Privacy Policy

Who we are

Vaultrobe is an Android digital wardrobe app. The operator of the app and this site is Vaultrobe. Contact privacy@vaultrobe.app for privacy requests.

The app stores your closet catalog on your phone. Photos leave the phone when you choose a feature that needs cloud processing, or when you turn on backup.

Who the app is for

Vaultrobe is a general wardrobe app for people 13 and older. It is not directed at children under 13. In Play Console, select 13–15, 16–17, and 18 and over, and leave every under-13 group unselected.

Onboarding can record an age range you choose, including “Under 18,” as a style preference stored on the device. That range is not a check that lets children under 13 use the app. Do not use Vaultrobe if you are under 13.

Photos for wardrobe indexing and virtual try-on

Vaultrobe collects photos you take or choose. Those photos are used for wardrobe management and virtual try-on. The app does not collect videos.

You can photograph a garment with the camera, or choose existing pictures with the Android photo picker. The picker gives the app access only to the images you select. Virtual try-on uses two photos you provide: a photo of a person and a photo of a garment.

Two features send those photos off the device, and only after you run them:

• Wardrobe indexing. The app sends the garment image to the Firebase HTTPS callable function classifyWardrobeItem. The function returns catalog labels (category, color, formality, and similar attributes) so the item can be filed in your closet.
• Virtual try-on. The app sends the person photo and the garment photo to the Firebase HTTPS callable function virtualTryOn. The function returns a generated try-on image, which is saved back on your phone.
• On-device work stays on the phone. Your closet database, background removal with ML Kit, cropping, and outfit suggestions that do not call those functions are processed locally.

How images are protected in transit

Images sent for indexing or virtual try-on travel over HTTPS. The app calls Firebase Cloud Functions with authenticated HTTPS callable requests. Google’s Firebase and Cloud infrastructure terminates that TLS connection and runs the function.

Before upload, indexing images are scaled down on the device and encoded as JPEG. Try-on images are also encoded as JPEG on the device. The payload is the image data needed for that request, plus a fixed cataloging prompt for indexing.

A Firebase user is required for those calls. If you are not already signed in with Google, the app can open an anonymous Firebase session for the request. Sign-in traffic also uses HTTPS.

Other information

The closet itself — items, outfits, wear history, laundry state, and preferences such as style, gender, age range, height, and body shape — is stored in on-device storage (a local database and preferences). Those fields are sent off the phone if you export a backup or turn on Google Drive backup.

• Account. Google Sign-In, when you use it, provides your email address, name, and a Google ID token. Firebase Authentication keeps a user ID for that account. Anonymous sign-in creates a Firebase user ID without an email.
• Location. With your permission, the app reads approximate or precise location to request a weather forecast from Open-Meteo over HTTPS. If device location is unavailable, the app may request an approximate location from ipapi.co using your IP address.
• Voice. Optional voice remarks record audio on the device. Speech-to-text uses Android’s speech recognizer, which can send the utterance to Google’s speech service over the network.
• Purchases. Credit packs are sold with Google Play Billing. Google processes payment. The app records the credit balance on the device.
• Security signals. Firebase App Check (Play Integrity) sends an integrity token to Firebase so AI functions can reject abused clients.
• Backup. Google Drive backup is off until you connect it. It then stores an app backup in your Drive app-data folder. You can also export a local file.

App permissions

AndroidManifest.xml for com.vaultrobe.app requests CAMERA so you can capture garment photos and photos for virtual try-on. The camera is optional hardware; the app still installs on devices without one.

The manifest does not request READ_MEDIA_IMAGES or READ_EXTERNAL_STORAGE. Choosing a photo from the gallery uses the system photo picker, which does not need broad access to your library.

The manifest also requests RECORD_AUDIO for voice remarks, ACCESS_COARSE_LOCATION and ACCESS_FINE_LOCATION for weather outfits, INTERNET and ACCESS_NETWORK_STATE for network features, USE_BIOMETRIC for the optional app lock, and POST_NOTIFICATIONS, SCHEDULE_EXACT_ALARM, and RECEIVE_BOOT_COMPLETED for wear reminders.

Use and sharing

Photos are used to build and show your wardrobe and to produce a try-on image you asked for. They are not sold, and they are not used for advertising. The app has no ad SDK.

Firebase (Google) processes indexing and try-on images, authentication, remote configuration, and App Check as a service provider for those features. Open-Meteo receives coordinates when a forecast is requested. ipapi.co receives a request from your network when IP location is used. Google’s speech service may receive voice audio when you dictate a remark. Google Drive receives a backup only after you connect backup. Google Play processes purchases.

Retention and deletion

Garment photos, try-on results, and the closet catalog remain on your device until you delete the item or uninstall the app. Device backup, if enabled in Android settings, may keep a copy with your Google account.

Indexing and try-on photos are transmitted to complete that request. Email privacy@vaultrobe.app to ask us to delete your Firebase account and any records tied to it. Use the Google account you signed in with, or include the address shown in the app. We will delete the Firebase Authentication user. Uninstalling the app removes its on-device files.

This page is the web request point for account and data deletion: https://vaultrobe.vercel.app/privacy#delete-your-data.

Children

Vaultrobe is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has used the app, email privacy@vaultrobe.app and we will delete the associated account data we can identify.

Changes

We will post changes on this page and update the date above. Continued use of the app after the new date means the updated policy applies to later processing.