LLuqora

Privacy Policy

Last updated: 2026-05-22

This is the privacy policy for Luqora — a private personal-style collection app. We've tried to write it in plain language. If something here is unclear, contact support@luqora.app.

Summary

• You can use Luqora without creating an account. In that mode, nothing leaves your device.
• If you choose to sign in, your items and photos sync to your account so they follow you across devices.
• We never sell your data. We don't run ads. We don't track you across other apps or websites.
• You can export your collection as a JSON file at any time, or delete your account to remove everything we store.

What we collect

Data	When	Where it's stored
Items you save (name, brand, note, optional details)	When you save an item while signed in	Supabase (Postgres, Frankfurt EU)
Photos you attach to items	When you save a photo while signed in	Supabase Storage (private bucket, Frankfurt EU)
Email address + display name	When you sign in via Apple or Google	Supabase Auth
Authentication identity	Persisted from Apple/Google sign-in	Supabase Auth
Subscription status	When you subscribe to Luqora Pro	RevenueCat + our database
Crash and error reports — only if you opt in	When the app crashes	Sentry (anonymous, no PII)
Usage statistics — only if you opt in	When you grant analytics consent	PostHog (anonymous app-level events)
Device biometric (Face ID / Touch ID)	If you enable App Lock in Settings	Stays on your device — Apple's Secure Enclave
Push notification token	If you enable any notification category	Supabase (Frankfurt EU) — revocable by disabling notifications anytime
Push notification preferences (opt-in flags, quiet hours, timezone)	When you change a notification setting	Supabase (Frankfurt EU)

We don't collect:

• Your contacts, calendar, or location
• Your browsing history or activity in other apps
• The text content of items, notes, or search queries (when sent to analytics)
• Anything if you use the app without signing in (anonymous mode is fully local)

How we use it

• To make the app work: render your collection, sync across devices, process subscriptions, deliver photo auto-tag suggestions.
• To improve the app: aggregated, anonymous usage stats from PostHog (only if you opt in).
• To fix bugs: anonymized crash reports from Sentry.

We do not use your data for advertising, profiling for advertising, or training AI models.

Third-party processors

These services receive specific data on our behalf to provide a feature you've asked for. They cannot use it for their own purposes.

Processor	What we send	Why
Supabase (database, auth, storage) — Frankfurt, EU	Your account, items, photos	Cross-device sync
Apple, Google — United States	Your sign-in token	OAuth sign-in only — we never receive your password
Anthropic (Claude API) — United States	Photos you tap "Auto-fill" on, plus item photos you ask the AI to use when composing or refining an outfit	AI-suggested item details and outfit recommendations. Anthropic's API does not use these images to train their models; they retain them for up to 30 days for trust-and-safety review then delete them.
RevenueCat — United States	Your account ID + subscription state	Manages App Store subscriptions across devices
Sentry — Germany	Stack traces, device model, OS version, anonymous device ID	Crash diagnostics. No user content. Only sent when you've opted in.
PostHog — United States	Anonymous app-level events tied to your account ID	Product analytics, only when you've opted in

Style Check (sharing photos with someone you choose)

Style Check lets you share an outfit with someone (a friend, a partner) so they can vote on it, suggest changes, or pick a look for you. When you create a Style Check:

• The photos of the items you share are made accessible to anyone who has the link you send, through a temporary signed URL on our storage provider. The link does not require a login.
• You choose what's exposed. The default ("just this outfit") shares only the photos of the items in that one outfit. Broader modes ("Build" or "Remix") let recipients propose replacements from a wider set of your items — when you choose those modes, you're consciously sharing more of your collection. The app shows you exactly what will be visible before you confirm.
• Your name, email, and other account details are never included — only the photos and item names of items you've chosen to share.
• Recipients can rate, comment, or suggest outfits; their responses come back to you in-app. We do not contact them, store their identity, or send them email.
• You can delete a Style Check at any time from inside the app, which revokes future link access immediately.

If you don't use Style Check, nothing about your items is shared with anyone.

Your rights

• Export: Settings → Backup → Export. Produces a JSON file with all your items.
• Delete: Profile → Delete account in the app. Permanently erases your account, all items, and all photos within seconds. No email required, nothing recoverable. We do not retain backups of deleted accounts.
• Opt out of analytics + crash reporting: Settings → Privacy → toggle "Anonymous usage stats" off. This single toggle controls BOTH PostHog analytics AND Sentry crash reporting — both are off by default and only sent when you've explicitly opted in during onboarding or in Settings.
• Sign in anonymously: Just don't sign in. Anonymous mode keeps everything on your device.

EU/UK users have additional rights under GDPR: access, rectification, erasure, restriction, portability, and the right to object. The "Export" and "Delete" controls satisfy access, erasure, and portability. For any other request, email support@luqora.app.

California users have additional rights under CCPA: to know, to delete, to opt-out. We do not sell personal information.

For users in the EU/UK: data sent to processors outside the EU (United States) is covered by Standard Contractual Clauses (SCCs) under each processor's data-processing agreement.

Children

Luqora is not directed at children under 13 (or 16 in jurisdictions where that's the minimum). We do not knowingly collect data from children. If you believe a child has provided us with information, contact support@luqora.app and we'll delete it.

Changes

If we change this policy, we'll update the "Last updated" date and, for any material change, prompt you in the app on next launch.

Contact

For any questions about this policy or general support: support@luqora.app

Luqora is built and maintained by Hasan Rabba (Signarm).