Privacy

The short version

Your closet lives on your phone. Woven has no accounts, no ads, and no analytics, and nothing about you is sold or shared for marketing. If you ask for emails, your address is the one thing we keep, with the service that sends them.

When you use a feature that needs our AI — reading a photo, the stylist, checking something before you buy it — what that feature needs is sent to our server, answered, and not kept.

Who we are

Woven is published by Peter Lindholm, who is responsible for your information under this policy (the "controller", in European law). For anything about your privacy, email pez2009goldfish@gmail.com.

What is kept only on your phone

Your photos, your pieces and their details, what you wore and when, your outfits, plans and trips, your style answers, and anything you type about prices. Your name, if you give one, and what you told us about your habits and spending, are used only to show you your plan and never leave the phone.

Backups are files you choose to make and keep yourself, wherever you save them.

If you add a piece from a store's website inside the app, your phone downloads the picture that page publishes for sharing and keeps it only on your phone, for your closet. It is never shown to anyone else, and nothing you browse there is kept.

What is sent, and why

Reading a garment: the photo (cut out on your phone first) and what the phone measured, such as colours. Checking something before you buy it, or snapping what you are wearing: that photo, plus a list of your pieces so the answer can refer to them. The stylist, planning and packing: your pieces, recent wears, the weather you are dressing for, your style answers other than your name, and the messages you send. Discover: a list of your pieces, and for the read of your closet, how often you've worn each and what you mostly wear.

The app asks before anything is sent to the AI, and it can be switched off in Settings; switched off, nothing is sent. Our server passes what is needed to our AI provider, Anthropic, through Vercel, to produce the answer, and sends the answer back. It is sent only to Anthropic, and only under terms where it is not used to train AI models. Our server does not store your photos, pieces or messages. Its logs record only things like timings, counts and which feature was used — never the content.

If you paste a link to something you are thinking of buying, your phone opens that page itself to find its picture, the way Messages shows a link preview. The link is not sent to us.

Prices never leave your phone.

Location

If you allow it, Woven asks your phone for your approximate location, rounds it to about ten kilometres, and sends only that to Apple's weather service (WeatherKit) to get the forecast. It is never sent to our server or to the AI, and never stored. Trips use the place name you type, sent to Apple Maps to find the place, and the place to Apple's weather service for its forecast.

Purchases

Subscriptions are sold and managed by Apple. Your phone sends our server the record Apple signs for your subscription, so the server can check it is active; it contains the plan and its dates, not your name or payment details. It is checked and not kept, apart from the fair-use counts described below. Apple's privacy policy covers what Apple collects.

Our providers

Vercel hosts our server and this website and, like any host, keeps standard request logs (such as IP addresses and times) for a short period to run and protect the service. Anthropic provides the AI. Loops sends our emails, only to people who ask for them. Apple provides the weather and the place search for trips, under Apple's privacy policy. Each handles data under its own terms, which are linked from their websites.

To limit how often the service can be called, the server counts requests by network address, and a member's by the number Apple gives their subscription. Before you join, photos carry a random code your phone makes up and replaces every day, so the few free ones are counted per phone; it identifies nothing. These counts are kept by Upstash, under a scrambled name that can't be read back to an address or a subscription, and expire on their own: within a day, or within 30 days for a member's monthly fair-use count.

Email, if you ask for it

Only if you choose to get outfit ideas and Woven news by email: your address goes to Loops, the service that sends our emails, along with a random code your phone made up. The same code is attached to your App Store purchase, so emails about your membership reach you (a trial about to end, a payment that didn't go through). Nothing else about you or your closet goes with it, and we never sell or share your address.

Every email has an unsubscribe link. Turning email off in Settings, or "Delete everything", removes your address from Loops entirely.

Links to stores

When you open a store's page or a search from Woven, you leave the app, and that site's own privacy policy applies to what you do there. Some store links may be affiliate links: the store learns that the visit came from Woven, so that we can be paid a commission if you buy something. We never send a store or an affiliate network anything about you or your closet, and we receive only totals of sales, never who bought what.

