Your clothes, your photos, your account.

What we keep

Everything lives in your account and nowhere else — every photo in private storage only your signed-in account can reach. The list, in full:

• Your email, and a display name if you set one.
• Your wardrobe photos, any photo of a piece's label you add (read for its brand, fabric and size, and kept with the piece so a later re-read sees it too), the wardrobe images made from them, and your mirror photos. Retake or remove any of these and the old photo is deleted (a piece's photo stays only while a shopping-list find still shows it).
• Your outfit history, wears (with what someone said about a look, if you note it), and reactions — including each look you save from a photo of what you wore: the day is read off the photo itself on your phone (its EXIF date), and only that day is kept — the rest of the photo's hidden data (the camera, the place) is stripped before upload. Such a look lands in your outfit history, not in your saved looks. Also each morning's daily pick: the look (and the one it replaced, if you said no to it or asked for something else), the weather it was chosen for, and whether you wore it. Your answer to “Does this work for today?” is kept as a reaction with whatever you said about it, and taking the answer back deletes it; a piece you say is too warm counts one step warmer from then on, and its page shows it, to change back. Each try-on keeps its conversation; when you try a look on again, the stylist reads how the earlier try-ons of that look went (your words, its replies and the verdict), and the look's page shows them to read. Everything a model made for you — a look, a piece's tags, its wardrobe image, a stylist reply, an AI outfit preview, a trip plan — also records which model made it, so the founder can compare models by what people kept and wore.
• The notes the stylist makes about how a piece sits on you — only from your mirror photos, and only ever about the garment: a short note plus a few structured facts, like where a hem lands or that a shirt strains when fully buttoned. You can read all of it on that piece's page, correct it (your correction beats the next photo) or clear it. Where a garment strains is never learned as a preference — it stays on that garment and dies with it — and the stylist never keeps or compares old observations: it knows how a piece sits now, never how that has changed.
• Any style rules you write, your thermostat setting, whether you spend your weekdays mostly indoors (on to begin with, changed on the taste page), and the line you write about styles you'd like to try.
• Your style portrait, when you ask for one, and read again on its own once ten or more pieces have come or gone since the last, at most once a month: a model reads the names and tags of every piece in your wardrobe (never the photos) and writes who you are on it. Each reading is kept with its date and piece count; only the newest is shown, and the stylist reads a short form of the newest one whenever it styles you or answers you.
• A changed version of a look — the pieces you or the stylist swapped in — kept on the look until you keep it, go back, wear it or try it on; a look made from one remembers which look it came from.
• What you do with the looks you're shown — saved for later, not for you, a piece changed, worn — with the reason you tap or type, and the pieces the look held; and, if you play "Which would you wear?", which of two of your own looks you tapped. From those, your try-on verdicts (the stylist reads one from your words, shows it under its reply, and you can change it; with how the pieces sit, as your mirror photos showed: their ease and where they land) and your wears, with anything you noted that someone said about them, the stylist keeps a short set of notes about you: a dozen lines at most, each with what it rests on. You can read them on your style page, reword any line (your wording is then kept as-is), forget a line, or add one. Bringing the notes up to date is a model call over those events, never over your photos.
• When you ask for it, a reading of your pieces: which ones your saved looks and wears rest on, and which have not yet been in a look you took, a line each. It is a model call over the names and tags of your pieces and the counts above, never the photos; each reading is kept with its date, and only the newest is shown.
• A name for every look. The stylist names the looks it suggests as it suggests them; the rest — looks you make, looks changed in a conversation, and looks from before names — are named by a smaller Anthropic model (Claude Haiku) from the names of their pieces, what the look was for and the stylist's reason, never a photo. A name you give a look is kept as you wrote it and always shown instead.
• Your shopping list, and your wishlist — fitting-room photos you chose to keep, with the tags and verdicts, in the same private storage as everything else.
• Until early November 2026, an older list of weights the app once learnt from your feedback. Nothing reads it or adds to it any more, and it is then deleted from every account.
• For the daily email, which is on for every account from signup: your timezone (from your browser, until you set it in Settings) and the hour you chose, and whether you have switched it off — kept so an off stays off. If you switch on the morning push reminder as well: that device's push address (a token your browser issues). Neither reminder keeps a location of its own: the evening preview dresses you for tomorrow's weather where Your weather in Settings says you are. Turning the push reminder off removes the push address; turning the daily email off keeps only the switch, the hour and the zone, so it stays off.
• Where your weather is read: either the town you typed, or your phone's location rounded to about a kilometre when you chose to share it. It is the one place the app keeps for you: every look is dressed for its weather, the evening preview reads tomorrow's there, and your style edit is composed for that town (a typed one — your phone's location has no name, so the edit asks for the town, and the town you give it is saved here). The app asks for it before it suggests anything. It stays until you change it in Settings or delete your account.
• Your style edits, including the one composed for you at the start of each month unless you turn that off in Settings: the same model calls as pressing the button, and the same ready note.
• A running record of your AI calls — the kind of call, the model that answered, how many tokens went in and out, what it cost us and how long it took, never the content — so your monthly usage is counted fairly.
• Anything you sent through the feedback button: that one is mail, addressed to the founder on purpose, and deleting your account doesn't unsend it — ask in the same channel and it goes too.

The export button in Settings downloads all of it; the delete button removes all of it except the last two lines above, which the list is honest about so this page never has to hedge.

