Privacy Policy

Effective September 30, 2026 · Megu is published by JA Technology Consulting LLC ("we", "us").

This policy describes what Megu collects and how it is handled. Your use of Megu is governed by the Terms of Use, including their disclaimers and limits of liability, which apply equally to the matters described here.

1. What Megu collects

• Account — the name and email from Sign in with Apple or Google, and your date of birth (used to apply the age rules in "Children" below).
• Photos you add — photos you take or choose of your clothing, and the garment cut-outs created from them.
• Your portrait — a photograph of your face and body, only if you choose to use on-body virtual try-on. It is optional; every other feature works without it. See "Your portrait and face data" below.
• Generated images — the try-on and studio images rendered for you, and any share cards you create.
• Style profile — details you enter or that Megu infers, such as fit preferences, sizes, style leanings, and which looks you wear, save or skip.
• Subscription status — whether Premium is active. Apple handles payment; we never receive your card number.
• Usage and diagnostics — in-app events, crash reports (device model, OS and app version) and redacted session recordings of app screens, tied to a pseudonymous identifier. Controlled by Settings → Share usage analytics.

Calendar and location work on your device: if you grant calendar access, event titles are read and classified on the phone and are not uploaded; if you grant location access, your phone fetches the forecast directly from the weather service, and Megu stores only a coarse home-climate coordinate on your profile.

2. How it is used

We use the data above to operate and provide Megu — recognising garments, building your closet, generating suggestions and renders, syncing across sessions — and to secure the service, prevent abuse, moderate submitted images, provide support, comply with law, tell you about our products, services and offers, and improve and develop Megu and our other current and future products and services, including the models and systems that power them (your portrait is excluded from that — see below). We may create and use de-identified or aggregated data for any purpose.

We measure how our advertising for Megu performs. To do that we work with an attribution partner, AppsFlyer, which receives a device identifier (the identifier for vendor and an app-instance identifier — not the advertising identifier), coarse technical data (device model, OS version, app version and the country your connection comes from), and app events such as install, trial start and purchase, so we can tell which advertising campaign an install came from. We do not use Apple's advertising identifier and do not ask for App Tracking Transparency permission. Where the law requires your consent — in the EEA, the UK and Switzerland — this measurement runs only after you turn on Settings → Share usage analytics in the app, and you can withdraw there at any time. Separately, Apple's SKAdNetwork and AdAttributionKit may report installs to the ad network that showed the ad, in aggregate and without identifying you. Your portrait and the renders made from it are excluded from any advertising use.

3. Why we are allowed to use your data

European data protection law requires us to tell you the legal basis for each thing we do with your information. Ours are:

• To provide Megu (performance of a contract) — your account details, closet photos and garments, style profile and sizes, saved looks and plans, and subscription status. Without these the app cannot do what you signed up for.
• Your portrait and try-on renders (consent) — adding a portrait is optional, you give consent by adding it, and you can withdraw at any time by deleting it in the app. Withdrawing does not affect renders created before you withdrew.
• Keeping Megu working and safe (legitimate interests) — crash reports, diagnostic logs, abuse and fraud prevention, and moderation of submitted images. Our interest is in running a stable, secure service, weighed against your privacy and limited to what we need. You can object to this by contacting us.
• Telling you about our products and offers (legitimate interests) — marketing our own products and services to you. You can opt out of marketing messages at any time.
• Measuring our advertising (consent in the EEA, the UK and Switzerland; legitimate interests elsewhere) — the install-attribution data described in "How it is used" above. It is off in those regions unless you turn on usage analytics, and can be switched off in the app's settings anywhere.
• Usage analytics and session recordings (consent in the EEA, the UK and Switzerland; legitimate interests elsewhere) — both are off in those regions unless you turn them on, and can be switched off in the app's settings anywhere.
• Records we must keep (legal obligation) — transaction and tax records relating to subscriptions.

4. AI processing

Megu's features are produced by OpenAI, a third-party AI provider based in the United States. When you use a feature, the data that feature needs is sent to OpenAI to produce the result you asked for: garment photos for recognition, your portrait plus garment images for a try-on render, your prompt and closet details for a styling reply. Megu tells you this and asks for your agreement in the app before any of it is sent.

OpenAI acts for us and may use what it receives only to return your result. We engage it under business terms that require protections equivalent to those described in this policy and that do not permit your content to be used to train its models. If we add or change AI providers, we will name them here.

5. Your portrait and face data

The only face data Megu collects is the portrait photograph you choose to add — an ordinary photograph of your face and body, taken with the camera or picked from your library. Megu does not scan, measure or map your face, and derives no faceprint, face template or other biometric identifier from it or from any other photo.