When Discover shows a store's products, your phone loads their pictures from the store, the way a web browser would, so the store sees a request from your network address; nothing about you or your closet goes with it. Which products are shown is decided by our server from the piece being suggested alone.

This website

This website sets no cookies and runs no analytics, advertising or third-party scripts. Its fonts and images are served from the site itself. The request logs described under "Our providers" are all that is kept.

Why we may use it

If you are in the European Economic Area or the United Kingdom, the law asks us to name a legal basis for each use. Ours are:

• Providing the features you ask for, under our terms: reading a photo, the stylist, Discover, checking your membership (performance of a contract).
• Keeping the service running, secure and fairly used: request logs and the counts that limit how often it can be called (our legitimate interest in a working, affordable service, which uses as little about you as it can).
• Your permission, which you can withdraw at any time in Settings or your phone's Settings: sending anything to the AI, using your location for the weather, and emails (consent).

How long it is kept

• On your phone: until you delete it, use "Delete everything", or delete the app.
• On our server: what a feature sends is used to answer and then discarded; nothing is written down.
• At Anthropic: what is sent is used to produce the answer and is not used to train AI models. Like any provider, Anthropic may keep it briefly, as its own terms allow, to keep its service safe.
• Request logs at Vercel: a short period, set by Vercel, to run and protect the service.
• Your email address, if you asked for emails: until you unsubscribe or turn email off, then removed.
• Rate-limit counts: they expire on their own, within a day, or within 30 days for a member's monthly count.

Where it is processed

Our server, Vercel, Anthropic, Apple and Loops are in the United States, so what a feature sends is processed there. Where the law requires it, these transfers are covered by the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses.

Your rights

Depending on where you live, you may have the right to know what information we hold about you, to get a copy of it, to correct it, to delete it, to object to or restrict how it is used, and to withdraw your consent. In Europe and the UK you can also complain to your data protection authority.

Because your closet is on your phone and our server keeps nothing about you, most of these are in your hands already: everything is there to see in the app, a backup is a copy of all of it, and "Delete everything" in Settings deletes it. There is no account to delete. For anything else, email pez2009goldfish@gmail.com; we answer within 30 days, and never charge for it.

California residents: we do not sell or share personal information, as California law defines those words, and we do not use sensitive personal information to infer anything about you. You will never be treated differently for using your rights. Woven does not track you across apps or websites, so there is nothing to opt out of, and a Global Privacy Control signal changes nothing.

Security

Everything between the app and our server travels over HTTPS. Your closet stays on your phone, protected by your phone's own security, and you can lock the app with Face ID. Our server keeps no store of anyone's photos or closets, so there is none to lose.

Your choices

Everything is on your phone, so you are in control of it: delete a piece, and it is gone; "Delete everything" in Settings removes your whole closet, photos and settings from the phone; delete the app, and your closet goes with it (make a backup first if you want to keep it). The AI can be switched off in Settings, and then nothing is sent to it. You can also lock the app with Face ID. Location can be turned off in your phone's Settings at any time.

Children and teenagers

Woven is for people 13 and older. It is not directed at children under 13, and we do not knowingly collect personal information from them, in keeping with the US Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has sent us information, email pez2009goldfish@gmail.com and we will delete anything we hold.

Teenagers use the same app as everyone, under the same privacy: nothing about them is kept on our server, sold or used for advertising. The stylist is held to stricter rules because some of the people it dresses are young: it talks only about clothes and getting dressed, never comments on anyone's body or weight or suggests dieting, says plainly that it is an AI, and points anyone who says they are in trouble to help. Under every answer is a way to report it.

Changes

If this policy changes, the new version will be posted here with a new date, and if a change matters to how your information is used, the app will tell you before it applies. Last updated 2026-10-15.