What Kiim keeps, and why.
Kiim identifies the clothes in photos you share with it, finds where to buy them, and can show them on a mannequin. Doing that means handling your photos. This page says exactly what happens to them and to the rest of your data — in plain language, because we'd rather you actually read it.
The short version. We store your account, the photos you import, and what Kiim finds in them. Photos are sent to a few processors to do the identifying and the rendering. A photo of you is only used for try-on if you explicitly say so, and it stays on your phone: each try-on sends a copy that our servers delete as soon as the render is done. We keep a copy only if you turn on Back up to Kiim. The app runs no ads, analytics, or tracking SDKs; the website uses cookieless, aggregate-only analytics. We never sell your data. You can delete everything yourself, in the app, in one step.
Who we are
Kiim is the app and the service at kiim.app. The operator of kiim.app is the data controller for everything described here. For anything about your data, write to hello@kiim.app.
What we collect
The waiting list
The waiting list and Kiim itself are for people aged 16 and over. If you join the waiting list on kiim.app, we keep your email address, when you joined, and where you signed up. We use it to send a confirmation and your invite when your spot opens. You can separately opt in to marketing emails; without that optional consent, we don't send you news, tips or offers. The confirmation and invite are service messages, not marketing. Your email is never shared or sold.
Marketing emails
We send marketing emails only if you opt in at signup, on the waiting list, or in the app's settings. These may include Kiim news, tips and offers. Every email we send has a personal "Email preferences" link, where you can choose those categories or unsubscribe from all optional emails. Account holders can also choose price-drop emails in their preferences when that email option becomes available; price alerts are currently sent by push notification only. You can also turn off marketing emails in the app.
Your account
- Email address and password. The password is stored only as a salted hash; we can't read it. When you choose a password, we check it isn't one already published in a data breach: only the first 5 characters of a hash of it are sent to Have I Been Pwned, which can't work out the password from them, and the comparison happens on our server.
- Username, country and currency. Your username is shown to people you share looks with. Country and currency decide which shops and prices you see. You can change all three at any time.
- Your mannequin choice (women's or men's figure) — a display preference for try-on renders, stored with your account.
- Sign-in sessions. A session lasts 30 days unless you log out.
Photos you import, and what Kiim finds in them
- Outfit photos you take, pick from your library, or send to Kiim through the share sheet. These may be photos of you, of other people, or screenshots. Only import photos you have the right to use.
- What Kiim derives from them: the garments it identifies, the shops and prices it matches, and the looks, closet items and collections you build from that.
A photo of you, for try-on
Virtual try-on renders clothes onto a mannequin. If you'd rather see them on yourself, you can provide a photo of your own body. This is the most sensitive thing Kiim touches, so the rules are strict and enforced by the server, not just the app:
- It is never sent to Kiim without you explicitly consenting in the app at that moment. No consent, no upload.
- Saved photos stay on your phone, in Kiim's own storage in the app (not your camera roll), under Your photos. You can delete them there at any time.
- Each try-on sends a copy to our servers and to the processors that render and check it. Our servers delete that copy as soon as the render is done, and within an hour at the latest if something goes wrong.
- A photo you use once, without saving it, isn't kept anywhere: not on your phone and not on our servers.
- What we do keep is a record of each saved photo: when you consented, the result of the safety check below, and a fingerprint (a code calculated from the image, which can't be turned back into it). It lets us confirm a try-on uses the photo you consented to.
- Back up to Kiim (in Your photos, off unless you turn it on) keeps a copy of your saved photos with your account, so they come back if you change phones. Turning it off deletes those copies from our servers straight away. Without it, your photos may be lost if you reinstall the app or change phones.
- The renders made on your photo are kept with your account like your other renders, until you delete them. They're never shown to anyone else: if you share a look made on your photo, the link shows the same outfit on the mannequin instead, and that mannequin version is what anyone who adds the look gets.
Checking photos for explicit content
Every photo you upload is checked automatically by Google Cloud Vision before Kiim stores it or sends it anywhere else. A photo of you is checked once, when you first add it. A photo that looks like nudity or sexual content is refused and not kept. Swimwear and underwear are fine. We keep a record of each check (the result, when, and which account) so we can look into problems and improve the check; the record stays even after an account is deleted.
