What we keep of you, and what we do with it

Version 2026-09-16, revised 2026-11-13 (signing in with Apple or Google; what is kept after erasure to recognise a welcome gift; the organization's address), on 2026-11-10 (backups of your account data: encrypted, kept at most 30 days; on 2026-09-24: the forecast on our homepage; on 2026-09-23: your location, morning notes, your voice, the weather and place services, the assistant's model vendor) · closed beta · HaloSync Global, Ontario, Canada

The short version

StyleCast puts clothes on a picture of you. To do that it has to hold pictures of you. They stay on our own server, you can erase them yourself at any time, and we never sell them, train on them, or show them to anyone you did not share them with.

What we collect

• Your account. Your email address, your name if you give one, a password (stored hashed, never readable), the plan you are on, and the terms you agreed to and when.
• If you sign in with Apple or Google. StyleCast receives from Apple or Google your name if you choose to share it, your email address (or, if you choose Apple's Hide My Email, a private relay address that Apple forwards to you), and an account identifier that Apple or Google gives StyleCast for you. We use them to sign you in, and keep them with your account until you erase it. StyleCast never posts to your Apple or Google account and reads nothing else from it. When you erase your StyleCast account, we tell Apple, which ends the link between your Apple ID and StyleCast.
• Photos you put up. Photos of yourself, of clothes and accessories, and the sets of views we make from them so the studio can dress you.
• Pictures and clips we make for you. Every picture, clip, 3D view and take you ask for, with a plain record of what was checked and whether it passed.
• What you did. Which buttons you pressed, what was charged and refunded, what you shared, and the questions you asked the assistant. Not your keystrokes. Your location only when you share it, as below.
• Where your connection comes from. The network address of each request, used to limit sign-ups, sign-ins and front-desk questions per address, and kept in our server log when a sign-in is refused.
• Where you will be, when you ask what to wear. Only when you press Use my location does the studio ask your browser where you are. It is rounded on your device to about 1 km, used for that question and at most two more within 30 minutes, and then forgotten; it is not kept with your plan, given to the assistant, or written into our logs. A town you type instead is looked up so the forecast knows where it is.
• The forecast on our homepage, with or without an account. Only when you press Use my location there does the page ask your browser where you are. It is rounded on your device to about 1 km and passed through our server to MET Norway for that forecast — again when the page brings the forecast up to date, or when you come back. It is never linked to you, kept with an account or written into our logs. Our server does keep the forecast for that 1 km square in its memory, so the next person nearby is answered without asking MET again, and clears it out about two hours after fetching it (later only if MET says it is still current). A town you type instead is passed through our server to OpenStreetMap's Nominatim to find it. The town it found is kept in our server's memory for up to 30 days, filed under a code made from your words that cannot be turned back into them; the words themselves are not kept. Your time zone is sent so the hours read in your own time. Your own browser, not our server, remembers the last place you chose (the town's name, or the point rounded to about 1 km) so the forecast is ready next time; Forget beside it clears that.
• Your morning notes, if you save one. A standing note of what to wear keeps its days, its time, your time zone, what it is for, the town it is for, or where you are rounded to about 1 km if you tick that at Save, and whether you asked for it by email. Each day's picks are kept for a week and the record of which mornings were prepared for two weeks. You can pause or delete a note at any time, from its card in the chat or under Morning outfit notes in Your account.
• Your voice, when you tap the microphone. Nothing is heard until you tap it. Where your browser can hear on its own, the studio uses the browser's own speech recognition, and in some browsers, Chrome among them, the browser maker's recognition service hears what you say. Where it cannot, a short recording is sent to our server, which has fal.ai's speech model write it down and discards the recording in the same request. The words are shown to you before anything is sent to the assistant.
• A document photo, when you ask us to check one. We check it against the published rules of the passport or visa office you name. We never alter or make a document photo.

Why we collect it

To make the pictures you ask for, to check them against your own photo so they stay true to you, to charge and refund credits correctly, to answer your questions, and to keep the studio safe. Nothing else. We do not sell or rent any of it, and we do not use your photos to train anything.

Where it lives, and who else touches it

• Our server. Your account, your photos and everything we make are stored on our own server volume. Links to your pictures are signed and expire within a day; a link you share on purpose lives as long as you set, and dies the moment you turn it off.
• The picture engines. To make a picture or a clip, the photos involved are sent to fal.ai, the engine provider that runs the picture models we use, and the finished file comes back to us. For some steps a copy has to sit on the provider's storage for the length of the run; those copies expire on the provider's own schedule and we hold no key to delete them sooner. The provider's own privacy terms apply to that handling.
• The assistant. Your questions to the assistant are answered by a language model. Today that model is DeepSeek's, reached directly at DeepSeek (api.deepseek.com): your question and a plain-words description of what is on your screen are sent to DeepSeek, and DeepSeek's own privacy terms apply to them, including where it stores them. We may route it through another model vendor and will update this notice and its date if we do. It is never handed your photos unless a check needs one.
• The weather and the map. To read a day's forecast, in the studio or on our homepage, we send MET Norway (the Norwegian Meteorological Institute) a point rounded to about 1 km, never your name or your account. To find a town you type we send its name to OpenStreetMap's Nominatim place search, with the country on your account when one is set, so a town of yours is found before one abroad. When no forecast answers for a town you named, we may ask serper.dev, a web search service, for pages about that town's weather; serper.dev also answers when you ask the assistant where to buy something, and, when you ask what to wear for an occasion we do not recognise, we may send it the words you used for that occasion (never your name, your account or your town) to find a few pages about it. Each of these searches carries the country on your account when one is set, so the pages suit where you live. None of them is sent your photos or your email address.
• Email for your morning notes. Only if you tick it on a note, and then press the one link we send to that address to show it is yours, the day's picks are sent through our email provider, and every one carries a link to stop them. Until that link is pressed nothing more is sent to the address.
• Fonts and a 3D viewer. Our pages load their typefaces from Google Fonts and the studio's 3D view loads its viewer from Cloudflare's cdnjs; those servers see your network address and browser type when a page loads, nothing else.
• Apple and Google sign-in. When the studio's sign-in box offers Apple or Google, it loads their sign-in scripts from Apple and Google, which see your network address and browser type; if you choose one of them, that company's own privacy terms apply to signing in with it.
• Nobody else. No advertising networks, no analytics companies, no data brokers.

How long we keep it

Until you erase it. There is an Erase your account button in Your account: it removes your account, your photos, your wardrobe, your sets of views, your pictures and clips, your plans of what to wear and your morning notes, and every link you shared. What stays is the money trail with your name taken off it, which the law asks us to keep, and an unreadable fingerprint that cannot be turned back into your address or account, kept only to recognise that a welcome gift was already given.

Backups of your account data are encrypted and kept for at most 30 days, so data you delete is removed from our backups within 30 days.

Your rights

You may see what we hold (your library shows all of it), download any picture or clip, correct your details, withdraw a photo, and erase everything. You do not need to ask; the buttons are yours. If a button fails you, write to [email protected] and a person answers within five working days. HaloSync, the organization behind StyleCast, can be reached at [email protected]. You may also complain to the Office of the Privacy Commissioner of Canada, or to the Commission d'accès à l'information in Quebec.

Children

StyleCast is for adults. We do not knowingly accept photos of anyone under eighteen, and a photo that appears to be of a minor is refused before any picture is made.

Consent

By putting up a photo you confirm it is of you, or of a person who has agreed to have their picture made here. A house model is a picture we own; dressing a house model needs no photo of you at all.

Changes

When this notice changes, the version at the top changes, and a notice goes up on the site and in the studio before the change applies.