Privacy Policy — Margot

Last updated: 20 May 2026

This Privacy Policy describes how Margot ("we", "us", "our"), operated by Yassine Benlahmr, collects, uses, and protects your personal information when you use the Margot mobile application (the "App").

By using Margot, you agree to the practices described in this policy. If you do not agree, please do not use the App.

---

1. Who we are

Margot is a mobile application that helps you digitise your wardrobe, get AI-powered outfit suggestions, and decide whether new clothing items fit your existing closet. The App is developed and operated by Yassine Benlahmr.

Contact email: yassine@benlahmr.com

2. Data we collect

We collect only the data necessary to deliver the App's features.

2.1 Data you provide directly

• Account information (optional): email address, name, profile photo if you sign in with Apple or Google.
• Wardrobe data: photos of clothing items you upload, item metadata (category, color, brand, tags, notes).
• Wear logs: which items you wore on which dates.
• Outfit ratings and feedback: love / save / dismiss signals on AI-generated outfit suggestions.
• Subscription receipts: information about premium purchases, validated via Apple StoreKit and RevenueCat.

2.2 Data collected with your explicit permission

• Camera and photo library access (iOS): only used to capture or import photos of clothing items into your wardrobe.
• Calendar access (iOS, optional): used to read event titles and times so the AI can suggest outfits appropriate for your day. Calendar data is processed in memory and not stored persistently.
• Location access (iOS, optional): used to fetch local weather data so outfit suggestions match the day's temperature. Location is processed in memory and not stored.

2.3 Data collected automatically

• Usage analytics: anonymised events (screen views, feature interactions, session length) to improve the App.
• Crash reports: technical diagnostic information sent automatically when the App crashes.
• Device information: model, operating system version, language, time zone.

We do not collect: precise advertising identifiers (IDFA), browsing history outside the App, contacts, microphone audio, health data, or financial account details.

3. How we use your data

We use your data exclusively to:

• Power the App's core features (digital wardrobe, AI outfit suggestions, "Check Before You Buy", Vinted listing generation).
• Personalise outfit recommendations based on your wear history, style preferences, and calendar/weather context.
• Process and validate subscription payments via Apple's IAP system and RevenueCat.
• Diagnose technical issues, monitor App stability, and improve features.
• Communicate with you about account or subscription matters.

We do not use your data for advertising, sell it to third parties, or share it with data brokers.

4. AI processing

Margot uses large language models (currently OpenAI GPT-4o-mini) to generate outfit suggestions and shopping advice. When the AI generates a suggestion, the following information is sent to OpenAI's API:

• Anonymised wardrobe item descriptions (categories, colors, materials — no images or personal identifiers).
• The day's context (weather and calendar summary, anonymised).
• Your stated style preferences.

We do not send your photos, your name, or any direct identifier to AI providers. OpenAI is contractually bound not to use API data for model training.

5. Third parties we share data with

We use a small number of trusted service providers to operate the App.

Provider	Purpose	Data shared
Supabase (hosting and database)	Storage of wardrobe data, accounts, wear logs	All wardrobe data, account data
OpenAI (AI inference)	Outfit suggestion generation	Anonymised wardrobe summaries + context
RevenueCat (subscription management)	Validate and manage premium subscriptions	Subscription receipt + anonymous user ID
Apple (App Store)	Payment processing, app distribution	Per Apple's privacy policy
OpenWeatherMap	Local weather for outfit context	Approximate location only
remove.bg / rembg	Background removal on photos	Item photos (processed in real-time, not retained)

We do not share data with advertising networks, data brokers, or third-party marketing services.

6. How long we keep your data

• Wardrobe data, wear logs, account data: retained as long as your account exists. Deleted within 30 days after account deletion.
• Crash reports and analytics: retained for 90 days, then aggregated/anonymised or deleted.
• Subscription receipts: retained as required by Apple's IAP records (typically 7 years for tax/legal purposes).

You can delete your account at any time from the App's Settings screen, which triggers deletion of all your personal data within 30 days.

7. Your rights (GDPR & equivalent)

If you are located in the European Union, the United Kingdom, or another jurisdiction with similar privacy laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (right to erasure).
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent for optional permissions at any time via iOS Settings.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email yassine@benlahmr.com. We will respond within 30 days.

8. Security

• All data is encrypted in transit (TLS 1.2+).
• Data at rest in Supabase is encrypted (AES-256).
• Access to production systems is restricted to authorised personnel.
• Authentication uses Apple Sign In / Google Sign In OAuth; we do not store passwords.

If we become aware of a data breach affecting your personal information, we will notify you within 72 hours, in accordance with GDPR Article 33.

9. Children's privacy

Margot is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us at yassine@benlahmr.com and we will delete it promptly.

In the European Economic Area and the United Kingdom, the minimum age for using the App is 16 unless a parent or guardian consents.

10. International data transfers

Some of our service providers are located outside the European Economic Area (notably OpenAI and RevenueCat in the United States). Where data is transferred internationally, we rely on Standard Contractual Clauses adopted by the European Commission to ensure your data receives an equivalent level of protection.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you in the App and update the "Last updated" date at the top.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Yassine Benlahmr
Email: yassine@benlahmr.com

For data protection requests, please include "Privacy Request" in the subject line.

This policy reflects standard practice for mobile apps subject to GDPR, UK GDPR, and Apple App Store Review Guidelines. For high-stakes legal review, consult a qualified privacy lawyer.