Project Drape
Your style.
Your data.
Apple subscription information
When you purchase Drape Premium through Apple, Apple handles payment details. We verify Apple's signed purchase records and store the subscription product, original transaction identifier, environment, renewal status and access expiry linked to your Drape account. We do not receive your full card details. These records let us provide paid access, restore purchases and process subscription updates. Deleting your Drape account removes its local subscription association but does not cancel billing managed by Apple.
What Project Drape stores
Project Drape stores the name you choose, shopping preferences, swipe history and feedback, saved pieces, collections, and generated style profiles. Without an account, this information stays in your browser or app storage. Clearing that storage removes your device-only edit.
Accounts and cloud services
Supabase handles authentication and stores your account data. Project Drape sends account confirmation and password-recovery emails through Resend. When enabled, phone sign-in sends verification codes through Telnyx and stores your phone number with Supabase. We keep limited SMS delivery and abuse-prevention records without message text or verification codes. Sign in with Apple shares an account identifier and the name and email (which may be a private relay address) you choose to provide. Passwords are handled by the authentication provider, not stored in your Project Drape style profile. Account data is isolated by user. The app reports sync failures in your profile.
Personalization and AI
Swipe-based recommendations can run on your device. Only after a signed-in user explicitly allows sharing with OpenAI during profile setup or in You, the AI stylist may send clothing choices, optional feedback, and existing style summaries through our server to OpenAI’s API to generate recommendations. You can turn off cloud AI sharing in You at any time to prevent new requests. Requests already sent may finish. Project Drape does not include your email, phone number, or password in these prompts. Do not put sensitive personal information in fashion feedback.
Images and retailer links
Product and editorial images load from external image providers, including retailer image hosts, Supabase-hosted catalog images, ASOS and Unsplash. Those requests disclose connection information such as your IP address to the provider. Visiting a retailer opens an external service governed by its own privacy policy. Project Drape does not process retailer purchases or payment details.
Control your information
In You, use Export my data to obtain your edit as JSON, or Reset my style and saved items to remove it. Signed-in users can delete their account and its stored application data. Data persists until you remove it; service providers may retain backups or security records under their own retention policies. Signing out retains the account’s local cache so it can load again after you sign in.
Product activity and administration
For signed-in accounts, we record first-party product activity such as sessions, completed questionnaires, discovery choices, saves, edit views and retailer opens, linked to your account and platform. These records help us understand product use and reliability. They contain no advertising identifiers, page URLs, clothing feedback, passwords or message content. Authorized administrators can view account and subscription status and manage complimentary access; administrative changes are audited. Activity records are retained for about 90 days and deleted with your account. Administrative audit entries are retained for about one year; account references are cleared when an account is deleted. SMS abuse-prevention records are kept for about seven days and daily AI usage counters for about 30 days. Scheduled cleanup runs automatically. We do not sell these records or send them to advertising platforms.
Questions
Project Drape is operated by Mustafa Alzubaidi. For private account support or a privacy request, email info@projectdrape.com. Never send passwords, sign-in codes, or access tokens.