name, authentication identifiers, account settings, style profile, fit and color preferences, and the information you provide when you contact support.

Closet and source images

LAYR processes garment images, background-free Clean Cut-Outs, outfit photos, selected merchant images, and related facts such as category, color, source, ownership signal, and import status. Camera and Photos preparation is designed to remove the background on your device; the original Camera or Photos image is not uploaded in that flow. The prepared Clean Cut-Out and minimal provenance are sent to LAYR so the item can be labelled and saved.

Outfit Import needs the source outfit photo to separate multiple garments. If you use it, the source photo is uploaded to LAYR and may remain in LAYR storage with the scan or import record. The current service does not automatically delete Outfit Import source photos within 24 hours. Contact us to request deletion if you do not have an available in-app control. Clean Cut-Outs for saved or reviewable garments may be retained as part of your Closet or Import Inbox.

Connected sources and website capture

If an order-email feature is available and you choose to connect or forward messages, LAYR processes only messages selected by the supported rule or by you. We keep normalized clothing and purchase facts needed for your Closet. Connected order-email import is not currently available. Before it ships, we will update this policy with the verified handling of raw bodies and attachments; we do not currently promise automatic deletion within 24 hours. We do not intend to keep unrelated mailbox content.

Website capture sends the product image you select, its source URL, and product facts. It does not need or retain browser cookies, passwords, login sessions, or a durable copy of the whole webpage.

AI inputs and outputs

We process the minimum garment image, outfit evidence, preferences, and prompt context needed to label clothes, extract garments, generate outfit suggestions, or perform a user-requested AI Enhance. We also process generated suggestions, validation results, request status, model identifiers, and cost and reliability telemetry.

Purchases and AI Credits

Apple handles App Store payment details. LAYR and RevenueCat receive purchase and subscription facts such as product, entitlement, renewal, cancellation, refund, transaction, environment, and a LAYR user identifier. LAYR keeps a server-authoritative ledger of AI Credit grants, reservations, uses, releases, refunds, and reconciliation events. We do not receive your full payment-card number from Apple.

Analytics and technical data

LAYR uses PostHog to understand onboarding, feature use, app lifecycle, screen views, and interactions. Analytics may include event names, coarse device and app information, identifiers, timestamps, and properties such as the intake source or outcome. Server logs may include request identifiers, timestamps, error details, IP-derived security information, and operational metrics. We do not use this data to sell targeted advertising.

3. How we use data

• Provide, personalize, sync, and improve your Closet and outfit features.
• Process imports and AI requests and show their status.
• Authenticate accounts, prevent duplicate imports, and protect the service.
• Manage subscriptions, AI Credits, restores, refunds, and support.
• Measure reliability and product use and diagnose failures.
• Comply with law and enforce our Terms of Use.

4. Service providers and sharing

We share data only as needed to operate a feature, protect users, complete a transaction, comply with law, or support a business transfer. Current or planned production services include:

• Cloudflare for the Worker API, database, file storage, networking, and security.
• OpenAI for garment understanding, outfit generation, and supported image features.
• Replicate and fal.ai for supported garment segmentation or background-removal paths.
• RevenueCat for subscription and entitlement processing, with Apple as the App Store payment provider.
• PostHog for product analytics when analytics is configured in the app.
• Google or Microsoft only if you choose a supported Gmail or Outlook connection.

A provider receives only the artifact and context needed for its task. Provider systems may keep limited security, abuse-monitoring, or service records under their own terms even after LAYR deletes its copy. Retention can differ by provider, account configuration, and legal requirements. We do not promise that every provider deletes every record immediately.

We do not sell your personal data. We do not share your personal data for cross-context behavioral advertising. If those practices change, we will update this policy and provide controls required by law.

5. Retention and deletion

• Prepared Camera or Photos work waiting offline is stored locally in encrypted form for no more than seven days, unless you remove it sooner.
• Current Outfit Import source photos can remain in LAYR storage with the associated scan or import record. They are not currently subject to an automatic 24-hour purge. You can contact us to request deletion.
• Deleting a Closet Item in the current service marks it deleted and excludes it from active use, but related server-side images and provenance may remain until we process an account or data-deletion request. The planned 30-day recovery window and automatic post-window artifact purge are not currently available, and this policy does not promise that they occur today.
• A discarded Import Inbox candidate is deleted after the brief undo period.
• Non-content records may remain where needed for billing integrity, fraud and abuse prevention, exact-import deduplication, security, backups, or law.

Backup and log copies age out on operational schedules and may not disappear at the same moment as active records. We limit their use to recovery, security, and legal purposes.

6. Your choices

Depending on the available app version, you can remove queued work, discard Import Inbox candidates, mark Closet Items deleted, restore purchases, and control available analytics settings. Closet Item recovery and connected-source controls are not currently available. You can contact us to access, correct, export, or delete personal data associated with your account.

Delete your account

Use the in-app account deletion control when available, or email hey@brue.cc from your account address. We may need to verify your identity. Account deletion removes or de-identifies content unless we must retain limited non-content records for billing, fraud prevention, security, dispute resolution, or law. Deleting LAYR does not cancel an Apple subscription; manage that subscription in your Apple Account settings.

7. Your privacy rights

Subject to your location and applicable law, you may have rights to know about, access, correct, delete, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent where consent is the basis for processing. You may also have the right to appeal a decision or complain to your local data protection authority. We will not discriminate against you for exercising a privacy right.

8. Security and international processing

We use administrative, technical, and organizational safeguards appropriate to the service, including authenticated access, encrypted transport, scoped credentials, and separation of sandbox and production purchase events. No service can guarantee absolute security. Providers may process data in countries other than yours, subject to their safeguards and applicable transfer rules.

9. Children

LAYR is not directed to children under 13. If local law requires a higher age to consent to data processing, a parent or guardian must authorize use. Contact us if you believe a child provided personal data without required permission.

10. Changes to this policy

We may update this policy as LAYR, its providers, or legal requirements change. We will publish the revised date here and provide additional notice when a material change requires it. Features described as conditional or not yet available are governed by this policy when they ship.