Your clothes, your photos, your account.

What we keep

Everything lives in your account and nowhere else — every photo in private storage only your signed-in account can reach. The list, in full:

• Your email, and a display name if you set one.
• Your wardrobe photos, the catalogue images made from them, and your mirror photos.
• Your outfit history, wears, and reactions.
• The notes the stylist makes about how a piece sits on you — only from your mirror photos, and only ever about the garment: a short note plus a few structured facts, like where a hem lands or that a shirt strains when fully buttoned. You can read all of it on that piece's page, correct it (your correction beats the next photo) or clear it. Where a garment strains is never learned as a preference — it stays on that garment and dies with it — and the stylist never keeps or compares old observations: it knows how a piece sits now, never how that has changed.
• Any style rules you write, and your thermostat setting.
• Your shopping list, and your wishlist — fitting-room photos you chose to keep, with the tags and verdicts, in the same private storage as everything else.
• The taste profile learned from your feedback.
• If you switch on the morning nudge: that device's push address (a token your browser issues), your timezone and chosen hour. The email nudge keeps only timezone and hours. The evening preview keeps a rough location so the overnight pick can dress you for tomorrow's weather. Turning any of them off removes what it kept; declining the location prompt just means weatherless picks.
• A running bill of what your AI calls cost — kind, cost and time, no content — so the monthly budget stays true.
• Anything you sent through the feedback button: that one is mail, addressed to the founder on purpose, and deleting your account doesn't unsend it — ask in the same channel and it goes too.

The export button in Settings downloads all of it; the delete button removes all of it except the last two lines above, which the list is honest about so this page never has to hedge.

Who else sees it

The styling and tagging run on AI models from Anthropic (styling, tagging, feedback) and OpenAI (catalogue images, and — if you add a reference photo — the "see it on me" outfit previews drawn onto it). Your photos are sent to them to do that work and for nothing else — under API terms where they aren't used to train models. If you share your location for the daily pick, it goes to Open-Meteo to fetch your weather and is not stored (the evening preview is the one exception — see above — because it checks tomorrow's forecast while your device is asleep). If you pick the with-the-sun theme, your rough location is kept on your own device to work out sunset times — it never leaves your browser. When you plan a trip, the destination you type goes to Open-Meteo to look up its forecast, and the trip (destination, dates, and the packing plan) is stored in your account until you delete it. The morning nudge, if you turn it on, travels through your browser's own push service (run by your browser maker) — it carries only the nudge text, never a photo. The email nudge, if you turn it on, is sent through Resend (an email delivery service): they handle your email address and the nudge text — the names of the pieces in your pick — and nothing else, never a photo. Very occasionally we email everyone a short note about what's new in the app — it goes through Resend the same way, and replying to any of them is enough to opt out. That's the whole list. No analytics, no trackers, no advertising, nothing sold — not to anyone, not ever.

Can the person who runs Trusgan see my things?

No — and not as a promise, as a construction. The founder's own account is refused your data at the database-policy level, the same mechanism that separates any two users. The back office he runs the product from sees totals and counts only: how many accounts exist, how many pieces and try-ons each has, and what the AI calls cost — never a photo, never a piece's name, never a conversation with the stylist, never what you wore. The two things about you it can see are your signup email and anything you deliberately send through the feedback button — that one is mail, addressed to him on purpose. Honesty requires one more sentence: like every small service, the database ultimately runs under an operator account that infrastructure work happens through — but there is no tool in this product that opens anyone's closet, and the app login the founder actually lives in cannot.

What we never do

Your photos are never shown to other users, never public, never used for marketing. There are no "community" features quietly sharing your closet. The example outfits on our own front page are the one deliberate exception — they come from the founder's personal closet, published by the founder's own hand, and that tool exists for no one else's account.

Deleting

Want it all gone? Settings has a delete button that removes every photo, every piece, your whole history and everything the stylist learned — immediately, and without asking anyone. There's a download button beside it if you'd like a copy first. If you'd rather a human did it, send a note through the in-app feedback button (or email [email protected]) and it all goes — photos, history, taste profile, account.