• Optional and consent-based. Try-on is off until you choose to add a portrait, and you can delete it in the app at any time.
• One purpose. It is used solely to render images of you wearing garments from your own closet, at your request.
• Who receives it, and where it is stored. It is held in private cloud storage tied to your signed-in account, encrypted in transit and at rest, and is sent to OpenAI — the provider named in "AI processing" above — only to render a try-on you asked for. No one else receives it, and it is never made public unless you choose to create a share card from a render.
• Not used to identify you. Megu does not run facial recognition and does not create a faceprint, face geometry scan or any other biometric identifier.
• Not used for training. Neither your portrait nor the renders made from it are used to train our models or, under our provider's business terms, theirs.
• Not sold. We do not sell, lease, trade or otherwise profit from your portrait or your likeness.
• Retention and destruction. It is kept only while your account is active and you keep it there, and is destroyed when you delete it, when you delete your account, or within a reasonable period after your account becomes permanently inactive — in no case later than three years after your last interaction with Megu. Deleting your account also removes every render made from it.

Accounts with a date of birth under 13 cannot use on-body try-on — under 16 in the EEA, the UK and Switzerland. Megu does not knowingly generate on-body imagery of children.

If we introduce a feature that would use your portrait in a different way — anything involving biometric identification or measurement — we will describe it here and ask for your consent for that specific purpose first. It will not apply to a portrait you gave us before you were asked.

6. Who receives data

We do not sell personal data. We share it only with service providers acting for us, by category below, with an AI assistant you choose to connect (see below), and where required by law or to protect our rights. Email us for the current provider list. If this ever changes — including any sharing for cross-context behavioural advertising, which some US state privacy laws treat as a "sale" or a "share" — we will update this policy and provide the opt-out those laws require before we begin.

AI assistants you connect. You can connect Megu to an AI assistant such as ChatGPT (OpenAI) or Claude (Anthropic) by approving the connection in Megu. That assistant then receives what you ask it to work with — your garments with their photos, names and details (including what you have worn and what is in the wash), your saved and planned looks, and your style profile and rules — and, at your request, can add or remove pieces, save or plan looks, log what you wear, or be told when your closet or plans change. Its provider receives this under its own terms with you, not as our service provider, and keeps it under its own policies; deleting data in Megu does not remove copies in your assistant's conversations. The basis is your consent, given when you approve the connection; you withdraw it by disconnecting the assistant, which you can do at any time, and you can limit what it may do in Megu's settings in that assistant. We keep a log of the requests an assistant makes to Megu — which feature, when, and whether it worked, not the content of your conversation — for 365 days, to run and secure the connection.

7. Share cards

A share card is the one thing you can make public: when you create one, that image is published to a link so the person you send it to can view it, and anyone with the link can too. Deleting a share card removes it from our storage but cannot recall copies already saved by others. Only create one from an image you are happy for others to see.

8. Storage, security and retention

Data is encrypted in transit and at rest, and images live in private storage tied to your signed-in account. Your closet is kept while your account is active. When you delete your account in the app, your images, closet, style profile and account are erased; residual copies in routine backups are deleted as those backups expire. Analytics and crash data are retained by those providers on their standard rolling windows. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

• Delete anything — any garment, look, render or your portrait, in the app, any time.
• Delete everything — Settings → Account → Delete account erases all of it.
• Export — Settings → Export closet gives you a CSV of your closet.
• Everything else — for access, correction or portability requests, or to reach us about any right your local law gives you (including under GDPR or US state privacy laws), email info@megucloset.com. We respond within the time your local law requires, and you will not be treated differently for asking. If you are in the EEA or the UK, you can also complain to your data protection authority.

Megu does not use Apple's advertising identifier and does not track you across other companies' apps or websites.

10. Children

Megu is for users 13 and over and is not directed at children under 13; we do not knowingly collect their personal information. If you believe a child under 13 has an account, email us and we will delete it.

11. Changes to this policy

We may update this policy by posting the new version here with a new effective date. If a change materially expands how we use personal data we already hold, we will tell you in the app before it takes effect. Where processing rests on your consent — above all your portrait — a new purpose requires fresh consent.

12. This website

Everything above concerns the Megu app. This website sets no cookies and uses no advertising scripts or cross-site visitor identifiers. When you follow an App Store link, a first-party script sends a small click event to our hosting provider, Netlify: the public page path, page language, button position, date, and a broad source category such as Google, Bing, another website or direct. We do not include your name, email, raw referring URL, search terms, or a visitor ID in that event. We use these events to understand which pages lead readers to the App Store; they do not tell us whether you install the app. The script respects Global Privacy Control and Do Not Track signals. Events are retained in the hosting provider’s operational logs under its configured retention. If you use the press form, we receive what you enter and use it to reply to you.

The site's hosting provider records standard server logs — IP address, timestamp, the page requested and the browser's user agent — to deliver and secure the site. We do not use those logs to profile visitors. Links to Apple, such as the refund page, only send data to Apple if you choose to follow them. If you write to us — by email or the press form — we keep that correspondence for as long as it takes to deal with it.

13. Contact

JA Technology Consulting LLC · info@megucloset.com