Privacy Policy

Last updated: May 26, 2026

1. Data Controller

• Controller: Joris Gallot
• Privacy contact: contact@hangz.app

2. Data We Process

Depending on your use of Hangz, we may process:

• Account details you provide (name, email address, profile picture, and identifiers from third-party sign-in providers such as Google or TikTok).
• Wardrobe content you upload (photos of garments, garment metadata such as color, category, and labels, and outfits and wishlist items you create).
• Contact details and message content when you reach out to support.
• Technical usage metrics and aggregate analytics for product improvement and reliability.
• Mobile device and connection information (device model, operating system and app version, language, IP address, and vendor identifiers such as the iOS IDFV), used for security, debugging, and reliability.

3. Purposes and Legal Bases (EEA/UK)

• Provide and operate the service (performance of a contract).
• Handle support and service communications (legitimate interests and/or contract).
• Maintain security, abuse prevention, and reliability (legitimate interests).
• Comply with accounting, tax, and legal obligations (legal obligation).

4. Third-Party Sign-in (Google, TikTok)

When you sign in using Google or TikTok, we receive basic profile information (such as your name, email address, and profile picture) from the provider. We use this information only to create and maintain your Hangz account. We do not post to your social accounts, and we do not access your social content beyond the data required to sign you in.

5. Analytics (Cookieless)

We use a cookieless analytics tool for aggregate traffic insights on the website. We do not use non-essential analytics cookies. If analytics implementation changes in the future and non-essential cookies are introduced, this policy and consent handling will be updated accordingly.

6. AI Processing of Garment Images

To detect garment attributes (category, color, materials, style) and to power features such as outfit suggestions and wardrobe gap analysis, we send the photos you upload and limited related metadata to OpenAI for processing. OpenAI acts as a processor for this operation and, per its API terms, does not use this data to train its models. Processing happens on OpenAI infrastructure, which may be located in the United States.

7. Hosting and Subprocessors

We rely on the following subprocessors to operate Hangz:

• Hetzner Online GmbH (Germany) - application hosting, database, and object storage for wardrobe photos.
• OpenAI, L.L.C. (United States) - vision and language model processing for garment recognition and outfit generation.
• Google LLC (United States) - sign-in via Google OAuth, when used.
• TikTok Pte. Ltd. - sign-in via TikTok OAuth, when used.

8. Data Sharing

We do not sell personal data. We share data with the subprocessors listed above only as needed to provide the service, secure infrastructure, and comply with legal obligations.

9. International Transfers

Some of our subprocessors (notably OpenAI, Google, and TikTok) process data outside the European Economic Area. Where required by law, such transfers rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses.

10. Retention

We retain personal data only as long as necessary for service delivery, legal compliance, dispute resolution, and enforcement of agreements. Indicative retention periods:

• Account and wardrobe content: kept while your account is active. Deleted or anonymized within 30 days after you delete your account.
• Support correspondence: up to 24 months after the last exchange.
• Security and operational logs: up to 12 months.
• Backups: rotated and overwritten within 30 days.

11. Automated Processing

Hangz uses automated algorithms to classify garments, suggest outfits, and highlight gaps in your wardrobe. These features do not produce legal or similarly significant decisions about you within the meaning of Article 22 GDPR. You can ignore or override any suggestion at any time.

12. Children

Hangz is not directed to children under 13, and we do not knowingly collect personal data from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us with personal data, contact us so we can delete it.

13. Your Rights (EEA/UK)

Subject to applicable law, you may request access, rectification, deletion, restriction, objection, and portability of your personal data. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with your local supervisory authority (for users in France, the CNIL - www.cnil.fr).

14. US and California Privacy Notice

If US state privacy laws apply to your data, you may have rights to know, access, delete, and correct personal information, and to exercise non-discrimination rights when using those rights.

15. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated through the app or by email before they take effect.

16. Contact

contact@hangz.app