Legal
Privacy Policy
Last updated 29 October 2026
1. Who is responsible
The controller for your personal data is:
- Service
- RunwayTwin
- Provider
- Adapthrive, eenmanszaak (sole proprietorship) registered in the Netherlands
2. What we collect and why
- Account details (name, email) to give you an account — performance of contract (art. 6(1)(b) GDPR).
- Style profile, closet items, saved looks and lookbooks you create — performance of contract.
- Photos you upload to Shop the Look — to analyse the clothing in them for you (performance of contract).
- Closet photos you add (Snap your closet) — to catalogue your clothes and build outfits from them (performance of contract).
- Hunts you start: the piece, your size and budget, and the source photo if there was one — to search for listings and score them for you (performance of contract).
- Your approximate location (rounded to about 1 km), only if you allow it on the Today page — to get the weather forecast for your outfits. We send these coordinates to MET Norway (the Norwegian Meteorological Institute) for the forecast; nothing else about you is sent (performance of contract).
- Your Size Passport (sizes, brand sizes and the shopping rules you switch on) — to tailor suggestions, shop searches and hunts (performance of contract).
- Your morning-email setting and preferred occasion, if you switch the morning outfit email on (consent — you can turn it off at any time on the Today page).
- Usage counts (how many AI looks you used this month) — to apply the free allowance (performance of contract).
- Subscription and payment status from Stripe — to provide Pro and keep our accounts (contract; legal obligation). We never see your full card details.
- Clicks on shop links (which shop and search term) — to measure which shops are useful and to account for affiliate commission (legitimate interest, art. 6(1)(f)).
- For signed-out visitors: a one-way hashed IP address, kept per day, to stop abuse of the free try-out (legitimate interest).
3. Your photos
Photos are uploaded to private storage and are never made public. They are sent to an AI model only to describe the clothing and accessories in them. We do not identify people, do not use facial recognition and do not create biometric templates. If someone in the photo is recognisable, that is incidental to describing their outfit.
A copy is only added to your account if you save the look, start a hunt from it, or add it to your closet. Hunt photos stay in private storage and are used only to compare listings with your piece; deleting the hunt stops that. Closet photos are cropped pictures of your own clothes. They appear only in your account, stored at a long random link that we never publish or share. You can delete any photo yourself, or ask us to, at any time.
4. Who processes data for us
- Base44 (Wix.com Ltd.) — hosting, database, authentication, file storage and access to AI models.
- AI model providers made available through Base44 (such as Google) — to generate looks and analyse photos. Your data is not used by us to train models.
- Stripe — payments and subscription management.
- MET Norway — weather forecasts, based on rounded coordinates only (no account or personal details).
- eBay (once enabled) and public web search — to find listings for your hunts. We send a description of the piece, and for eBay image search the photo you hunted from; never your name or email.
- Affiliate networks (such as Skimlinks or Awin) — only when you click a shop link, to track a possible commission.
Some of these providers process data outside the European Economic Area. Where they do, transfers rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses.
5. How long we keep data
- Account data: until you delete your account.
- Uploaded photos: until you delete them or your account; saved looks keep their photo for as long as you keep the look.
- Hashed IP records for signed-out use: 30 days.
- Hunts and their matches: until you delete the hunt or your account.
- Closet items and outfit history: until you delete them or your account.
- Payment and invoice records: 7 years, as required by Dutch tax law.
6. Cookies and local storage
We use only what the service needs to work: login sessions and a small counter in your browser for the signed-out free look. We do not set advertising cookies. When you click a shop link, the shop or affiliate network may set its own cookies on its site; their policies apply.
7. Your rights
You may ask us for access to, correction or deletion of your data, to restrict or object to its use, and for a copy in a portable format. Email us using the address above. You also have the right to complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
8. Changes
We will update this policy when our processing changes and show the date at the top.