Privacy Policy

When you create an account, we collect your email address and, optionally, your name. Authentication is handled by Clerk, Inc. — your password is never stored by NGUYENER directly.

To personalize your experience, you may voluntarily provide: skin tone, undertone, hair color, build, eye color, age range, height, color season (Spring/Summer/Autumn/Winter), style preferences, budget range, and items you own. This information is stored in your browser (localStorage) and synced to our servers (Supabase) for cross-device access. It is used solely to improve your styling recommendations. You may delete your profile at any time from the Profile page.

You may choose to upload photos of yourself or clothing items to receive visual styling advice. Photos are analyzed entirely on your device using machine learning models that run in your web browser (WebGPU/WebAssembly). Your photos are never uploaded to our servers. We do not have access to, store, or process your photos on any server infrastructure. The analysis results (detected garments, colors, body attributes) may be sent to our servers to generate recommendations, but the original images remain on your device at all times.

Illinois residents — Biometric Information: If you are a resident of Illinois, photo analysis for body type or facial feature recognition may involve biometric data as defined under the Illinois Biometric Information Privacy Act (BIPA). By uploading photos for analysis, Illinois residents explicitly consent to this collection and processing. You may withdraw this consent at any time by contacting us at [email protected]. Biometric data will be retained only for as long as necessary to provide styling recommendations and will be permanently destroyed within 3 years, or within 1 year of your last interaction, whichever is sooner.

We store the messages exchanged during your styling consultations to provide continuity across sessions and to improve our service. You may request deletion of your consultation history at any time.

We automatically collect limited technical data including IP address, browser type, pages visited, and consultation timestamps. This data is used for security monitoring, rate limiting, and service improvement.

When you use NGUYENER, our recommendation engine analyzes your style preferences, swipe history, and profile attributes (such as color season, body type, and budget) to surface products that match your taste. This analysis is performed using vector similarity search and Thompson Sampling — no large language models or external AI services process your personal data for recommendation purposes.

You are not subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you. Our automated profiling is used exclusively to suggest fashion products — it does not determine pricing, creditworthiness, employment eligibility, or any other outcome with legal or similarly significant consequences. You are always free to disregard any recommendation.

You have the right to:

• Request human review of any recommendation or profile assessment
• Express your point of view and contest any automated decision
• Receive a meaningful explanation of the logic involved in the profiling
• Opt out of personalized recommendations and receive non-profiled product listings

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

For users in the European Union or European Economic Area, transfers of personal data to the United States rely on Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable. Our sub-processors maintain SCCs as part of their data processing agreements to provide appropriate safeguards for your personal data.

For users in the United Kingdom, international data transfers are governed by the UK Addendum to the EU Standard Contractual Clauses, as approved by the UK Information Commissioner's Office (ICO), where applicable.

Your account information (email address, name, authentication records) is retained for as long as your account remains active. Upon account closure, account data is permanently deleted within 30 days, subject to any legal obligations to retain certain records.

Your swipe history, product interactions, and style preferences are retained to improve recommendation quality. This data is anonymized after 12 months — meaning it is stripped of all personally identifiable information and can no longer be linked back to your account. Anonymized interaction data may be retained indefinitely for aggregate analysis and model improvement.

Usage analytics (page views, feature engagement, performance metrics) are aggregated and anonymized at the point of collection. This aggregated data contains no personally identifiable information and is retained indefinitely for service improvement and business analysis.

Payment information (card details, billing address, transaction history) is managed entirely by Stripe and is retained in accordance with Stripe's own data retention policy and PCI-DSS requirements. NGUYENER does not store payment card details on its own servers. We retain subscription status and billing event records for as long as your account is active, plus any period required by tax and accounting regulations.

Machine learning embeddings generated from your style profile and interaction history are retained for as long as your account is active. Upon account deletion, all associated embeddings are permanently deleted along with your account data within 30 days.

• Access a copy of your personal data
• Correct inaccurate data
• Delete your account and data
• Opt out of marketing communications

In addition to the above, you have the right to data portability, the right to restrict processing, and the right to lodge a complaint with your supervisory authority. Our legal basis for processing is performance of contract (account services), legitimate interests (security, abuse prevention), and consent (marketing, biometric data where applicable).

California residents have the right to know what personal information we collect and how it is used, to delete personal information, to opt out of the sale or sharing of personal information (we do not sell or share personal information), and to non-discrimination for exercising these rights. To exercise your rights, contact us at [email protected].

We will use one or more of the following methods to inform you of a qualifying breach:

• Email: Direct notification to the email address associated with your account
• In-app notice: A prominent banner or alert displayed when you next access the service
• Website notice: A conspicuous posting on our website at nguyener.app if the breach affects a large number of users or if individual contact is not feasible

Our breach notification will include, at minimum:

• The nature and scope of the breach, including the categories of data affected
• The approximate number of individuals affected, where known
• The likely consequences of the breach
• The remedial measures we have taken or propose to take to address the breach and mitigate its effects
• Contact information for our privacy team where you can obtain further information

If you are affected by a data breach, you retain all rights described in the Your rights section of this policy. In addition, European residents have the right to lodge a complaint with their local data protection supervisory authority. California residents may contact the California Attorney General's office. We will cooperate fully with any regulatory investigation arising from a breach.