Privacy Policy

1. Information You Provide

• Account information. When you create an account, we collect your name or username and email address, and (if you set one) a password. If you sign in with a third-party provider such as Apple, we receive the basic account details that provider shares with us.
• Content you create. We collect the content you add to the Service, including outfit photos you upload, comments, votes, event details (such as event name, date, location, and dress code), moodboards, links, and the names of people you invite or add to an event.
• Messages to us. If you contact support or send feedback, we collect the contents of that message and your contact details.
• Reports. If you report a look, comment, moodboard photo, or person, we collect the reason you choose, what you reported, and any note you add, linked to your account.
• Newsletter signup. If you join our email list, we collect your email address and use it to send you occasional updates about Clothesline. This is separate from your account: you can join without an account, and every email includes an unsubscribe option. We do not sell or share the list, and we delete your address on request or when you unsubscribe.

2. Information Collected Automatically

• Usage data. We collect information about how you interact with the Service, such as features used, screens viewed, and actions taken, to operate and improve the app.
• Device and log data. We collect device type, operating system version, app version, general (non-precise) location inferred from your IP address, and diagnostic information such as crash reports.
• Identifiers. We assign an account identifier and may process device identifiers needed to run the app and keep it stable.

The iPhone app itself collects none of the above. It ships no analytics, no crash reporting, and no advertising identifiers. What is described in this section is collected by theclothesline.app in a browser, through cookieless analytics that record page views and coarse device information. If the app begins collecting any of it, we will update this policy before that version ships.

Clothesline does not access your phone’s contacts. Invitations are sent through links you choose to share. If this changes in a future version, we will update this policy before the feature ships.

3. Cookies and Similar Technologies

We use only the cookies the Service needs to work. Specifically, we set strictly necessary cookies that keep you signed in and secure your session. We do not use advertising, targeting, or cross-site tracking cookies. Our site analytics (Vercel Web Analytics) are cookieless and collect aggregated, de-identified usage data. Because we use no non-essential cookies, there is nothing to opt in or out of; if that ever changes, we will ask for your consent first. You can clear or block cookies in your browser settings, but blocking the strictly necessary ones will prevent you from staying signed in. Clothesline itself sets no advertising cookies. If you tap a shop link that passes through an affiliate network, that network and the store may set their own cookies on their websites to credit the purchase. Those cookies are governed by their policies, and you can block them in your browser settings.

4. How We Use Information, and Our Legal Bases

• To provide the Service — create your account, host events, display outfits, run voting, and show attendee lists (performance of our contract with you).
• To enable the social features of the app, including sharing your content with the other people in the events you join (performance of our contract with you).
• To maintain, secure, troubleshoot, and improve the Service (our legitimate interests in running a safe, reliable app).
• To review reports and enforce our Community Guidelines, including emailing our team when a new report comes in so a person can read it promptly (our legitimate interests in keeping the Service and its users safe, and legal obligation).
• To communicate with you about your account, updates, and support requests (performance of our contract, and our legitimate interests).
• To comply with legal obligations and enforce our terms (legal obligation, and our legitimate interests).

Where the law of your region (for example, the EEA or UK) requires a legal basis for processing, the bases noted above apply. Where we ever rely on your consent, you can withdraw it at any time.

5. How Information Is Shared

• With other users. Content you post to an event (outfit photos, moodboard photos, comments, votes, your name) is visible to the other people in that event. Think of an event as a shared group space.
• With service providers. We use trusted third parties to host and operate the Service. Today those are Supabase (database, authentication, and photo storage), Vercel (web hosting and cookieless analytics), Resend (email delivery), and Google Workspace (our team email). We use Resend to alert our team when someone files a report, and those alerts arrive in our Google Workspace inbox. Each alert contains the names and usernames of the person who reported and the person reported, the name of the event involved, the reason, and any note the reporter added. Alerts never include photos or links to them. These providers may process information only on our behalf, under obligations of confidentiality, and we will update this policy if the list changes materially.
• Shop links. When someone adds a link to where a piece is from, tapping it opens that store’s website in your browser, and some of these links pass through an affiliate network first so that Clothesline can earn a small commission if you buy something. We do not send the network or the store your name, your account, or the event or look the link came from; they receive only what your browser sends when you visit them, such as your IP address and device type, and they handle it under their own privacy policies. A link a friend shared that is already their own affiliate link opens exactly as they shared it, and Clothesline earns nothing from it.
• Password check. When you create an account, reset your password, or change it, your device checks the new password against Have I Been Pwned’s Pwned Passwords service, a public list of passwords exposed in data breaches. Your password itself is never sent. Your device sends only the first five characters of a one-way hash of it, gets back the breached hashes that begin the same way, and makes the comparison itself, so the service cannot tell which password was checked. Like any website your device contacts, the service receives your IP address. If the password is on the list, we won’t accept it and will ask you to choose another.
• For legal reasons. We may disclose information if required by law or to protect the rights, safety, and security of our users or the public.
• Business transfers. If Clothesline is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined by the California Consumer Privacy Act (as amended by the CPRA). We have not done so in the preceding twelve months, and we do not use your information for cross-app or cross-site advertising tracking.

6. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Copies may persist in encrypted backups for a limited time before those backups are cycled out.

7. Your Choices and Rights

• Access and update. You can review and edit your account information in the app.
• Delete your account. You can delete your account and associated content at any time from within the app, or by emailing us at the address below.

If you are in the EEA, UK, or a region with similar law, you have the right to access, correct, delete, or receive a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection supervisory authority.

If you are a California resident, you have the right to know and access the personal information we collect, the right to correct or delete it, the right to opt out of its sale or sharing (we do not sell or share it), the right to limit use of sensitive personal information (we do not use sensitive personal information for purposes requiring that right), and the right not to be discriminated against for exercising any of these rights. You may designate an authorized agent to make a request on your behalf.

To exercise any of these rights, email us at the address below. We will verify your request through the email associated with your account and respond within the time required by law.

8. Children's Privacy

Clothesline is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact us and we will delete it.

9. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International Users

We may process and store information in the United States and other countries. Where we transfer personal information from the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses with our service providers. By using the Service, you understand your information may be transferred to locations that may have different data protection rules than your own.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date above, note which version it replaces, and, for material changes, provide a more prominent notice within the app. Prior versions are available on request.

12. Contact Us

If you have questions about this Privacy Policy or your information, email us at hello@theclothesline.app.