STYLST Privacy Policy

Replaces: the waitlist privacy notice of August 28, 2026

STYLST is a personal stylist in an app. You give it your closet, and Stella, the stylist inside it, dresses you. That takes photographs of your clothes and of you, and it takes remembering what you like. This policy says what STYLST collects, what it does with it, who else touches it, how long it is kept, and what you can do about all of that. It is written to be read.

STYLST is made by STYLST LLC, 3214 N. University Ave #211, Provo, UT 84604, United States. Write to privacy@stylst.co about anything in this policy. A person answers.

This policy covers the STYLST app, the service behind it, and the waitlist on our website. It is part of our Terms of Service.

STYLST is for adults

You must be 18 or older to use STYLST. The app asks before you sign in, using the age range on your Apple Account where that is available, and otherwise your date of birth. We keep only the answer that you are an adult, not your age or your birth date. We do not knowingly collect anything from anyone under 18, and if we learn that we have, we delete it. If you believe a minor has an account, write to us.

What STYLST collects

Your account. Your name and email address, from Sign in with Apple or from the email address and password you register with. If you use Apple's private relay, the relay address is what we hold. A display name, if you set one. Your time zone, so that "tomorrow" means your tomorrow.

Photographs. The photos you choose from your camera roll or take with the camera to build your closet, and the photo of yourself you provide so that Stella can show you outfits on you. STYLST reads only the photos you pick, through the system picker; it never asks for access to your whole library. From these, STYLST makes further images: a cut-out and a catalogue-style picture of each garment, and pictures of you wearing outfits. Some of the photos you give are photographs of your body. We treat them that way.

Your closet and your taste. The garments STYLST identifies, their tags and attributes, the outfits it proposes, which ones you save, judge, wear or reject, and why. Stella keeps notes on what she learns about you from all of this: durable preferences, things you have told her to avoid, what you are looking for, and, if you tell her, facts about where you are in life. Notes of that last kind are treated as sensitive: they are shown to you in your profile and nowhere else, you can remove them, and a removed one is fully purged within days.

Conversations. Everything you say to Stella in chat, images you attach, and everything she says back, along with the working record of how each reply was made.

Sizes and measurements. The sizes you enter and any measurements you give so that outfits and try-ons fit.

Your calendar. If you allow it, the title, time and location of events in a window around today, read from the calendar on your device, so that Stella can dress you for what is coming. STYLST never writes to your calendar.

Where you are. An approximate location, rounded to about a kilometre before it leaves your phone, so that Stella can dress you for the weather. You can type a city instead of using location services. STYLST asks the phone for kilometre-level accuracy only, and never for always-on location.

How you use the app. A short list of product events, such as that the app was opened, an onboarding step was completed, a look was viewed or worn, or you signed in. Each is a fixed name with machine-chosen values; none carries anything you typed. These are tied to your account. Before you sign in, a few of the same events may be recorded under a random identifier stored on your device, so we can see where people get stuck before they have an account; if you go on to sign in, those are joined to your account, and if you never do, they are deleted within 90 days.

Device and security data. An identifier we create for your installation, Apple's vendor identifier for your device, your device model and app version, the address your requests arrive from, your app's user agent, and technical characteristics of the connection. We use these to keep your sessions working and to detect abuse, such as attempts to use the free trial many times. They are never used to follow you into other apps or websites.

Notifications. If you allow notifications, the device token that lets Apple deliver them. The notification itself may carry a line of your plan for the day.

Payments. None today. STYLST has no paid plan. If we add one, Apple will handle payment and we will never see your card details.

The waitlist. If you joined the waitlist on our website: your first name and email address; your phone number, only if you chose to give it, together with whether you agreed to receive a launch text and the exact wording you agreed to; whether you use an iPhone or Android and what you find most annoying about getting dressed, both optional; and a referral code of your own and the code of whoever sent you, so we can credit them. Joining the waitlist is free; no card is requested or stored. When STYLST launches, your waitlist details become the start of your account.

What STYLST does with it

Everything above is used to provide the service: to build your closet, to dress you, to plan your week, to remember what you like, to keep your account secure and to answer you when you write to us.

Some of it is also used for three further purposes, which we name separately because you can act on each of them.