Notifications
If you turn on notifications, we store a push token for your device so we can tell you when a render is finished. It is removed when you log out, and you can stop notifications from Kiim at any time in your phone’s settings.
Kiim+ subscription
If you subscribe to Kiim+, the purchase is made through Apple or Google. We never see your card; we receive only whether the subscription is active and when it ends, so the app knows what to unlock. If you connect affiliate accounts, we store the public identifiers those networks put in links (an Amazon tag, an Awin publisher ID) — nothing that could log in to those accounts.
Technical logs
Like any service, our servers keep short-lived request logs (IP address, time, endpoint, and errors) for security, abuse prevention and rate limiting. They aren't joined to your activity for any other purpose.
What we don't collect
No advertising identifiers, no analytics or crash-reporting SDKs, no location, no contacts, and nothing read from your device beyond the photos you hand to Kiim.
Website analytics
kiim.app (the website, not the app) counts visits with a cookieless analytics script. It records the page, referrer, country and browser type in aggregate; it sets no cookies, stores no IP addresses, and cannot identify or follow you across sites. There's nothing to opt out of because nothing about you is kept.
What we use it for
- Running the service: identifying garments, finding shops and prices, rendering try-ons, keeping your closet and looks.
- Showing you prices in your currency and shops that ship to your country.
- Re-checking prices on pieces you've asked Kiim+ to watch: about every 14 days, the same garment image is sent to the identifying processor again, for as long as the watch lasts.
- Suggesting outfits from your Closet (Make me a look, Today's look), and labelling Closet pieces as women's, men's or unisex so suggestions fit your mannequin.
- Checking a finished try-on for drawing mistakes (an extra arm, a missing hand) and, if there is one, rendering it once more.
- Sending you the notifications you asked for.
- Keeping the service secure and preventing abuse.
We don't use your photos or data to train AI models, and we don't sell or rent any of it.
Who processes it for us
Kiim is small; it doesn't run its own AI. These are the third parties that handle your data on our behalf, and exactly what each one sees:
| Processor | What it does | What it receives |
|---|---|---|
| Replicate | Runs the AI models for garment detection, try-on rendering and edits to a finished render (tucking a top in, say) | The outfit photo being analysed, and — for try-on only — the garments and the mannequin or the photo of you that you consented to |
| Anthropic (Claude) | Checks finished renders for drawing mistakes, suggests outfits from your Closet, and labels pieces women's, men's or unisex | For a check: the render and the picture it was made from (the mannequin, or the photo of you). For suggestions and labels: your Closet pieces' names, brands and colours, and a piece's shop image |
| SerpApi (Google Lens & Google Shopping) | Visual search that matches a garment to shops and prices | The garment image being searched, and your country and currency |
| Google Cloud Vision | Checks uploaded photos for explicit content | The photo being checked, sent in a reduced size; not stored by Google |
| Resend | Sends account emails, such as password-reset links, and the waiting-list emails | Your email address and the email's contents |
| Expo push service | Delivers notifications to your phone | Your device push token and the notification text |
| Hosting provider | Runs our servers, database and file storage | Everything above, at rest |
Exchange rates come from a public rates feed that receives no personal data.
Shop links and affiliate networks
When you tap through to a shop, some links are affiliate links: if you buy, Kiim (or the creator who shared the look with you) may earn a commission at no cost to you. The affiliate network and the shop may set cookies or record the click under their own privacy policies. We don't send them your account details — they see the click, not who you are. Where a link is affiliate-tagged, Kiim says so next to it.
Sharing looks
When you share a look, Kiim creates a link. Anyone with the link can see the look's photo, the garments in it and their prices — they don't need a Kiim account. A look made on a photo of you is shown on the mannequin instead. Don't share a look whose photo you wouldn't want public. You can stop sharing from the look's menu; the link stops working immediately, though copies people already added to their own Kiim stay with them.
Anyone who sees a shared look can report it. A reported link, or one whose photo the automatic check wasn't sure about, is paused until the Kiim team has looked at it. We never tell you who reported it. If a look breaks our rules, we take the link down and keep its photos aside, out of view, in case we need them for a legal report; in serious cases we can also close the account.
