Privacy Policy

1. What Megu collects

Calendar and location work on your device: if you grant calendar access, event titles are read and classified on the phone and are not uploaded; if you grant location access, your phone fetches the forecast directly from the weather service, and Megu stores only a coarse home-climate coordinate on your profile.

2. How it is used

We use the data above to operate and provide Megu — recognising garments, building your closet, generating suggestions and renders, syncing across sessions — and to secure the service, prevent abuse, moderate submitted images, provide support, comply with law, tell you about our products, services and offers, and improve and develop Megu and our other current and future products and services, including the models and systems that power them (your portrait is excluded from that — see below). We may create and use de-identified or aggregated data for any purpose.

We may also, in future, use personal data to advertise Megu and to measure how that advertising performs, including by working with advertising, attribution and analytics partners. We do not do this today. If we begin, we will update this policy first, and where the law requires your consent or gives you a right to opt out, we will ask for it or provide it before that use starts. Your portrait and the renders made from it are excluded from any advertising use.

3. Why we are allowed to use your data

European data protection law requires us to tell you the legal basis for each thing we do with your information. Ours are:

4. AI processing

Megu's features are produced by OpenAI, a third-party AI provider based in the United States. When you use a feature, the data that feature needs is sent to OpenAI to produce the result you asked for: garment photos for recognition, your portrait plus garment images for a try-on render, your prompt and closet details for a styling reply. Megu tells you this and asks for your agreement in the app before any of it is sent.

OpenAI acts for us and may use what it receives only to return your result. We engage it under business terms that require protections equivalent to those described in this policy and that do not permit your content to be used to train its models. If we add or change AI providers, we will name them here.

5. Your portrait and face data

The only face data Megu collects is the portrait photograph you choose to add — an ordinary photograph of your face and body, taken with the camera or picked from your library. Megu does not scan, measure or map your face, and derives no faceprint, face template or other biometric identifier from it or from any other photo.

Accounts with a date of birth under 13 cannot use on-body try-on — under 16 in the EEA, the UK and Switzerland. Megu does not knowingly generate on-body imagery of children.

If we introduce a feature that would use your portrait in a different way — anything involving biometric identification or measurement — we will describe it here and ask for your consent for that specific purpose first. It will not apply to a portrait you gave us before you were asked.

6. Who receives data

We do not sell personal data. We share it only with service providers acting for us, by category below, and where required by law or to protect our rights. Email us for the current provider list. If this ever changes — including any sharing for cross-context behavioural advertising, which some US state privacy laws treat as a "sale" or a "share" — we will update this policy and provide the opt-out those laws require before we begin.

CategoryWhat they do / what they receive
Cloud infrastructureHosting, database, authentication, private image storage — account details, closet data, style profile, images.
AI providerOpenAI (United States) — recognition, styling, try-on rendering, image moderation: the images and details each request needs, under terms requiring protections equivalent to this policy.
Subscription managementPurchase and renewal validation — app user ID and purchase status.
Analytics & crash reportingFeature usage and crash diagnosis — pseudonymous ID, events, device model, OS and app version, and redacted session recordings.
Apple & GoogleSign-in, App Store purchases, device integrity — account identifier and purchase records.
WeatherForecast, requested by your iPhone directly — approximate coordinates, no account identifier.

7. Share cards

A share card is the one thing you can make public: when you create one, that image is published to a link so the person you send it to can view it, and anyone with the link can too. Deleting a share card removes it from our storage but cannot recall copies already saved by others. Only create one from an image you are happy for others to see.

8. Storage, security and retention

Data is encrypted in transit and at rest, and images live in private storage tied to your signed-in account. Your closet is kept while your account is active. If your Premium subscription lapses, your closet is retained for at least 30 days and then becomes eligible for automatic deletion. When you delete your account in the app, your images, closet, style profile and account are erased; residual copies in routine backups are deleted as those backups expire. Analytics and crash data are retained by those providers on their standard rolling windows. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

Megu does not use Apple's advertising identifier and does not track you across other companies' apps or websites.

10. Children

Megu is for users 13 and over and is not directed at children under 13; we do not knowingly collect their personal information. If you believe a child under 13 has an account, email us and we will delete it.

11. Changes to this policy

We may update this policy by posting the new version here with a new effective date. If a change materially expands how we use personal data we already hold, we will tell you in the app before it takes effect. Where processing rests on your consent — above all your portrait — a new purpose requires fresh consent.

12. This website

Everything above concerns the Megu app. This website is separate and much simpler: megucloset.com sets no cookies and runs no analytics, advertising or tracking scripts. If you use the press form, we receive what you enter and use it to reply to you.

The site's hosting provider records standard server logs — IP address, timestamp, the page requested and the browser's user agent — to deliver and secure the site. We do not use those logs to profile visitors. Links to Apple, such as the refund page, only send data to Apple if you choose to follow them. If you write to us — by email or the press form — we keep that correspondence for as long as it takes to deal with it.

13. Contact

JA Technology Consulting LLC · info@jatechnologyconsulting.com