To improve the app. The product events described above tell us which parts of STYLST get used and where it breaks. This is measurement, not styling: nothing Stella does for you depends on it. You can turn it off under Profile → Privacy, and the app then records nothing further.

To improve STYLST's models. STYLST is built on machine-learning models that recognise garments, cut them out, and render outfits on a person. We may use the photographs you provide and the images STYLST makes from them to train and evaluate those models, so that they get better for everyone. This is different from Stella learning about you: dressing you from your own closet, and getting better at it for you, is what the app is for and happens either way. Pooled training is the thing you can decline. You can turn it off under Profile → Privacy at any time. When you do, your images are removed from any training set they are in. Images already used to train a model cannot be taken back out of that model. We do not run pooled training today; this section is here so that you have been told before it starts, and so that photographs collected without this notice are never quietly used for it.

To prevent fraud and abuse. The device and security data described above is used to decide whether a sign-up or a session looks like abuse, to enforce limits on how much of the service one account can consume, and to keep repeat abusers out. This is not subject to the app-improvement switch, because it is a different purpose.

Human review. STYLST staff review conversations with Stella, the notes she has kept, and images, including the photographs you provide and the pictures STYLST makes of you in outfits, to check the quality of her work and to improve the product. This is internal to STYLST and limited to the staff who do that work.

For readers in places whose law asks for a legal basis: providing the service and personalising it for you rest on our contract with you; product measurement, model training and fraud prevention rest on our legitimate interests, each with the controls described here; answering a rights request rests on our legal obligations. STYLST is offered in the United States.

Who else touches your data

STYLST does not sell your personal information. STYLST does not share it with advertisers or data brokers, does not build advertising profiles, and contains no advertising or tracking software. We do not use the advertising identifier, and we never ask for permission to track you because we do not.

We do use other companies to run parts of the service. They work for us, under contract, and may use what they receive only to provide their service to us. They are, by category:

Hosted AI providers. Stella's replies are generated by large language models run by a hosted provider. To answer you, that provider receives what you say, what Stella has said before in that conversation, and the context she needs: a summary of your closet, your sizes, the calendar events in view, her notes about you, your approximate location and the weather. It does not receive your photographs or your email address. Try-on images are made by a separate hosted provider, which receives the photograph of you and the pictures of the garments in the outfit. Because these companies are outside STYLST, the app asks for your agreement to this the first time you sign in. Without it, STYLST cannot dress you, so declining means not using the app; you can withdraw your agreement at any time by deleting your account. We choose providers whose terms do not allow them to train on what we send, and we configure our requests to keep them that way; the inventory behind this policy records the terms of each one.

Web search. When Stella searches the web to answer you, the query she composes goes to a search provider. The provider does not receive your identity.

Apple. Sign in with Apple, push notifications, the age range on your Apple Account, and the App Store itself.

Weather. The forecast for your rounded location comes from the US National Weather Service, which receives that rounded location and nothing about you.

Calendar. Calendar events are read on your device and sent to STYLST. If STYLST ever offers a connection to a calendar service such as Google Calendar, connecting it will be your choice, the service's own rules will apply to that connection, and STYLST will read only your events.

Shopping. STYLST does not yet offer shopping. If it does, and you tap a link to a shop, the shop will learn that you came from STYLST and nothing else about you.

Website and waitlist. The waitlist runs on a database host and a website host, which store the waitlist details above on our behalf.

Where your data is processed. STYLST's own servers, and every photograph and conversation stored on them, are in Lehi, Utah. Hosted AI providers and their underlying model providers may process your requests in other countries. We name the providers we use, and the countries they may route to, in the inventory behind this policy, and we choose configurations that keep your data in the United States where the provider offers that.

Aggregated and de-identified information. We may share information about what people wear and how they use STYLST with retail or other partners when it has been aggregated or de-identified so that it cannot reasonably identify you, and we will not attempt to re-identify it.

Legal. We will disclose personal information when the law requires it, to protect the rights and safety of people using STYLST, or to enforce our terms. If STYLST is ever acquired or merged, your information may transfer to the new owner under this policy or one at least as protective, and you will be told.

