Legal
Privacy Policy
Last updated 29 October 2026
1. Who is responsible
The controller for your personal data is:
- Service
- RunwayTwin
- Provider
- Adapthrive, eenmanszaak (sole proprietorship) registered in the Netherlands
2. What we collect and why
- Account details (name, email) to give you an account — performance of contract (art. 6(1)(b) GDPR).
- Style profile, closet items, saved looks and lookbooks you create — performance of contract.
- Photos you upload to Shop the Look — to analyse the clothing in them for you (performance of contract).
- Usage counts (how many AI looks you used this month) — to apply the free allowance (performance of contract).
- Subscription and payment status from Stripe — to provide Pro and keep our accounts (contract; legal obligation). We never see your full card details.
- Clicks on shop links (which shop and search term) — to measure which shops are useful and to account for affiliate commission (legitimate interest, art. 6(1)(f)).
- For signed-out visitors: a one-way hashed IP address, kept per day, to stop abuse of the free try-out (legitimate interest).
3. Your photos
Photos are uploaded to private storage and are never made public. They are sent to an AI model only to describe the clothing and accessories in them. We do not identify people, do not use facial recognition and do not create biometric templates. If someone in the photo is recognisable, that is incidental to describing their outfit.
A copy is only added to your account if you save the look. You can ask us to delete any photo at any time.
4. Who processes data for us
- Base44 (Wix.com Ltd.) — hosting, database, authentication, file storage and access to AI models.
- AI model providers made available through Base44 (such as Google) — to generate looks and analyse photos. Your data is not used by us to train models.
- Stripe — payments and subscription management.
- Affiliate networks (such as Skimlinks or Awin) — only when you click a shop link, to track a possible commission.
Some of these providers process data outside the European Economic Area. Where they do, transfers rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses.
5. How long we keep data
- Account data: until you delete your account.
- Uploaded photos: until you delete them or your account; saved looks keep their photo for as long as you keep the look.
- Hashed IP records for signed-out use: 30 days.
- Payment and invoice records: 7 years, as required by Dutch tax law.
6. Cookies and local storage
We use only what the service needs to work: login sessions and a small counter in your browser for the signed-out free look. We do not set advertising cookies. When you click a shop link, the shop or affiliate network may set its own cookies on its site; their policies apply.
7. Your rights
You may ask us for access to, correction or deletion of your data, to restrict or object to its use, and for a copy in a portable format. Email us using the address above. You also have the right to complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
8. Changes
We will update this policy when our processing changes and show the date at the top.