Privacy.

BLOCK27 (“BLOCK27”, “we”, “us”) operates the BLOCK27 application and website at block27.app (the “Service”), an AI personal styling tool. Questions about this policy or your data: supportblock27@gmail.com.

This policy explains what information we collect, how we use it, who we share it with, how long we keep it, and your rights. By using BLOCK27 you agree to this policy.

Account information. Your email address and password (passwords are stored securely and hashed by our authentication provider).

Photos you upload.Photos of your clothing (“garment photos”). These are the core of the Service — used to analyse your wardrobe and generate outfit and shopping suggestions.

Usage information. Basic information about how you use the Service (features used, plan limits), used to operate the product and enforce limits.

Payment information. If you purchase a subscription in the iOS app, payment is processed by Apple through in-app purchase. We do not receive or store your card or payment details; Apple handles them.

• Provide the Service — analyse your clothes, generate outfits, and produce shopping suggestions.
• Operate your account, enforce plan limits, and provide support.
• Process subscription payments (through Apple) for paid plans.
• Maintain the security and integrity of the Service.

We do not sell your personal information.

To provide the Service, we share certain data with providers who process it on our behalf:

• Supabase — hosting, database, authentication, and storage (your account data and photos are stored here).
• Anthropic — AI analysis of your uploaded garment photos.
• Apple — payment processing for subscriptions purchased in the iOS app (in-app purchase). Apple is the merchant of record for these purchases.
• Sentry— application error monitoring. When the app hits an error, Sentry receives diagnostic data about that error. We configure it to exclude personal data — no photos, no request contents, no email addresses — but it does receive your account’s user id attached to error reports, so we can trace a fault to the affected account.
• Vercel — application hosting/infrastructure.
• Resend — sending account and support emails.

We share only what is necessary for each to perform its function. The garment photos you upload are sent to Anthropic for AI analysis as described above; they are not sent to any other processor.

We keep your account data and photos while your account is active. When you delete your account or specific photos/garments, we delete the associated data and files from our storage. Some limited information may be retained where required for legal, security, or operational reasons. Third-party processors handle retention under their own policies.

The garment photos you upload are used only to run the Service for you — analysing your wardrobe and producing outfit and shopping suggestions. They are never sold and are never used to train AI models, ours or anyone else’s.

You can:

• Access and update your account information in the app.
• Delete individual photos/garments in the app, or delete your entire account — which removes your associated data and files from our storage. See how to delete your account.
• Request information about your data by emailing supportblock27@gmail.com.

If you are in the EU/UK, you have rights under GDPR/UK GDPR — access, correction, deletion, restriction, objection, and portability. To exercise these, contact supportblock27@gmail.com. You may also lodge a complaint with a data protection authority.

Legal basis (EU/UK users). We process your data to perform our contract with you (providing the Service), based on your consent (for uploading and processing your photos), and for our legitimate interests in operating and securing the Service.

BLOCK27 is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. We ask you to confirm you are 16 or older at signup. If you believe someone under 16 has provided us data, contact us and we will delete it.

We use reasonable technical and organizational measures to protect your data, including secure authentication and access controls. No system is perfectly secure, but we work to protect your information.

We and our providers may process your data in countries other than where you live, including the United States and the European Union. Where required, we rely on appropriate safeguards for such transfers.

We may update this policy. We will post the updated version with a new “last updated” date. Material changes will be communicated where appropriate.

Questions or requests: supportblock27@gmail.com.