Who else sees it

The styling and tagging run on AI models from Anthropic (styling, feedback, and spotting the pieces in an outfit photo), Google (Gemini reads the photo of each piece you add, and its label photo if you add one, to tag it; if Gemini can't answer, Anthropic tags it instead) and OpenAI (wardrobe images, and — if you add a reference photo — the "see it on me" outfit previews drawn onto it, with any note you type for the picture). Suggesting looks may also run on OpenAI's models instead of Anthropic's, when we compare stylists: then the same text the stylist works from — your pieces' descriptions, the stylist's notes about you, the day and the weather, never a photo — goes to OpenAI for that suggestion. Your photos are sent to these services to do that work and for nothing else — under paid API terms where they aren't used to train models. To find pieces that are alike, and to recognise a piece you already own in a new photo, two short text descriptions of each piece — one of its kind, colours, material, fit and style words, one of its physical facts alone, never its brand or photo — go to OpenAI once, which returns lists of numbers kept with the piece; they are sent again only when you change the piece. When a photo is checked against your wardrobe (what you wore, a wish, a new piece), the same kind of short description of each garment in it goes too, and is not kept. Your saved location (the rounded one, or the town you typed) goes to Open-Meteo to fetch the day's weather, and a typed town goes to Open-Meteo once to find where it is. If you pick the with-the-sun theme, your rough location is kept on your own device to work out sunset times — it never leaves your browser. When you plan a trip, the destination you type goes to Open-Meteo to look up its forecast, and the trip (destination, dates, and the packing plan) is stored in your account until you delete it. The morning nudge, if you turn it on, travels through your browser's own push service (run by your browser maker) — it carries only the nudge text, never a photo. The daily email, on for every account until you turn it off in Settings, is sent through Resend (an email delivery service): they handle your email address and the email itself — the names of the pieces in your pick and links to their catalogue plates, links that stop working after a week — and nothing else. When you make an Edit — the next four weeks composed ahead — the stylist looks up what the season is doing through Anthropic's web search; the searches carry the town under Your weather and the season, never your name, your pieces or a photo. Two of the Edit's looks are drawn onto your reference photo the same way "see it on me" is. Because composing takes minutes, we send one email to your sign-in address when an Edit is ready, whether you asked for it or it came at the start of the month — through Resend, like the nudges, carrying the dates and a link and nothing else — and a push to your phone if you turned nudges on. Very occasionally we email everyone a short note about what's new in the app — it goes through Resend the same way, and replying to any of them is enough to opt out. That's the whole list. No analytics, no trackers, no advertising, nothing sold — not to anyone, not ever.

Your wardrobe, for an assistant you choose

If you make a wardrobe key in Settings, an assistant you point at it — your own ChatGPT or Claude, say — can read your wardrobe through Trusgan: your pieces and their tags, what's in the wash, what you've worn, the looks you kept, and what the stylist knows about your taste — its notes about you, your style portrait and the pieces you build around — plus links to the catalogue drawings of your pieces that expire within a day. That is all it can do: it cannot change anything, and it never sees a photo of you — not your reference photo, not a mirror snap. Nothing goes anywhere until you make a key and hand it over yourself, and revoking it in Settings shuts the door that instant. The key is stored as a hash, so it is shown to you once and never again.

A look you share

Share, on a look, makes a private link to a page that anyone with the link can open, signed in or not. The page always shows the look's name and its pieces, by their names and catalogue images, never your own photos of them. It shows the stylist's reason, your AI outfit preview, one mirror photo you pick, and your first name only if you tick them, and nothing else: not your other looks, your wardrobe, your conversations or your email. Nothing is shared until you press "Make the link". You can change what it shows, or switch it off, at any time: switched off, the page stops working at once, and the links to its pictures lapse within the hour. The link is a long random address no one can guess, and search engines are told not to index it. When you paste it into a chat app, the app fetches a small preview picture (the look's name and its pieces' wardrobe images, never a photo of you) and may keep its copy after you switch the link off. Deleting the look, or your account, removes the link; removing the mirror photo takes it off the page.

Can the person who runs Trusgan see my things?

No — and not as a promise, as a construction. The founder's own account is refused your data at the database-policy level, the same mechanism that separates any two users. The back office he runs the product from sees totals and counts only: how many accounts exist, how many pieces and try-ons each has, and what the AI calls cost — never a photo, never a piece's name, never a conversation with the stylist, never what you wore. When something breaks on your account it sees that as counts too — how many of your pieces are missing their image, which kind of request didn't finish — and can ask the app to redo that work — remaking an image, or reading your pieces' photos again with a newer tagger — which it does on your behalf without anyone looking at the result. A re-read never overwrites a detail you set by hand. When a call to one of the AI providers fails, the app keeps the provider's error message for 30 days, with no photo, piece or account attached, so an outage gets noticed before you have to mention it. The two things about you it can see are your signup email and anything you deliberately send through the feedback button — that one is mail, addressed to him on purpose. Honesty requires one more sentence: like every small service, the database ultimately runs under an operator account that infrastructure work happens through — but there is no tool in this product that opens anyone's wardrobe, and the app login the founder actually lives in cannot.

What we never do

Your photos are never shown to other users and never used for marketing, and none is ever public unless you share a look and pick a mirror photo for its page yourself. There are no "community" features quietly sharing your wardrobe. The example outfits on our own front page are the one deliberate exception — they come from the founder's personal wardrobe, published by the founder's own hand, and that tool exists for no one else's account.

Deleting

Want it all gone? Settings has a delete button that removes every photo, every piece, your whole history and everything the stylist learned — immediately, and without asking anyone. There's a download button beside it if you'd like a copy first. If you'd rather a human did it, send a note through the in-app feedback button (or email [email protected]) and it all goes — photos, history, the stylist's notes, account.