Privacy Policy
Wardie is an app that turns photos of you and your clothes into outfits shown on you. To do that it handles some of the most personal data there is: full-body photos and a selfie. This policy explains, in plain language, what we collect, why, who helps us process it, where it is stored, how long we keep it, and the rights you have.
It covers the Wardie iPhone app, the website at wardie.app, and the closed beta waitlist.
Who we are
Wardie is run by APUAMA TECNOLOGIA LTDA, a company registered in Brazil (CNPJ 55.038.380/0001-45), based in São Paulo, Brasil. We are the controller of your personal data: we decide why and how it is processed.
Our Encarregado (data protection officer under the LGPD, art. 41) can be reached at privacy@wardie.app. Write to that address for anything about your data, including requests to exercise your rights.
What we collect
When you join the beta waitlist
- Your email address, the language of the page you used, and where you came from (for example a link source such as
utm_source), if the link said so. - Your consent: the date and which version of the consent text you agreed to.
We do not store your IP address or browser details for the waitlist. Our bot check (Cloudflare Turnstile) sees them briefly to decide whether you are a person; see Subprocessors.
When you use the app
- Account details: the identity you sign in with (Sign in with Apple, Google, or email with a passkey), and the email address that comes with it.
- Profile: your display name, your height if you add it, your style choices, appearance setting, whether the app lock is on, and your consent choices.
- Body photos and selfie: two full-body photos and one selfie you take in the app, and the versions you replace them with.
- Closet photos: photos of your clothes, the cut-outs we make from them, the details we detect (type, colour, season), and the answers you give when we ask.
- Worn photos: real photos of you wearing a look, if you choose to add them.
- Looks: the AI images we make of you wearing an outfit, the outfits you save, and the days you log as worn.
- Clothing embeddings: numerical descriptions of your clothing images that help us match pieces. They are made from clothing only, never from your body, face or worn photos.
- Device and usage data: crash reports and performance traces (Sentry), and product analytics with masked session recordings (PostHog). These never contain your photos, links to your photos, or the text you type: every image and text field is masked.
- Push token, if you allow notifications, so we can send them.
We do not use your photos to identify you, and we do not collect precise location, contacts or advertising identifiers.
Body photos and selfies
Your body photos and selfie get extra care:
- Adults only. You must confirm you are 18 or older before adding body or worn photos.
- Your explicit consent. We ask for it before storing body photos, and you can withdraw it at any time by deleting them. Without them, Wardie shows Looks on a stand-in model instead.
- One purpose. We use them only to make your own Looks. They are never used to identify or recognise you, never shown to anyone else, never sold, and never used to train AI models, ours or anyone’s. When we send them to an image model to make a Look, we use the provider’s settings that exclude training.
- Only you. We check that a body photo shows a single person. People who appear in your closet photos are cropped out or skipped, never stored.
- Worn photos are used to make your Looks more like you only if you turn that on. They are then used the same way as your body photos, for your own Looks, and never to train AI models.
Why we use your data, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Run the beta waitlist and email you about the beta | Waitlist email, consent | Your consent (LGPD art. 7, I; GDPR art. 6(1)(a)) |
| Provide the app: your account, closet, outfits and Looks | Account, profile, closet photos, Looks, embeddings | Performing our contract with you (LGPD art. 7, V; GDPR art. 6(1)(b)) |
| Make Looks of you from your body photos and selfie | Body photos, selfie, worn photos if you opt in | Your specific and explicit consent (LGPD art. 11, I; GDPR art. 9(2)(a) where it applies) |
| Keep Wardie secure, fix crashes and prevent abuse | Device and usage data, bot checks | Our legitimate interests (LGPD art. 7, IX; GDPR art. 6(1)(f)) |
| Improve the product from how it is used | Masked analytics | Our legitimate interests (LGPD art. 7, IX; GDPR art. 6(1)(f)) |
| Meet legal obligations | What the law requires | Legal obligation (LGPD art. 7, II; GDPR art. 6(1)(c)) |
Who processes your data
We use a small number of service providers to run Wardie. They process your data only on our instructions and under contracts that require them to protect it. The full list, with what each one does and where, is on our Subprocessors page. In short: Amazon Web Services stores your photos and handles sign-in and our emails; Google and OpenAI make your Looks; Sentry and PostHog help us find bugs and understand use; Cloudflare runs this website, the bot check and our backups; Apple and Google handle sign-in with their accounts; Expo delivers notifications.
