Privacy Policy

ATTYR (“we”, “us”) is operated by ATTYR, Inc., a Delaware corporation, 244 St Pauls Ave, Jersey City, NJ 07306, USA. We decide how and why your personal information is used, so we are its “controller” or “data fiduciary”.

• Contact: privacy@attyr.app
• Data Protection Officer: we haven't appointed one. The GDPR doesn't require a Data Protection Officer for the kind of processing ATTYR does. For anything about your privacy, email privacy@attyr.app.
• India Grievance Officer: Srijith Reddy Maramreddy, Founder, privacy@attyr.app

This policy covers the ATTYR apps, attyr.app, the ATTYR browser extension, and ATTYR Trial Room in stores. It doesn't cover the websites of shops you visit from ATTYR. Those shops have their own policies.

ATTYR is for adults. You must be 18 or older to use it (see ATTYR is for adults).

“You choose” means the feature is optional and nothing is collected unless you use it.

Sensitive information. Some of this is “sensitive” under US state, EU, UK, Indian or Japanese law:

• face and body images and the geometry derived from them;
• body measurements and fitness context;
• modesty preferences, which may reveal religious belief;
• pronouns, which may reveal gender identity.

We use sensitive information only to provide the feature you asked for, and only with your consent where the law requires it. We never use it to infer things about you for any other purpose. We don't use it for advertising, and we don't sell it.

The legal-basis column uses EU and UK GDPR terms. Other regions are covered in Your privacy rights.

No automated decisions with legal effect. ATTYR suggests outfits and sizes. It doesn't make decisions about you that have legal or similarly significant effects.

• ATTYR uses AI services to read your clothes, write styling advice, make images and short videos of you (with your permission), check images for safety, and transcribe voice.
• We send a provider only what's needed for the task you started.
• The providers are listed by name on Our service providers.
• In the app (from version 1.1), before ATTYR first sends your information to these AI providers, it asks your permission. You can say “Not now” and keep using the parts of the app that don't need AI, and change your answer anytime in Settings → Privacy → AI permission. While it's off, the app doesn't send requests that would reach an AI provider, and our servers stop the background AI work they'd otherwise do for you (like preparing a daily outfit or matching your closet). Safety checks on things you've already posted publicly can still run. Images of you need the separate face-data permission as well.
• No training. We don't use your photos, face or body images, or messages to train AI models, ours or anyone else's. Our providers' terms don't allow them to use them for training either.
• We do use aggregated, de-identified fit feedback (for example, “brand X's medium runs small”) to improve size suggestions for everyone.
• Provider retention. Some AI providers keep request data for a limited time, solely to detect abuse, and then delete it.
• Quality review. A small sample of AI text requests and replies is kept for up to 90 days so trained staff can check quality and safety. Samples are linked to your account, so they're deleted when you delete your account. We never keep images of people for review. You can object at any time by emailing privacy@attyr.app; we'll stop sampling your requests and delete the samples we hold.
• Atti is an AI. Atti is an AI stylist, not a person.

The full notice is the Biometric & Face Data Notice. In short:

• Try-on, avatar, hair, Animate, photo sizing, live try-on and Trial Room pictures use photos or video of your face and body. Some laws call the geometry derived from them a biometric identifier, including Illinois (BIPA), Texas (CUBI), Colorado, Washington and others.
• We ask for your separate written permission before collecting it.
• We use it only to make the images and sizes you ask for, and to check safety.
• We never use it to identify you, for advertising or for training, and we never sell it.
• We destroy it at the latest 12 months after you last use a face feature, or sooner when you delete it, withdraw permission or delete your account.
• Showing an image of your face to anyone else needs a second, separate permission.
• Washington, Nevada and Connecticut residents: see the Consumer Health Data Privacy Policy.

Live try-on shows a piece on you as you move, using your camera live. It's optional and 18+ only. It's offered in the ATTYR app and in some Trial Room stores, only in the countries and US states where we've switched it on, and never in Illinois, Texas or Washington.

• Permission first: your face-data permission, plus a separate live permission on its own screen, which tells you who our live video partner is.
• Who receives it: our live video partner (listed on Our service providers), only to show the clothes on you during that session. To check that live is offered where you are, the app tells us your country and, in the US, your state.
• Not kept, not used for training: the video isn't kept after the session and isn't used to train AI. ATTYR doesn't record it.
• Pictures: a picture you choose to capture carries a visible “AI try-on · ATTYR” label. In the app it's deleted after 24 hours unless you save it (a saved picture is kept like your other try-on images); in a Trial Room, when your visit ends unless you keep it.
• Turning it off: you can withdraw your live permission at any time by emailing privacy@attyr.app, or by deleting your account. Photo try-on works without it.

Most of ATTYR is private to you.

Messages (direct and Crew) are stored on our servers so they can be delivered. They are not end-to-end encrypted. Automated safety systems check messages for abuse and can hide a message they flag. ATTYR staff see a message only if it's reported or flagged, or the law requires it. If you delete your account, your direct-message conversations (both sides) and the crew messages you sent are deleted too.

We don't sell or “share” personal information (as California and other states define those words). No ads, no data brokers, no cross-app tracking.

We disclose information only in these situations:

1. Service providers that work for us under contract: hosting, storage, AI, email, payments, notifications and crash reporting. They may use your information only to provide their service to us. See Our service providers.
2. People you choose: when you post, message or share a link.
3. Shops, when you click through to buy. The shop's own policy applies there, and the shop or its affiliate network may set its own cookies. Some links earn ATTYR a commission.
4. Stores, for Trial Room: see ATTYR Trial Room.
5. Payment platforms: Apple, Google and our payment processors handle payments. We receive a record of the purchase, not your card details.
6. Legal and safety: to comply with law or a valid legal request, to enforce our terms, or to protect anyone's safety, including responding to intimate-image removal requests.
7. Business transfers: if ATTYR is merged or sold, your information would move with it, under this policy's promises. We would tell you first.

