What we store, and where

A plain-language account of every place your data can end up when you use calm&chic, and how to remove it. No ad trackers, no data sales — this is the complete list.

If you never create an account

Nothing about you touches our servers. Your quiz answers, color palette, generated outfits, and liked items live only in this browser's local storage, on this device — we simply never receive them. Clearing your browser data (or using a different browser or device) removes it just as completely. If you upload a photo for skin-tone detection, it is sent directly to our AI providers for analysis (see "Who else sees it" below) and is never saved to our database.

If you create an account

Signing in (email/password or Google) lets your results follow you across devices. That means the following is saved to our database, tied to your account, until you delete it or it ages out (see "How long we keep it"):

• Your account: email, a bcrypt hash of your password (never the password itself) or your Google ID, and your display name (database table user_sessions).
• Your style profile — the preferences from "My Style" and the quiz (stored in that same account row).
• Saved color palettes, including the skin-tone/undertone analysis behind them (color_palettes).
• Saved outfit recommendations (outfit_recommendations).
• Retailer links you clicked through, for your own "what I clicked on" history (outbound_clicks).
• Thumbs up/down feedback on outfits (outfit_feedback) — this is kept even after account deletion, but with the link to your identity removed (see below).
• Fit Check results, only if you use that feature: the items detected, your score and tips, and (if you allow it) the photo you uploaded, stored on our image CDN and linked to your account (fit_check_results).

Images

Outfit and item images we generate for you (and Fit Check photos, if you use that feature) are stored in our object storage (Cloudflare R2), served from our images CDN. They are not indexed by search engines, but a direct link to an image file is not password-protected — treat any link you share as public.

Who else sees it

Generating a recommendation means sending the relevant inputs — a photo for skin-tone analysis, or your palette/preferences for outfit ideas — to our AI providers (Google Gemini and/or OpenAI for analysis and text, OpenAI DALL-E and/or xAI Grok for images). We send only what's needed to answer that one request, never your email or account identity. Product search uses Myntra and Etsy's public listings; we don't send them anything about you either. If you use the contact form, your name, email and message are also passed to Resend, the service that delivers the email to us. We don't sell your data or share it with advertisers.

Affiliate links

Some links that take you to a retailer are affiliate links: they carry a code identifying calm&chic — not you — and we may earn a commission if you buy something. Where those links point at Amazon.in we take part in the Amazon Associates Programme; as an Amazon Associate we earn from qualifying purchases. The code says nothing about who you are, and we don't pass the retailer your identity, your photo, or your profile. Which links you clicked is recorded for your own click history only — the outbound-clicks row listed above — and only if you have an account.

How long we keep it

An account that's been inactive for 30 days is deleted automatically: the account itself and everything listed above, including a best-effort removal of any Fit Check photos from storage. Outfit feedback (thumbs up/down) is kept, but with the identity link removed — the rating survives anonymously, the account doesn't.