CCloset helps you organize garments, outfits and travel. Local wardrobe, manual outfits, wear records, laundry and backups can be used without a platform account.
On your device and in iCloud
Garment photos, full-body photos, your profile, outfits, trips and wear records are primarily stored on your device. When iCloud is enabled, they sync through your private iCloud database. The platform does not automatically receive your entire wardrobe. Exported backups contain photos and personal information and are not encrypted; keep them in a trusted location.
Garment recycle bin and deletion
Starting with version 1.3.6, deleted garments and their photos remain in Recycle Bin for 30 days. You may restore them or permanently delete them sooner. Expired contents are cleared during a later app activation or data-maintenance run; background cleanup is not guaranteed while the app is closed. Recycled garments are included in your private iCloud data and exported backups. Garments moved to Recycle Bin when you lower the wardrobe limit follow the same rules.
Permanent deletion removes the recycled garment content and photos that are no longer in use. Outfits and wear history may retain their own independent snapshots; manage those separately when needed. To prevent an old device or backup from restoring deleted garments, the database retains necessary garment identifiers and deletion times, without garment content or photos in those deletion records. You control previously exported backups; they are not remotely rewritten.
Sign in with Apple and purchases
Platform AI subscriptions require Sign in with Apple. The server stores the app-specific Apple identifier, encrypted authorized name, verified and encrypted authorized email, encrypted authentication credentials, subscription transactions, entitlements and usage records to authenticate you, verify purchases and provide the service. Apple handles payment; we do not receive your bank card details or Apple Account password. Lifetime Membership and platform subscriptions are separate purchases.
AI requests and providers
Only when you request recognition, outfit suggestions or outfit images, or explicitly enable automatic daily generation, do we send the photos, garment details, weather or preferences needed for that task. Custom AI connects directly to your configured provider; its key is stored in your device keychain. Subscription AI runs through our platform server. Production currently uses Alibaba Cloud Model Studio. Recipients are shown before you send a request. Requests may contain personal photos, including a full-body photo. Review the data and recipient confirmation before sending. By default, this confirmation is shown each time. You may select “Don’t ask again for this authorization” to remember consent for all manual AI features with the provider list shown. Subscription AI and custom AI have separate provider lists. A provider list you have not approved requires a new confirmation. Revoke access in Scene Model Settings. Automatic background generation still requires separate authorization. Third-party models can make mistakes, and their processing and retention depend on the provider. Our platform retention periods do not describe upstream retention. Before enabling a new data recipient, we will update this policy and the sharing confirmation. Do not upload unnecessary sensitive information.
The platform records request identifiers, content fingerprints and usage reservations and settlements. Photos and prompts for background try-on jobs are encrypted while the job is active and removed when it ends. Each completed background try-on image is encrypted and kept for 24 hours from completion and is then deleted automatically. During that time, opening the app while online automatically loads and saves the image to the corresponding outfit. Other AI results are removed after approximately 24 hours. Request content fingerprints and error details are cleared after 90 days; necessary request identifiers, metering and settlement evidence follow the billing retention period below.
Location, camera and photos
Location determines a city for weather; you may decline and choose a city manually. City lookup first searches the directory bundled with the app and uses Apple Maps services for additional results when needed. Weather uses Apple WeatherKit. Queries, cities or coordinates needed for those Apple services are sent to Apple. Apple forecasts are cached temporarily and are not retained in wardrobe backups or iCloud outfit history. Camera and photo access are used when you choose to take or select photos. On-device background removal does not upload your image.
Security records
The server records necessary access times, network addresses, sign-in and administrative actions to prevent abuse and investigate faults. We do not integrate advertising tracking or use your information for third-party advertising profiles.
Remote diagnostics and feedback
Versions with remote diagnostics enabled use Sentry in the EU to receive crash stacks, app versions and builds, device models and OS versions, and redacted operation status, timing and error codes to find and fix faults. Ordinary diagnostics do not send names, email addresses, account identifiers, photos, wardrobe content, prompts, login credentials, purchase receipts or full request URLs. Session replay and automatic screenshots are disabled. As a network recipient, Sentry processes connection information; we enable its IP-address scrubbing setting. Remote processing and retention follow the Sentry Privacy Policy and current service settings, separately from the platform local-log periods below.
In Help & About → Report a problem, you can submit a description and choose whether to include up to 2 MiB of redacted diagnostic logs. Do not include sensitive information in your description. Up to 3 pending reports are kept only on your device for up to 7 days, with at most 3 send attempts each. The pending local copy is deleted after receipt is confirmed. You can delete pending reports or contact support with the report number about a remote report. Local log export remains available when remote diagnostics are not configured.
Platform retention periods
When a verified subscription purchase cannot yet be linked to an account or its status confirmed, the necessary signed transaction is encrypted and kept for up to 90 days for reconciliation, then cleared when resolved. Minimal reconciliation records follow the transaction retention period. Account deletion clears pending signatures and the submitting-account link. Restore purchases or contact support rather than purchasing again.
Necessary security events and administrator audit records are retained for six calendar months, and runtime diagnostic logs for no longer than 14 days. Necessary transaction and service-usage records are retained for three years from the later applicable event, such as completion or the end of the associated subscription. Unsettled requests, balances requiring reconciliation and minimal evidence needed for active entitlements are retained while needed. Automatic server backups are compressed before encryption. Daily recovery points are kept for the latest seven days, then weekly points for up to about 30 days. A separate host holds the latest encrypted copy. Backups exclude temporary AI inputs and results. Restores replay account-deletion state. We retain encrypted minimal deletion records to prevent older backups from restoring deleted account information. You control your device, iCloud and personally exported backups. These periods do not describe third-party AI providers’ retention.
Delete your account, sign out and backups
In the app, open Settings → Subscription and Credits → Apple Account → Delete Account. After confirmation, the platform disables your account, revokes sessions, removes its Apple identity association and settings, and clears temporarily stored AI inputs and results. Necessary transaction, security and usage records may be retained. Contact support for other data requests. Deleting the platform account does not delete your device or iCloud wardrobe or cancel an Apple subscription. Manage subscriptions through Apple, and manage local data in the app. Consider exporting a backup before deleting local data.
Contact
Operator: 唐祥轩 (Tang Xiangxuan), an individual.
Privacy and data requests: xiangxuantxx@163.com. Do not send passwords, verification codes, private keys or full bank card details.