Legal

Privacy Policy

Last updated: July 26, 2026

This policy describes how Ropora ("Ropora", "we", "us") collects, uses, and protects your information in the Ropora iOS app and on getropora.com (together, the "Service"). It is written to match what the app actually does, feature by feature.

The short version

• Your wardrobe is private. Nothing is shared with other users unless you turn sharing on, and every sharing setting is off by default.
• We use AI providers to identify garments and generate images. Your photos are sent to them to do that, and are not used to train their models.
• We do not sell your personal information, and we show no advertising.
• You can export everything and delete everything from inside the app.

Information we collect

Account

• Email address and authentication details, or your Apple or Google sign-in identity.
• Display name, shown to people you connect with.
• Date of birth, collected once to enforce our minimum age of 16. It is never shown to other users.

Your wardrobe

• Photographs of your clothing, and the details attached to them — category, colour, pattern, material, brand, size, price, and your own notes.
• Wear history, saved outfits, events, and packing lists.

Photographs of you

This is the most sensitive information in Ropora and we treat it accordingly.

• Avatar photo. Optional. Used to render outfits on your own body. If you enable facial rendering, this photo may show your face.
• Profile photo. Optional. Shown to friends you connect with.
• Body details — height, body type, body gender, and skin tone — used to make renders look like you.

Facial rendering is off by default and cannot be switched on without your explicit consent, given on a screen that tells you what is collected, who receives it, and how long it is kept. We do not create, store, or compare faceprints or facial templates, and we never use your photo to identify you or anyone else. You can withdraw consent at any time in one tap; rendering stops immediately and the photo is deleted from our storage within 30 days.

Facial rendering is not available to residents of Illinois or Texas. Every other feature works normally there.

Location

If you allow it, we use your approximate location to fetch a weather forecast so outfit suggestions suit the day. Your location is never stored. Coordinates are rounded to roughly one kilometre on your device, used to request the forecast, and discarded. Nothing about where you are is written to our database. Declining simply omits weather from suggestions.

Voice

If you describe an occasion out loud instead of typing it, the recording is transcribed to text and is not retained afterwards. Only the resulting text is kept, as part of your styling session.

Social

• Friend connections, requests, and blocks.
• Posts, captions, comments, reactions, and polls you create.
• Reports you file about content, kept as a record that the report was handled.

Purchases

Your subscription status, plan, and trial state. All payments are processed by Apple. We never see or store your card details.

Technical

• Push notification token, if you enable notifications.
• Crash reports and error diagnostics, configured to exclude personal information. Performance tracing and session replay are switched off.
• Country and language preference, used to show relevant shops and copy.
• Clicks on shopping links, used for affiliate attribution.

Automatic content screening

Every photograph you upload is checked automatically before it is stored. Images containing nudity are rejected and deleted immediately — they never enter your wardrobe and are never visible to anyone. This screening is part of how we keep the Service safe and meet our obligations as a platform hosting user content.

Who we share information with

These companies process information on our behalf, under contract, only as needed to run the Service:

• Supabase — database, file storage, and authentication.
• Google (Gemini) and Anthropic (Claude) — image generation, garment identification, and safety screening.
• Apple — WeatherKit forecasts, and all payment processing.
• RevenueCat — subscription management.
• Expo — push notification delivery.
• Sentry — crash and error monitoring.
• SerpAPI and MercadoLibre — product search.
• Skimlinks, Amazon Associates, and MercadoLibre Afiliados — affiliate attribution.

Our AI providers do not use your content to train their models.

We do not sell your personal information. We do not share it with advertisers or data brokers. We use no tracking SDKs and show no advertising, which is why Ropora never asks for tracking permission.

We also share information with other users when you choose to — and only with the specific people you choose — and where the law requires it or it is necessary to protect people's safety.

How long we keep it

• Account, wardrobe, outfits — until you delete them or close your account.
• Avatar photo — until you remove it or withdraw consent, then deleted within 30 days.
• Voice recordings — not retained after transcription.
• Location — never stored.
• Photos rejected by screening — deleted immediately, never stored.
• Content reports — two years, as a record that reports were actioned.
• Crash diagnostics — 90 days.
• Purchase records — as long as tax and accounting law requires.
• Backups — deleted data ages out on our normal backup cycle.

Deleting your account

Settings → Delete account. It is permanent, and removes your profile, every item and photo, your wear history, saved outfits and events, posts, captions, comments and reactions, friend connections and blocks, wishlist, push tokens, subscription records, and any renders of you that friends generated — including those stored in the other person's account.

Getting a copy of your data

Settings → Export data produces a machine-readable file containing your profile, wardrobe, wear history, saved outfits, posts, comments, wishlist, friend connections, and events.

Your rights

Wherever you live, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or withdraw consent. Most of these are self-service in the app. For anything else, email support@getropora.com and we will respond within 30 days. We will never charge you for exercising a right, and we will not treat you differently for doing so.

In the EU or UK, you may also complain to your data protection authority.

In California, you have the rights to know, delete, correct, and opt out of sale or sharing, and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.

In Mexico, you have ARCO rights — acceso, rectificación, cancelación y oposición — under the LFPDPPP.

Children

Ropora is for people aged 16 and over. We ask for your date of birth when you first sign in and do not knowingly collect information from anyone younger. If you believe a child has an account, email support@getropora.com and we will close it and delete the data.

Security

Information is encrypted in transit and at rest. Your sign-in tokens are held in your device's secure keychain. Access is restricted per user at the database level, so one account cannot read another's data. No system is perfectly secure; if a breach affects you, we will notify you and the relevant regulator as the law requires.

International transfers

Our providers are largely based in the United States, so your information may be processed outside the country where you live. Where it is, we take steps to ensure it receives an appropriate level of protection.

Changes to this policy

We may update this policy. For material changes we will post notice in the app at least 14 days before they take effect and revise the date above.

Contact

support@getropora.com