We do not sell your personal data, and we do not share it with advertisers.
Where your data is stored, and transfers
Your data is stored in the United States: on Amazon Web Services in the us-east-1 region (Virginia), and on a server hosted by Hetzner in Ashburn, Virginia. Some providers listed on our Subprocessors page may process data in other countries.
Because we are a Brazilian company and many of our users live outside the United States, this is an international transfer. We protect it under LGPD art. 33 and, for people in the European Economic Area, the United Kingdom and Switzerland, under the standard contractual clauses approved by the European Commission (and their UK and Swiss equivalents) or the provider’s certification under the EU–US Data Privacy Framework, as each provider offers. You can ask us for a copy of the relevant safeguards at privacy@wardie.app.
How long we keep it
- App data (account, photos, closet, Looks): until you delete it or delete your account.
- Deleting your account removes every record and every photo we hold about you. Our database backups are kept for at most 30 days, so deleted data is gone from them within 30 days.
- Waitlist: until you unsubscribe or we close the beta list. If you never confirm your email, we delete it after 30 days. Unsubscribing deletes your address straight away.
- Crash reports and analytics: kept by Sentry and PostHog for their standard retention periods, after which they are deleted.
Your rights
Wherever you live, you can ask us to:
- access the data we hold about you and get a copy of it;
- correct data that is wrong or incomplete;
- delete your data (Delete everything, in the app, does this at once);
- port your data to you or another service in a common format;
- withdraw consent at any time, without affecting what we did before;
- object to processing based on our legitimate interests;
- know who we share data with, and about the consequences of not giving consent.
In Brazil (LGPD) you also have the rights in art. 18, including anonymisation or blocking of unnecessary data, and you can complain to the ANPD (Autoridade Nacional de Proteção de Dados).
In the EEA, the UK and Switzerland (GDPR) you also have the right to restrict processing and to complain to your local data protection authority.
In California (CCPA/CPRA) you have the right to know, delete and correct personal information, and not to be discriminated against for using these rights. We do not sell or share personal information as those laws define it, and we do not use sensitive personal information for anything beyond providing Wardie.
To use any of these rights, email privacy@wardie.app from the address on your account. We answer within 15 days (LGPD) and in any case within the time your law requires. We may ask you to confirm it is you.
Security
Photos are stored in private, encrypted storage and are reached only through short-lived links issued after we check they are yours. Every database table that holds your app data is protected so each person can read only their own rows. Our keys and passwords never ship in the app. After you add your first body photo, the app offers a Face ID lock. No system is perfectly secure; if a breach ever puts your data at risk, we will tell you and the authorities as the law requires.
Children
Wardie is for adults. You must be 18 or older to use the app, and you confirm it in the app before adding any photo of yourself. The beta waitlist only asks for an email address; please don’t join it if you are under 18. We do not knowingly collect data from anyone younger. If you think a minor has given us data, write to us and we will delete it.
Cookies
This website does not use cookies or local storage, and does not run analytics or advertising trackers. The bot check on the signup form (Cloudflare Turnstile) runs only on that form, to tell people from bots.
Changes to this policy
When we change this policy we update the version and date at the top. If a change matters for how we use your data, we will tell you in the app or by email before it takes effect, and ask for your consent again where the law requires it.
Contact
Questions about this policy or your data: privacy@wardie.app. Everything else: hello@wardie.app.
© 2026 APUAMA TECNOLOGIA LTDA · CNPJ 55.038.380/0001-45 · São Paulo, Brasil
Back to Wardie