How long we keep things
- Waiting list: until you ask us to remove you by writing to hello@kiim.app, or until your account is deleted for good.
- Account, closet, saved looks and their photos: for as long as you have an account, and 30 days after you delete it, so you can restore it (see below).
- Scans you don't save to your Looks: 7 days, then deleted with their photo — unless you've tried their garments on, in which case they stay as long as those renders do.
- Photos of you on our servers: only while a try-on is being rendered — deleted when it's done, at most an hour later. With Back up to Kiim on: until you delete the photo or turn backup off.
- Photos of you on your phone: until you delete them, delete your account or data, or remove the app.
- The record of a saved photo of you (consent time, safety-check result, fingerprint): until you delete the photo. For a photo used once: one hour.
- Sign-in sessions: 30 days, or until you log out.
- Push tokens: until you log out or delete your account.
- Downloads of your data: 7 days, then deleted.
- Server logs: a short rolling window, then discarded.
- Moderation records (each safety check's result and the image's fingerprint, never the image itself): 3 years. When a look is taken down, the record stays for as long as it's needed to keep that image out of view, and the photos kept aside as evidence are deleted after 1 year. These records aren't linked to your account once it's deleted.
- Marketing opt-outs: if you unsubscribe, we keep your email address on a do-not-send list for as long as we send marketing email, even after your account is deleted, so you're never emailed again by mistake. It's used for nothing else.
Deleting your data
In the app: You → Delete account. It asks you to type DELETE, then closes the account at once: you're signed out everywhere, nobody can use it, your share links stop showing your looks, and the photos of you kept on that phone are removed. 30 days later the account and everything attached to it (photos, looks, closet, folders, renders, share links, affiliate links and every stored image) are deleted for good, along with your waiting-list entry.
Changed your mind? Within those 30 days, sign in to Kiim again or use the restore link in the email we send when you delete the account, and everything comes back as it was (photos of you that were only on your phone excepted). The 30 days are there so a mistaken or unauthorised deletion can be undone; we don't use the data for anything during that time. Individual photos, looks and items can be deleted in the app at any time, straight away.
Start over, keep your account: You → Danger zone → Delete my data. It removes your looks, scans, Closet, folders, renders, photos of you (on our servers and on that phone) and share links, with their stored images, and keeps your login, username, plan and settings.
What we can't reach: copies of outfit photos and crops already sent to the processors above for identifying and rendering. They hold those under their own retention rules and don't keep them long-term. If you can't get into the app, email hello@kiim.app from the address on your account and we'll start it for you within a few days; the same 30 days to restore apply. If you'd rather not wait the 30 days, say so in the email and we'll delete everything straight away.
Your rights
Get a copy of your data: You → Download my data. We put everything we hold about your account into one ZIP file (your images, a data.json file and a README explaining it and who else processes your data), and email you a link that works for 7 days. You can ask once a day. Photos of you that are only on your phone aren't in it — they're already with you — but their records are.
Wherever you are, you can ask us for a copy of your data, ask us to correct it, or ask us to delete it. If you're in the EU, EEA, UK or Switzerland, the GDPR and UK GDPR give you those rights formally, plus the right to object to or restrict processing, the right to data portability, and the right to complain to your local data protection authority. Our lawful basis for handling your data is performance of our contract with you (running Kiim), your consent (for a photo of you), and our legitimate interest in keeping the service secure.
Your data may be processed on servers outside your country, including in the United States, by the processors listed above. Where that happens we rely on standard contractual safeguards.
Security
All traffic between the app and our servers is encrypted in transit. Passwords are hashed, never stored. A photo of you sent for a try-on is stored under a random key, reachable only through a short-lived signed link, and deleted by the server when the render is done, not by the app, so a closed app can't keep one alive. No system is perfectly secure; if we ever learn of a breach affecting you, we'll tell you.
Children
Kiim isn't intended for anyone under 16, and we don't knowingly collect data from them. If you believe a child has an account, email us and we'll remove it.
Changes
If this policy changes in a way that matters, we'll say so in the app and update the date at the top. The current version always lives at kiim.app/privacy.