Privacy Policy

1. Introduction

Meg Tech LLC ("Vesta," "we," "our," or "us") operates the Vesta Wardrobe mobile application and the vestatheapp.com website (together, the "Service"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. If you have any questions, email us at [email protected].

2. Information You Provide

• Account information: your name, email address, phone number, birthday, and gender. We use your phone number to sign you in with a one-time verification code, or you can sign in with Apple or Google.
• Style profile: your answers to our style questionnaire, style preferences and notes you share, and messages you send to the AI stylist.
• Wardrobe content: photos of your clothing and details about your items (such as brand, color, or price) that you add or that we detect from your photos.
• Selfie (optional): if you choose to add a selfie, we store it so the app can recognize you in photos across your devices. Face matching runs on your device; we do not send your face data to third-party face-recognition services, and we never use it for advertising or identification outside the app. You can skip this feature entirely.
• Feedback and support: anything you send us through in-app feedback or by email.

3. Information Collected Automatically

• Usage data: how you interact with the Service — for example the features you use, outfits you save, and screens you visit — collected through our analytics provider.
• Device information: device type, operating system version, app version, time zone, language, and a push notification token if you enable notifications.
• Purchase information: your subscription status and transaction records from the App Store. Payments are processed by Apple; we never see or store your payment card details.

4. Location and Weather

If you choose to allow location access, Vesta uses your device's location to look up your local weather through Apple WeatherKit so outfit suggestions match the conditions outside. Your coordinates are processed on your device and sent only to Apple's weather service — they are never sent to or stored on our servers. We only receive the resulting weather (like temperature and conditions). If you decline location access, the app simply skips weather-based suggestions.

5. Email Import (Optional)

Vesta offers an optional feature that builds your wardrobe from clothing purchases found in your email inbox. This feature only runs if you explicitly connect your email account.

• What we access: with your permission, we use read-only access to your Gmail account to scan for order confirmations, receipts, and shipping emails from retailers.
• What we keep: only the clothing purchase details we find — item name, brand, price, product image, and purchase date — which become items in your wardrobe. We do not store copies of your emails.
• AI processing: we use automated systems, including third-party AI providers (currently OpenAI and Google), to identify clothing purchases in receipt emails. This data is used only to provide the feature — never for advertising, and never to train AI models.
• Human access: we do not read your emails, except in narrow cases permitted by Google's policies — such as with your explicit consent, for security purposes, or to comply with law.
• Disconnecting: you can disconnect your email account at any time in the app's settings or from your Google Account permissions page. Disconnecting deletes our access credentials.

Vesta's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. How We Use Your Information

• Provide, maintain, and improve the Service
• Analyze your wardrobe photos and style profile to generate personalized outfit suggestions and styling advice
• Send you notifications you've enabled and important updates about the Service
• Respond to your questions and provide customer support
• Understand how the Service is used so we can make it better
• Detect, prevent, and address fraud, abuse, technical issues, and security threats

7. AI Processing

Vesta's core features are powered by artificial intelligence. To provide them, we send limited data to AI service providers acting on our behalf: your clothing photos are processed to identify, categorize, and create clean images of your items, and your style profile and stylist conversations are processed to generate recommendations. These providers (listed in Section 8) may only use your data to provide services to us. We do not use your data to train general-purpose AI models. AI-generated suggestions are automated and can be inaccurate — see our Terms of Service.

8. How We Share Information

We do not sell your personal information, and we do not share it for third-party advertising. We share information only with service providers that help us operate the Service, who are bound by confidentiality and data-protection obligations:

• AI providers: Google, OpenAI, Anthropic, Replicate, Runware, and Fireworks — to analyze wardrobe photos and generate outfit suggestions and styling responses
• Cloud hosting and storage: Railway, Cloudflare, and Supabase — to run our servers and store your data and images
• Analytics: PostHog — to understand product usage
• Subscriptions: Apple (payment processing), Superwall, and RevenueCat — to manage subscriptions and purchases
• Communications: SendGrid (email), Telnyx (SMS verification codes), and Apple (push notifications)
• Security: Cloudflare Turnstile and Apple App Attest — to protect against bots and abuse

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition, or sale of assets (in which case this policy will continue to apply to your data).

9. Data Retention and Deletion

We keep your information for as long as your account is active. You can delete your account at any time in the app under Settings → Delete Account. When you delete your account, your personal data — including your photos — is permanently deleted from our systems within 30 days, except for records we are legally required to keep (such as transaction records). You can also request deletion by emailing [email protected].

10. Security

We use technical and organizational safeguards to protect your information, including encryption in transit and access controls on our systems. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you as required by law if a breach affects your information.

11. Children

Vesta is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Our app requires users to confirm they are 13 or older. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

12. Your Rights and Choices

You can:

• Access and update most of your information directly in the app
• Delete your account and data in Settings → Delete Account, or by emailing us
• Control permissions (camera, photos, location, notifications) in your device settings at any time
• Disconnect email import in the app's settings or via your Google Account
• Contact us to exercise any privacy right — we respond to verified requests within the time required by applicable law

If you are in the European Economic Area or the United Kingdom

We process your data to perform our contract with you (providing the Service), for our legitimate interests (improving and securing the Service), with your consent (optional features like location, the selfie, and email import), and to comply with legal obligations. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Our servers are located in the United States; where we transfer data internationally, we rely on appropriate safeguards such as standard contractual clauses.

If you are a California resident

We collect the categories of personal information described in Sections 2–5 for the purposes in Section 6, and disclose them only to the service providers in Section 8. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for purposes requiring a right to limit. You have the right to know, correct, and delete your personal information, and the right not to be discriminated against for exercising these rights.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. The "Last updated" date above reflects the current version.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Meg Tech LLC
Email: [email protected]