Skip to main content
Colette & CarrieFashion besties · by RemodeBack to chat
Back to Home
EN DE

Privacy Policy

Last updated: October 17, 2026

This policy explains how Remode processes personal data in the iOS app, on remode.app, and through supported assistant or extension surfaces. The controller is Farshid Abdi, Switzerland. Contact: privacy@remode.app.

1. Data Remode Processes

  • Account and contact data: email, account ID, optional name and profile details, authentication records, and support messages.
  • Shopping data: searches, product and retailer interactions, saved items, Hunt requests, shopping region, preferences, and purchase or subscription data available to Remode.
  • Photos and content: photos or links submitted for search, optional feedback, and a Virtual Try-On reference photo when you use that feature.
  • Optional Colette & Carrie memory: only the facts you explicitly save and confirm in the app, as described in section 5.
  • Shared shopping memory: where that memory is on, taste and shopping context from your conversations with Colette and Carrie, as described under Shared memory across channels. This is separate from the optional facts you save yourself.
  • Technical data: random device or install ID, app and operating-system version, security logs, network-derived region, crash data, and performance data.
  • Attribution: Apple Search Ads attribution and, only after the required Apple tracking permission, ad-attribution and conversion data for Meta or TikTok.

Remode does not sell personal data.

AI assistant account linking (ChatGPT and Claude): search remains available in ChatGPT and Claude without linking an account. If you connect Remode to ChatGPT or Claude, your email and password are sent only to Remode for sign-in and are not shared with the assistant. Remode stores only hashed opaque OAuth token records. While an account is linked, Remode uses the link to show your Hunts and to count assistant usage under a keyed pseudonymous identifier. Remode receives only what the assistant sends in a request, such as a link, image URL, search text, region, size and Hunt criteria; it does not request your chat history. A photo you attach in a Claude chat is not sent to Remode. When you explicitly ask the assistant to manage a Hunt, Remode may return the Hunt item's title, product and image links, price, currency, region, Hunt criteria and status, and verified Hunt updates to that assistant. You can read, change, or stop those Hunts in chat, disconnect Remode in ChatGPT, remove the Remode connector in Claude, or manage the same items in Remode. To also end a link on Remode's side, email privacy@remode.app or delete your account.

2. Photo Search

Actively starting a photo search asks Remode to send the selected photo to Google Gemini, Google Lens, SerpAPI, and Roboflow to identify items, locate their visible pixels, and find shopping results. Roboflow creates segmentation masks and item coordinates so Remode can place a label on the correct garment or accessory. This processing is required to perform the photo search you request.

Remode strips embedded photo metadata, stores a private temporary search object, and provides time-limited signed access to search providers. Remode automatically deletes its copy within seven days. Providers may retain limited request records under their terms for security, abuse prevention, or service operation. Paid Gemini API requests are not used by Google to improve Google's models under Google's paid-service terms.

Remode keeps minimized quality evidence without keeping the submitted photo: model and pipeline versions, category, candidate and result evidence, latency, errors, ranking provenance, user actions, wrong-item feedback, and a keyed non-reversible duplicate fingerprint. This evidence is pseudonymous, not described as anonymous, and supports accuracy, reliability, security, and fraud prevention.

3. Optional Photo Improvement

Improve Photo Matching is separate, optional, and off until you enable it. If enabled, Remode may retain a private, verified person-free garment crop for evaluation and search-quality improvement for up to 12 months. A source photo containing an identifiable person or child is not placed in this corpus. Search works the same when the option is off.

Turning the option off deletes linked crops. Account deletion removes linked consent records, improvement artifacts, and quality records associated with the account.

4. Virtual Try-On and Location

A Virtual Try-On reference photo remains on your device until you remove it. When you request a try-on, the reference photo and selected product image are sent to Google Cloud Vertex AI to generate the preview. They are not added to the photo-improvement corpus without a future, separate permission. A selfie you send in the website chat for a try-on is used only to make that preview: it is sent with the product image to Google Cloud Vertex AI, is not stored by Remode and is deleted once the preview has been sent to you.

If you use nearby-store or local-deal features and grant iOS location permission, Remode may process your current precise location to answer that request. It is not collected in the background or automatically attached to search history.

5. Colette & Carrie Memory

Colette and Carrie are Remode's AI shopping characters in the app chat. If you use the optional Colette & Carrie memory in the app (rolling out gradually, so it may not be available to you yet), this section applies. It is optional and requires an account. It stays off unless you save something. Before your first save, the app shows a notice and asks for your explicit confirmation. Search and chat work without it.