The Fitting Room lets you try on pieces you see, in a shop or online. You add a piece by taking a photo, picking a screenshot, or pasting or sharing a link to it.

• What we do with a photo or screenshot: our AI providers read what the piece is (and its price tag, if it's in the picture) and cut out a clean picture of just the garment. Only that cut-out is used for a try-on picture or a live look. Your original photo never goes to our live video partner.
• Your original is deleted quickly: a photo or screenshot can show other people, so we delete your original usually within 30 minutes of cutting out the garment, and within 24 hours at the latest, even if no cut-out was made. If you saved the piece to your wishlist or closet before a cut-out was made, that saved picture stays with your other saved things until you delete it.
• Links: we read the shop's page for the product's name, price and picture. We never open links to social apps; for those, use a screenshot.
• How long a piece lasts: what we read, your size, outfit ideas, the cut-out and a link's product picture are deleted 30 days after you add the piece, or sooner if you delete it. Anything you save to your wishlist or closet stays until you delete it.
• Other people: add pictures of the piece, not of other people. We use your pictures only to find and show the garment.

This applies when you scan an ATTYR code in a partner store, with or without an ATTYR account. In stores, the Trial Room is now called the Fitting Room; it works as described here.

• What we collect:
  • your place in the line;
  • the pieces you add (by photo, link or tag) and sizes you give;
  • if you choose, a photo of you and the try-on pictures we make from it;
  • live try-on video, only where it's switched on and you separately agree (below);
  • a record of your consent choice.
• Who's responsible: ATTYR is responsible for your data in Trial Room.
• What the store sees: your number and place in the line, and the pieces and sizes you ask staff to bring. The store never sees your photo or your try-on pictures.
• Deleted when your visit ends: your photo, any pictures you didn't keep, your piece photos, the height, weight and sizes you typed into the size helper, and your turn-alert subscription. A visit ends when you tap “Delete everything now”, after 45 minutes without activity, 2 hours after your fitting-room visit, at the store's closing time if it has set one, or 12 hours after you joined at the latest.
• Deleted within 30 days: the rest of the visit record (your basket and your place in the line) is deleted, or stripped of any link to you, within 30 days.
• What we keep:
  • pictures you choose to keep move into your ATTYR account, once you sign in and give the app's face-data permission (18+);
  • a record of your consent choice, with no image and no face, kept for 5 years as proof of consent;
  • de-identified counts for the store (for example, how long people waited).
• Age: making pictures of yourself is for 18+ only. If you're under 18, you can still join the line and get size help, but the camera stays off.
• Pictures are labelled: try-on pictures made in the Trial Room carry a visible “AI try-on · ATTYR” label.

Live try-on in the store (only where switched on, only with separate consent)

• In a store where it's switched on, if you tap Live and agree on its own screen, video from your camera (never sound) goes to our live video partner for a few seconds per look to show the piece on you as you move. See Live try-on.
• ATTYR doesn't record the video. Only a still you choose to capture is kept, and only until your visit ends unless you keep it.
• On your phone, other people in view are blanked before anything is sent.

ATTYR is based in the United States, and we process your information mainly in the US. Some providers process it in other countries; see Our service providers. Where EU, UK or Swiss law requires a transfer mechanism, we rely on:

• the European Commission's Standard Contractual Clauses, with the UK Addendum, in our providers' data-processing terms; and/or
• the provider's certification under the EU-US Data Privacy Framework (and its UK and Swiss extensions).

Ask privacy@attyr.app for a copy of the relevant safeguards. Japan, India and other regions: see Your privacy rights.

• Encryption in transit and at rest.
• Access limited to staff who need it.
• Passwords stored only in a form we can't read.
• Provider terms that require security and confidentiality.

No system is perfect. Report issues to security@attyr.app. If a breach affects you, we'll notify you and the authorities as the law requires.

• On attyr.app: we use only what's needed to make the site work. In the Trial Room we set two cookies of our own: one keeps your visit going and lasts only as long as the visit; the other lets you get back to your visit on the same phone and lasts one day. A partner shop's sign-in and an invite code are remembered in the browser's own storage. No advertising, analytics or tracking cookies. Our pages load fonts from Google Fonts, which receives your IP address.
• In the app: your sign-in is kept in the device's secure storage. Other app data (such as the try-on photo you picked, your recent chats, and your closet for offline use) is stored on your device and cleared when you sign out or delete the app.
• No third-party tracking. We don't use third-party advertising, attribution or analytics tools, and we don't track you across other companies' apps or websites.

• The extension can run on any site, because we can't know in advance where you shop. It checks pages in your browser to tell whether a page is a product page. That check never leaves your device.
• Information reaches us only when you act:
  • when you ask Atti about a product, we receive that product's details and size chart;
  • when you turn on Atti's Picks for a shop, we receive the product listings you see on that shop, plus what we showed you and what you clicked.
• We keep the shops where you used it, the products you asked about, and your clicks.
• We don't collect your browsing on non-shopping sites, we don't build an advertising profile, and we don't sell or share any of it.
• If you install it from the Chrome Web Store, our use of information received through it follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

• When we make a material change, we tell you in the app or by email before it takes effect, ask you to agree in the app, and update the version and date above.
• If a change affects something you consented to (such as face features or AI permission), we ask for your consent again. Until you give it, that feature stays off for you.
• Earlier versions are available on request at privacy@attyr.app.