Drape ("we", "us") makes an iOS app that composites a photo of a person with a garment image and a pose reference to produce a product-style image. This policy explains what we collect, why, and what you can do about it.
| What | Why | Kept for |
|---|---|---|
| Photos you upload — the person photo, plus the garment and pose you pick from our library | To run the composition and return the result | Deleted within 7 days; generated results within 7 days unless you save them to your device |
| Generated images | To show them to you and let you download or share them | 7 days on our servers |
| Sign-in details — if you use Sign in with Apple, the user identifier Apple gives us; if you sign in with email instead, that email address and a salted password hash (never the password itself) | To keep your credits attached to you across reinstalls and devices | Until you delete your account |
| Credit balance and purchase records — App Store transaction identifiers, credits granted or spent | To deliver what you paid for, prevent fraud, and meet tax/accounting duties | Up to 7 years for accounting records |
| Technical data — app version, iOS version, device model, request timestamps, error codes | To keep the service working and diagnose failures | 90 days |
| Support messages you send us | To answer you | 24 months |
We do not collect your name, phone number or postal address. An email address is held only when you sign in with email or write to support — it is used to run your account or answer you, never for marketing. There is no advertising SDK in the app, and we do not track you across other apps or websites.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
Our servers and storage are in the United States. If you use Drape from another country, your photo will be transferred to and processed in the United States. Where required, transfers rely on Standard Contractual Clauses with our processors.
Depending on where you live (for example the EEA, UK, California, or other US states with privacy laws), you may have the right to access, correct, delete, restrict or port your data, and to object to processing.
Drape is a business tool for adults selling clothing. It is not directed to children, and we do not knowingly collect personal information from anyone under 13 (or under 16 in the EEA/UK). Our pose library deliberately contains no images of minors. If you believe a child has sent us a photo, email us and we will delete it.
Traffic is encrypted with TLS. Access to stored files is restricted: results are served only to the signed-in account that created them, and never through a public link. Uploads and results are deleted on a rolling 7-day schedule; purchase records are kept longer because tax law requires it.
Output images are synthesized, not photographed. We mark them as AI-generated in the app and in the exported file's metadata. If you publish them commercially, disclose that they are AI-generated where the law requires it.
If this policy changes materially we will update the date above and, for significant changes, tell you in the app before the change takes effect.
Drape · itzhaolei@foxmail.com