Your choices

• Share usage data with STYLST and Use my images to improve STYLST's models are two switches under Profile → Privacy. Both are on when you start, because the app tells you about them before it collects a single photo; either can be turned off at any time. The app shows you the setting the server holds, never a guess.
• Location, photos, camera, calendar and notifications are each a system permission you can revoke in your device's Settings. STYLST offers a manual alternative where one exists, such as typing a city.
• Notifications are per category under Profile → Notifications. STYLST sends no promotional notifications; if it ever does, that will be a separate switch that starts off.
• Delete your account under Profile → Privacy → Delete my account and data. Deleting closes your account at once and stops everything it has running. For 14 days your data is kept so that you can change your mind: sign in again inside that window and your account comes back whole. After it, everything is erased within 30 days, with the one exception described under Retention. There is no archive.
• When this policy changes, the app tells you the next time you open it and asks you to read the new version. We keep a record of which version you were shown and when.

Your rights

Whoever you are and wherever you live, you can ask us to:

• tell you what personal information STYLST holds about you and give you a copy of it;
• correct something that is wrong;
• delete your account and personal information;
• give you your own data in a usable form: your closet, your uploaded photos, the pictures STYLST made of you, your sizes and profile, your side of your conversations with Stella;
• stop using your data for product measurement or model training, which you can also do yourself in the app.

A few things are withheld from a copy, and we tell you which: Stella's side of the conversation and the record of how her replies were made, the outfit plans, scores and other working data behind her judgement, and the signals we use to detect fraud. These are STYLST's own work product, and the fraud signals would stop working if they were disclosed. You will be told that each category exists, how many records it holds and over what dates, and the reason it is withheld. A picture of you is never withheld: every image STYLST made of you is yours to have.

To exercise a right, email privacy@stylst.co from the address on your account. That reply is how we know it is you; we will never ask for identity documents or a photograph to prove it. We answer within 30 days, and if a request is unusually complex we will tell you within that time that we need up to 45 more. If we decline any part of a request we will say why, and you can ask us to reconsider by replying. We never treat you differently for exercising a right.

For California residents. The categories of personal information we collect, the purposes, and the categories of third parties they are disclosed to are those set out above. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of; we have not done so in the preceding twelve months. You may designate an agent to make a request on your behalf; we will still confirm the request with you from your account address. The rights to know, delete, correct and to non-discrimination described above are the rights the California Consumer Privacy Act gives you, and we extend them to everyone.

For Utah residents. The rights to access, delete, obtain a copy, and to opt out of the sale of personal data or its processing for targeted advertising apply to you. We do neither of the last two.

How long STYLST keeps things

Unless otherwise stated in this policy or required by applicable law, we may retain personal information for up to two years after your account closes. In practice most of it is gone much sooner, and the specific cases are these:

• A deleted account is recoverable for 14 days and erased within 30, as described above. Erasure removes your account, closet, photographs and every image made from them, conversations, notes, calendar events, sizes, product events, notification tokens and settings.
• One record survives erasure: a one-way hash of your account identifier, with the security data from your sign-up, kept for two years so that we can recognise a repeat abuser. It cannot be turned back into you, and it is deleted on its own when its time is up.
• Aggregate counts computed from product events do not identify anyone and are kept.
• Events recorded before you sign in are deleted within 90 days if no account ever claims them.
• Sensitive notes Stella keeps about your life are fully purged within days of being removed or expiring.
• Working data such as unsaved outfit proposals and the raw results of Stella's tool use are cleared on a schedule of weeks to months while your account is open.
• Backups and logs of our own systems may hold copies for a limited time after the live copy is gone; the two-year ceiling above bounds them.
• Hosted providers keep what we send them for their own short periods, set out in their terms, and in the inventory behind this policy.

Security

Photographs and conversations are stored on servers we control, encrypted in transit, with access limited to the staff who need it; what staff do to an account, and every look at its consent record, is logged. Provider keys never live in the app. The app itself holds only your session and the identifiers described above, in the device keychain. No system is perfectly secure; if a breach affects you, we will tell you, and the authorities where the law requires.

Changes to this policy

When we change this policy, the app shows you the new version the next time you open it, and the new version is published at an address of its own. We keep every published version, and the one you were shown stays readable at its address. Continuing to use STYLST after you have been shown a new version does not enlarge what we may do with data collected under an old one: photographs collected under a version that did not mention a use are not used that way.

Contact

STYLST LLC · 3214 N. University Ave #211, Provo, UT 84604 · privacy@stylst.co