Remode stores only the facts you explicitly save and confirm in the app: a preferred name, preferred language (English or German), reply tone (playful or short), fashion styles you like and materials you avoid (each chosen from a fixed list), together with the confirmation time, the notice version and a revision number. Remode does not store chat transcripts, inferred facts, reasons (for example a health or allergy reason) or anything about your body or looks. Colette and Carrie never save memory themselves; only your own taps do. The facts are stored on your existing Remode account record (MongoDB).

Remode uses these facts so Colette and Carrie can use your name occasionally, match your preferred tone and respect your style and material preferences, so you do not have to repeat them. When you chat with Colette & Carrie while signed in, the saved facts are sent as data with that chat request to Google Gemini to write the reply. Paid Gemini API requests are not used by Google to improve its models under Google's paid-service terms. Remode does not use this memory to train or fine-tune AI models, and it is not added to the optional photo-improvement corpus. Saving memory does not allow Remode to use your photos for training.

Where the feature is available, you can view everything stored on the What Colette & Carrie remember screen, opened from Settings or from the chat. There you can correct a fact, remove a single fact or choose Forget everything. Forgetting removes the saved facts from your account immediately; any open chat in the app starts fresh, so earlier messages cannot bring a removed fact back. Forgetting memory does not delete your sizes, Shopping region, search history or account. The processing is based on your consent, which you can withdraw at any time by forgetting. You can also request access to or a copy of your data at privacy@remode.app. These requests are handled manually, and any saved memory is part of the account data we provide.

Shared memory across channels

This section applies where shared memory is switched on. It is separate from the optional facts you save yourself in section 5. To give you a consistent shopping companion, Colette and Carrie keep a memory of your shopping conversations, whether you talk to them on our website, in the app, through an AI assistant you connect, or on a messaging channel we later offer. We keep: what you tell us about your taste, sizes, budget and brands; your name and how you like to be addressed; occasions you mention; notes about people you shop for (kept as your own shopping notes, not as profiles of those people); what you looked at, liked, passed on or bought; prices you found too high; photos you shared (as references); things we said we would follow up on; and the text of your conversations, in each case together with where and when we learned it. We do not intentionally keep health, religion, sexuality, politics, ethnicity, age, financial situation, payment or contact details, and we do not infer such traits. We use your conversations to work out these notes with an AI service provider (Anthropic) acting on our behalf, and to remember them for you. Our legal basis is our legitimate interest in providing a personal, consistent shopping service (Art. 6(1)(f) GDPR; in Switzerland, processing in line with the principles of the FADP). We keep this memory until you ask us to forget it or you delete your account. If there is no activity from you for 3 years, we erase the memory, the channel links and the conversation history together. A browser or install that is not signed in to a Remode account is erased after 180 days without activity. If you're signed in, your conversations are kept with your Remode memory until you delete them or your account; they are erased after 3 years without any activity. If you're not signed in, conversation text is no longer used after 24 hours and is deleted automatically; text stored before this change is deleted within 180 days at the latest. You can ask us to show you what we hold, to correct or delete it, or to stop remembering you, at any time, by asking in the chat or by writing to privacy@remode.app. You have the right to object to this processing, and if you do we stop and delete. We only link your conversations on different channels when you prove they are yours, for example with a one-time code or by being signed in. Deleting your account deletes this memory.

6. Analytics, Diagnostics, and Ad Measurement

  • PostHog in the app: optional client-side analytics is off until enabled. When enabled, it may receive additional masked feature-use, attribution, and performance events linked to a random device or account ID. Session replay masks images and text inputs and does not capture network payloads. Minimal server-side operational receipts, such as search outcome, retailer handoff, account, delivery, save, and Hunt status, may still be recorded or mirrored to PostHog as a processor where needed to provide, secure, and verify the service; they do not contain the submitted photo, typed search text, or retailer page content.
  • Sentry: used as necessary to diagnose serious errors and crashes. Remode disables screenshots and view-hierarchy capture and sends no email address.
  • Meta and TikTok: measure Remode's own campaigns. On iOS, advertising IDs, ad-network user identity, and conversion events are enabled only after App Tracking Transparency permission.
  • Website PostHog: starts only after you choose Allow in the website banner. Optional page and chat usage events measure messages sent, searches, displayed results and store clicks, using counts, website language and retailer domains. Chat text, typed queries, names, emails, sizes, image URLs, product titles and session tokens are excluded. Actions before consent are never sent later.

