Privacy Policy

Last updated: May 1, 2026

This Privacy Policy describes how Dripsy ("we", "us", "our") collects, uses, and shares information when you use the Dripsy mobile application ("the App"). Dripsy is operated by Michael Cao (sole proprietor, New Zealand), trading as Transform Digital.

Information we collect

Account information. When you sign in with Apple or Google, we receive a unique account identifier and (if you choose to share it) your name and email address. We use this to create your account, save your rating history across devices, and contact you if needed for service or legal reasons.

Outfit photos. When you submit a photo for rating, we send the image to OpenAI's GPT-4o vision model via a secure server-side function for analysis. A compressed copy is also stored in your account so you can revisit your rating history. Photos are not used to train AI models per OpenAI's API data usage policy. You may delete any rating (and its photo) from the History screen at any time.

Ratings and feedback. The AI's output (overall score, written feedback, style categories, suggested fixes) is stored alongside your rating in your account.

Subscription information. If you purchase a Dripsy Pro subscription, the transaction is handled by Apple. RevenueCat — our subscription analytics provider — receives your account identifier so we can verify your subscription status across devices. Payment details (card numbers, etc.) never reach us; they are handled solely by Apple.

Local device storage. Streak counts, rating history caches, and your generated "Drip'd" persona card are stored on your device only. Uninstalling the App removes them.

Information we do NOT collect. We do not collect IDFA or advertising identifiers. We do not run analytics, crash reporting, or behavioural tracking SDKs. We do not collect precise location, contacts, microphone audio, or biometric data. We do not track you across other apps or websites.

How we use your information

Third-party services

ServiceWhat they receivePurpose
OpenAIOutfit photo, no user identifierAI outfit analysis
SupabaseAccount, photos, ratings, historyDatabase, authentication, file storage
RevenueCatAccount identifier, subscription stateSubscription management
AppleSign-in token, payment infoAuthentication, billing
GoogleSign-in token (only if you choose Google sign-in)Authentication
SerpAPIAnonymous style search query (e.g., "olive cargo pants streetwear ootd")Inspiration board search
Amazon (via RapidAPI)Anonymous product search queryShopping recommendations

Each provider has their own privacy practices. Anonymous queries to SerpAPI and Amazon do not include your account identifier or photo.

Data storage and security

Account data and photos are stored on Supabase infrastructure (hosted on AWS) in the United States. If you are located in the European Union, the United Kingdom, or another jurisdiction outside the U.S., by using Dripsy you consent to your information being transferred to and processed in the United States.

We use HTTPS for all network requests and rely on Supabase's row-level security to ensure you only have access to your own data. No system is perfectly secure; in the unlikely event of a data breach involving your information, we will notify you in accordance with applicable law.

Data retention

We retain your data while your account is active. When you delete your account from within the App (Account → Delete Account), we permanently remove your account record, photos, and ratings within 30 days. Some information may be retained longer where required by law (for example, payment records held by Apple).

Your rights

Depending on where you live, you may have the following rights:

To exercise any of these rights, email us at hello@transformdigital.co.nz. We respond within 30 days.

Children's privacy

Dripsy is not intended for users under 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through the App or by email where reasonable. Continued use of the App after a change constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy, or want to exercise your data rights?

Email: hello@transformdigital.co.nz

Operator: Michael Cao, trading as Transform Digital, New Zealand