Privacy Policy

Last updated: September 14, 2026

Drappin ("we", "our", or "the app") finds where to buy the clothes in a photo. This policy explains what data we collect, why, who we share it with, and how long we keep it.

1. Data We Collect

• Account information: Your name and email address from Sign in with Apple (Apple may provide a private relay address instead of your real email), and Apple's stable user identifier for your account.
• Photos you scan: The photo you choose from your library or camera. We do not access other photos on your device.
• Scan results and folders: The store links we find for your photos and the folders you save them into.
• Preferences (optional): Your country, currency, style preferences, favourite brands, budget, the shopping department you choose (women / men) and an age range. They are used only to rank and phrase searches; you can skip any of them.
• Subscription status: Whether you have an active Drappin Plus subscription, the product and expiry date, and Apple's transaction identifier. We never see your payment details.

We do not use advertising identifiers and we do not track you across other apps or websites.

2. How We Use Your Photo

To find matching products, the photo you scan is uploaded to our server and made available at a private, unguessable, time-limited link to SerpAPI, which runs a Google Lens visual search on it. The photo is processed only to produce shopping results and is not used to train any model by us. SerpAPI's and Google's handling of the request is governed by their own privacy policies.

Before uploading, the app checks on your device whether the photo contains clothing, and can detect separate pieces (top, bottom, shoes) so you can search just one. This happens on your device; only the photo or the part you choose is uploaded.

3. How Long We Keep Data

• Photo bytes: Deleted from our servers automatically 30 days after the scan, or immediately when you delete the scan or your account.
• Scan results and folders: Kept until you delete the scan, the folder, or your account.
• Account data: Kept until you delete your account.
• After deletion: We keep only a salted, one-way hash of your Apple identifier together with the number of free scans used, so the free tier can't be reset by re-creating the account. This cannot be linked back to you.

4. Third-Party Services

• Apple: Sign in with Apple and in-app subscriptions (App Store).
• SerpAPI / Google: Visual and product search (receives the photo and the search query).
• Railway: Hosting for our API and database (EU/US data centers).
• Retailers: Tapping a result opens the retailer's website. Some links may contain affiliate tracking so we earn a commission at no cost to you.

We never sell your data.

5. Your Rights

You can delete individual scans or folders inside the app at any time. You can delete your whole account from Profile → Delete account; this permanently removes your data from our servers and revokes the Sign in with Apple token. Depending on where you live (GDPR, CCPA, KVKK), you may also have the right to access, correct, or export your data — email us and we'll help.

6. Security

Data is transmitted over TLS and stored in an access-controlled database. Photo links are signed so they cannot be guessed.

7. Children

Drappin is not intended for children under 13 (or the minimum age in your country) and we do not knowingly collect their data.

8. Changes

We'll update this page and the date above when the policy changes. Material changes are announced in the app.

9. Contact

Questions or requests: hello@shimal.app