7. Service Providers and Retailers

Remode uses providers including Google Cloud and Gemini, Anthropic (for shared shopping memory, where that memory is on), SerpAPI, Roboflow, Apple, RevenueCat, Expo/EAS, Render, MongoDB, PostHog, Sentry, Meta, TikTok, email providers, and retailer or affiliate networks. They receive data relevant to their role. Some process data in the United States or other countries; applicable contractual and legal transfer safeguards are used.

When you open a retailer link, the retailer and an affiliate or comparison-shopping network may receive the destination, click ID, placement information, and technical request data. If a purchase is reported, Remode may receive merchant, amount, currency, transaction reference, and commission, but not your payment-card details. Commercial compensation must not override match quality or truthful ranking.

After you deliberately open a verified result, Remode may remember up to three opaque product interests for 21 days and show a meaningful later update, such as a trusted same-currency price improvement or a newly exact match. The private interest record contains no submitted photo, typed search, product title, image, or retailer URL; display details are rehydrated from short-lived, identity-free offer snapshots. This does not create a Hunt or notification. Those start only after you explicitly choose Keep looking. A stable 50/50 service experiment and content-free event receipts measure usefulness; event receipts expire after 90 days.

8. Legal Bases

Depending on the context, Remode relies on performing the service or contract you request; consent for optional analytics, optional photo improvement, optional Colette & Carrie memory, communications, location, or tracking; legitimate interests in product quality, security, fraud prevention, support, and reliable operations where your rights do not override those interests; our legitimate interest in a consistent shopping companion for shared memory across channels (Art. 6(1)(f) GDPR and the principles of the Swiss FADP), which you can object to; and legal obligations such as accounting and consumer-law records.

9. Retention and Deletion

  • Temporary photo-search objects: automatically deleted within seven days.
  • Optional person-free improvement crops: up to 12 months, or earlier after withdrawal or account deletion.
  • Search history, saved items, Hunt requests, and account preferences: until you delete them, delete the account, or they are no longer needed for the feature.
  • Assistant (ChatGPT and Claude) OAuth access tokens: up to 30 days; rotating refresh tokens: up to 90 days. Used tokens are invalidated on rotation, and only token hashes are stored.
  • Colette & Carrie memory: until you remove a fact, forget everything, or delete your account. After Forget everything, only a non-personal revision number and timestamp remain so an older pending save cannot bring the facts back.
  • Shared shopping memory: until you ask us to forget it or delete your account, or after 3 years with no activity from you (180 days if you are not signed in to a Remode account). The memory, the channel links and the conversation history are erased together. If you're signed in, your conversations are kept with your Remode memory until you delete them or your account; they are erased after 3 years without any activity. If you're not signed in, conversation text is no longer used after 24 hours and is deleted automatically; text stored before this change is deleted within 180 days at the latest.
  • Implicit product interests: up to 21 days; identity-free offer snapshots: up to 22 days; content-free experiment receipts: up to 90 days.
  • Pseudonymous quality and security evidence: only while needed to improve and protect Remode, subject to deletion and legal requirements.
  • Analytics, crash, financial, and compliance records: for configured operational periods or as required by law.

Deletion removes records from active systems promptly. Isolated encrypted backups and legally required records may remain until their normal expiry.

10. Your Choices and Rights

In Settings > Privacy Settings, you can disable optional client-side PostHog analytics, disable and delete optional improvement crops, clear history or shopping memory, and delete your account. Where Colette & Carrie memory is available, the What Colette & Carrie remember entry in Settings lets you correct or remove saved memory facts or forget everything. iOS Settings controls camera, photo library, location, notifications, and tracking.

Depending on your location, you may request access, correction, deletion, restriction, portability, or object to processing. Contact privacy@remode.app. Swiss residents may complain to the FDPIC; EU/EEA residents may contact their local authority; California residents may exercise applicable access, deletion, correction, and opt-out rights.

11. Age and Security

Remode's AI-powered photo services are for people aged 18 or older. Adults may search for children's clothing, but identifiable child photos are never retained in the optional improvement corpus.

Remode uses encryption in transit, private storage, short-lived signed URLs, access controls, data minimization, and deletion jobs. No system is perfectly secure. Material changes will be communicated and new consent requested where required.