Privacy Policy

App: Vesti Operator: Jamal Alshloul, Jordan Contact: support@tryvesti.com Effective date: September 28, 2026

This Privacy Policy explains what information Vesti (the "App") and tryvesti.com (the "Website") collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to the App and Website. By using the App you agree to this Policy.

Short version. The App is a personal wardrobe. You give us your account details, the photos and details of your clothing, and optional measurements. Under your handle, onboarding asks you to check an agreement to the Terms of Service and this Privacy Policy, including the AI sharing described below. Both documents open in popups. Before any sharing, you must check this agreement and continue. AI analysis and previews begin only after this agreement. Vesti also learns from your clothing choices and keeps usage counts; there are no individual feature switches in Settings. We do not sell your personal information. You can export your records and delete your account in Profile → Settings. Contact us for other privacy requests.

1. Information we collect

Account and identity. Your email address and authentication credentials when you create an account. If you sign in with Apple, we receive the identifier and email that provider shares. Passwords are sent to our authentication provider over an encrypted connection and stored there as hashes.

Website waitlist. If you join the launch waitlist on the Website, we collect the email address you enter. We use it to send Vesti launch updates, store it with Supabase, and do not make the list publicly readable. You do not need to create an App account to join. To have your waitlist address removed, email us at the contact address above. The Website does not use advertising trackers or analytics cookies.

Profile and fit data. Onboarding requires your name and handle, style and fit choices, at least three favorite brands, a gender answer (including Prefer not to say), and a date of birth establishing that you are at least 18. Typical clothing sizes and body measurements are optional. Skin-tone data saved in earlier versions is retained, but the app no longer asks for it.

Photos and wardrobe content. Photos you take or choose of your clothing, and the details of each piece (name, category, color, brand, size, notes, attributes). Photos are stored in a private storage bucket that only your account can access.

AI-derived data. For the AI features, we store what the AI reads from a photo (such as category, colors, materials, formality, warmth), a polished single-piece studio image, and saved outfit references to your pieces. The upload is kept while scanning and image preparation finish, then queued for deletion after the finished studio image becomes the piece’s primary photo. Earlier processed pieces or older app versions may retain an original or older derived image until they are migrated or removed. Previously generated outfit preview images expire under the existing retention schedule.

Preferences and learning. We store signals from the looks you save, skip, swap and mark as worn, and the clothing preferences derived from them. This personalization is private to your account and fades over time (see Retention).

Usage counts. We record aggregate counts of saves, skips and swaps, kept for up to 90 days. Photos, measurements and text are excluded.

Agreement records. The Terms and Privacy Policy versions you accepted, AI-sharing permission and a server-recorded acceptance time.

Subscriptions. Product and transaction identifiers, purchase and renewal dates, subscription status and renewal preferences. Apple processes your payment; Vesti does not receive your full payment-card details.

Apple authorization. When you choose Sign in with Apple, we securely exchange the authorization code and keep an encrypted Apple refresh token on our server so we can revoke the authorization when you delete your account.

Technical and diagnostic data. Limited technical information needed to operate and secure the service (for example, authentication tokens, request metadata, and error and rate-limit information). We do not use third-party advertising SDKs and we do not track you across other apps or websites.

2. How we use information

We use your information to:

We do not sell your personal information, and we do not use your photos or measurements for advertising.

3. Where we operate

Vesti is operated by Jamal Alshloul in Jordan and is offered at launch to adults in the United States. Your information is used to provide the services you request, keep the service secure, and meet applicable obligations. The onboarding agreement expressly includes the AI sharing below. Contact us to request a restriction on processing or withdrawal of your agreement; restricting essential processing may prevent us from providing the AI features.

4. AI processing and third-party providers

Vesti uses the following services after you check the agreement under your handle and continue:

The agreement checkbox under your handle links to the Terms of Service and this Policy, and expressly includes the AI sharing described here. It starts unchecked for new users. Checking it enables Continue on the identity step; you then go directly to the account-creation options. There is no separate agreement page or AI switch in Settings. Opening either document does not check the box. No data is sent to these AI services before your agreement. You can go back without agreeing.

The current disclosure version and acceptance time are recorded on the server; account permissions are checked before provider calls. Existing accounts without the current agreement are asked to check the same agreement under their handle. Requests to restrict processing or withdraw consent can be made through the contact address in this Policy.

5. Sharing and subprocessors

We share information only with service providers that help us run the App and Website, to deliver the following services:

We may also disclose information if required by law, to protect rights and safety, or as part of a merger or acquisition (in which case this Policy continues to apply until updated).

6. International transfers

We and our providers may process information in countries other than yours, including the United States. Contact us for information about the safeguards applicable to your data and our providers.

7. Retention

We keep your account, closet and profile until you delete them or your account. We keep Website waitlist addresses while needed for launch updates, or until you ask us to remove yours. Learned style preferences are kept for up to 180 days and fade over time; usage counts for up to 90 days. Agreement records remain with your account and are removed with it. Apple refresh tokens remain encrypted while your account is active. After deletion, an encrypted revocation retry record may remain for up to seven days, then it is removed. Signed Apple notification identifiers and processing metadata are kept for up to 90 days; raw notification payloads are not retained by this handler. When you delete your account, we remove your records and files as described below.

8. Security

We use encryption in transit (HTTPS/TLS), private per-account storage, and database access rules that restrict each account to its own data. No system is perfectly secure; please use a strong, unique password and keep your device protected.

9. Your choices and rights

In Profile → Settings you can:

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, port your data, and withdraw consent. You can export your records or delete your account in Profile → Settings; contact us at support@tryvesti.com for other requests, including restrictions on processing or withdrawal of consent. You will not be discriminated against for exercising your rights.

10. Account deletion

You can delete your account in Profile. Deletion ends access immediately and removes your account and associated records and files, subject to a short processing window and any legal retention obligations. Backup copies follow the configured backup-retention schedule and cannot always be removed individually. Providers may retain data under their own applicable policies; contact us for information. Deleting your Vesti account does not cancel an Apple subscription; cancel it through your Apple subscription settings.

11. Children

The App is intended for adults aged 18 or older. We do not knowingly collect information from people under 18. If you believe a child has provided information, contact us and we will delete it.

12. Cookies and tracking

The App does not use advertising cookies or cross-app tracking. The Website does not set analytics or advertising cookies. External pages we link to (for example, a brand's size guide) may set cookies under their own policies.

13. U.S. state privacy rights

If you live in a U.S. state with a comprehensive privacy law (for example, California), you may have rights to know, access, correct, delete, and opt out of the "sale" or "sharing" of personal information and of certain profiling. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive data (such as measurements) for advertising. To exercise your rights, use the in-app controls or contact support@tryvesti.com.

14. Changes

We may update this Policy. If we make material changes, we will notify you in the App or by email and update the effective date. Continued use after an update means you accept the revised Policy.

15. Contact

Questions or requests: support@tryvesti.com.