Privacy

Last updated 11 November 2026

The short version

• Your photos aren't stored on our servers. They pass through only long enough to make your try-on.
• Your results stay on your phone for 24 hours unless you save them.
• No account, no email, no cookies. A random device id in your browser holds your try-ons.
• IP addresses are deleted after 90 days. We never sell your data.

What we do with your photos

Your photo and the photos of the clothes are sent to our server only for the seconds it takes to make your try-on, then passed to Google's Gemini image model to generate it. Try again, or adding an item over a result, sends them again. We don't store them on our servers. We never build a face or body profile, and we don't use your photos to train anything.

Your results are kept on your phone only, for 24 hours, so you can compare them. Save the ones you want; the rest clear themselves. Every result carries a visible AI PREVIEW stamp with a 4-character trace code.

Who else sees them

• Google (Gemini) processes the images to make your try-on, under its paid-API terms, which don't use your content to improve its models.
• Stripe handles payments. Your card details and receipt live with Stripe, not with us.
• PostHog (US) receives product analytics. No photos, no recordings: see below.

We don't sell or share your photos or data with anyone else.

What we keep

• On our server: your device id and its try-on balance (free, paid, or Founding until a date). One log line per try-on: device id, time, IP address (for abuse limits), whether it worked, and the trace code printed on the image. No images, ever. IP addresses are removed from these logs after 90 days. If you send a report, we keep what you write in it.
• On your phone (browser storage, not cookies): the device id; the 18+ tick for two hours; your in-progress photo and items for two hours, so a camera reload doesn't lose them; your results for 24 hours; and whether you dismissed the home-screen prompt.

Analytics

We use PostHog to see where people get stuck: page views and the steps of the app (opening it, adding a photo, adding an item, making a try-on, saving or sharing it, viewing the price, starting and finishing checkout), tagged with your device id and any campaign tags in the link you came from. Session recording and automatic click tracking are off. Photos, images and image addresses are never sent to analytics.

The people in our demos

The shopper shown on our homepage and in our launch ads is an AI-generated model, not a customer. We never show real customers' photos.

Your rights

We don't keep generated images, so there is nothing on our side to delete. To have your device's record and the log lines linked to it deleted, email hello@offtherack.app with your receipt or the 4-character code from one of your try-ons, and we'll do it within 30 days.

If an image of you was made or shared without your permission, tell us and include the 4-character code from its corner. Within 2 business days we trace the code, block the device and IP address that made it, and send you the right takedown form for wherever it was posted.

Age

Off the Rack is for adults 18 and older. Don't upload photos of anyone under 18.

Changes

When this page changes, the date at the top changes too. Questions: hello@offtherack.app.