DressCubeAI - Last Updated: 29 August 2026
This Privacy Policy explains how Upsite Consulting W.L.L. collects, uses, shares, protects, transfers, and retains personal data when you use the DressCubeAI mobile application, website, and related services (collectively, the "Service"). Upsite Consulting is established in Bahrain, and Bahrain's Personal Data Protection Law applies to its processing where relevant. Other privacy laws may also apply depending on your location and our activities, including the GDPR, UK GDPR, and applicable United States state privacy laws.
The data controller responsible for processing your personal data through DressCubeAI is:
Upsite Consulting W.L.L.
Flat 2142, Building 2648, Road 5720, Block 257
Muharraq, Kingdom of Bahrain
Email: contact@dresscube.ai
Depending on the features you use and the permissions you grant, we may collect and process the following categories of personal data:
| Category | Description |
|---|---|
| Account and authentication data | Email address, display name if provided, account identifier, authentication status, the sign-in method you use (email and password, Google, or Apple), and security or session information used to create and protect your account. If you register by email, your password is processed securely through Amazon Cognito and is not available to DressCubeAI in readable form. If you use Google or Apple, we receive a provider-specific account identifier and may receive your email address or other basic profile information you authorize. We do not receive your Google or Apple password. |
| Clothing photos and item data | Images you upload from your camera or photo library, image metadata made available to the App, background-removed images, and item categories, tags, colours, or descriptions used to build your virtual wardrobe. |
| Outfit and AI interaction data | Outfits you create, AI prompts, relevant wardrobe information submitted for analysis, and AI-generated classifications, suggestions, ratings, and responses. |
| Voice data | Audio streamed when you choose to use voice chat. DressCubeAI does not store voice recordings in your account; audio is processed transiently to generate a response. |
| Location and weather-request data | Approximate or precise location accessed with your permission to retrieve local weather. Location is processed for the request and is not persistently stored as part of your DressCubeAI profile. |
| Calendar and planning data | Outfit plans, dates, reminders, trip destinations, travel dates, packing lists, and related planning information you create. |
| Preferences and notification data | App settings, language and display preferences, AI persona choices, notification preferences, and device push-notification tokens. |
| Referral data | Referral code, referral relationships, referral status, eligibility checks, waiting periods, and accumulated reward balance if you participate in the referral programme. |
| Subscription and purchase data | App-store transaction or receipt identifiers, subscription status and expiry events, purchased Coins, entitlement status, and related anti-fraud records. We do not receive your full payment-card details. |
| Usage and diagnostics data | If you consent, pseudonymous app-instance or device identifiers, screens and features used, session and performance information, device model, operating-system and App version, crash diagnostics, and similar technical events collected through Google Firebase. |
| Advertising and reward-verification data | IP address; device, operating-system and App information; a device or advertising identifier where available; approximate location inferred from technical information; advertisements requested or shown; impressions, interactions and completions; and fraud-prevention or diagnostic information. For a rewarded advertisement, we send Google AdMob a pseudonymous internal account identifier so that completion can be verified and Coins credited to the correct account. The identifier does not contain your name or email address. |
| Technical and security data | IP address, request timestamps, server and security logs, error data, rate-limit events, and other information needed to operate, protect, and troubleshoot the Service. |
| Support communications | Messages and information you provide when contacting us for support, privacy requests, feedback, or complaints. |
We collect personal data:
Account identifiers, authentication and session information, and the information necessary to accept our Terms are required to create, secure, and operate an account. If you do not provide them, we cannot create or maintain your account or provide the core Service.
Other information and permissions are optional and are needed only for the feature concerned. For example, declining photo-library, camera, location, microphone, notification, analytics, or advertising-consent requests may disable or limit the corresponding feature, but does not prevent use of unrelated features. Information requested in support or privacy-rights forms may be necessary to verify and fulfil the request; without sufficient verification information, we may be unable to act on it.
We use personal data to:
We do not sell personal data for monetary consideration or rent personal data. We do not provide your wardrobe photos, voice audio, AI conversations, or other account content to data brokers or advertisers. DressCubeAI does, however, display third-party advertising through Google AdMob and provides Google the advertising and reward-verification data described in this Policy. Some laws define "sale," "sharing," or "targeted advertising" more broadly than an ordinary sale; where such laws apply, you may exercise the relevant opt-out rights through available privacy or device controls or by contacting us.
Where Bahrain's Personal Data Protection Law applies, we process personal data with consent unless another condition permitted or required by law applies. Where the GDPR, UK GDPR, or a similar law applies, we rely on the following legal bases:
We share personal data only as necessary to provide, secure, and support the Service, process transactions you request, or comply with law. Our principal categories of service providers include:
| Provider or Category | Purpose and Data |
|---|---|
| Amazon Cognito | Authenticating your account and managing secure sign-in, including email address, account identifier, and session information. |
| Amazon S3 | Storing the clothing photos you upload to your virtual wardrobe, including background-removed versions. |
| Amazon DynamoDB | Storing your account information, wardrobe items, outfits, plans, trips, preferences, and referral data. |
| Amazon API Gateway | Routing and securing the requests the App makes to our backend. |
| Amazon Web Services and contracted cloud AI services | Analysing clothing and outfit information and generating classifications, styling suggestions, ratings, packing lists, and conversational or voice responses. Processing occurs on our behalf only when you use the relevant AI feature and may involve AI inputs and outputs, relevant wardrobe information, images, text, and voice streams. |
| Cloud infrastructure services | Hosting, content delivery, operational email, logging, and monitoring needed to run, protect, and troubleshoot the Service, including technical logs and account identifiers. |
| Google Firebase | With your consent, Analytics, Crashlytics, and Performance Monitoring process pseudonymous usage, device, crash, and performance data. Firebase services may also support push-notification delivery where used. |
| Google AdMob | Displaying, delivering and measuring advertisements; preventing advertising fraud and abuse; and verifying rewarded advertisements. Depending on platform, region and device settings, Google may process IP address, device and App information, device or advertising identifiers where available, approximate location, advertisement requests, impressions, interactions and completions, diagnostic information, and the pseudonymous internal account identifier used for reward verification. |
| RevenueCat | Subscription and entitlement management, including app-store transaction identifiers, subscription status, purchase events, and information needed to verify referral rewards. |
| Google Play and Apple App Store | App distribution, in-app purchases, subscriptions, refunds, and receipt verification. The relevant store processes payment information under its own privacy terms and shares transaction confirmation information with us. |
| Google Sign-In and Sign in with Apple | Optional account authentication. If you choose one of these methods, Google or Apple authenticates you and provides us with a provider-specific account identifier and any basic account information you authorize, such as your email address or display name. We do not receive your Google or Apple password. Each provider processes the sign-in under its own privacy terms. You may instead create an account with email and password. |
| Weather-data services | Location or destination information needed to return weather conditions for outfit and travel suggestions. |
| Netlify | Hosting and delivering the public DressCubeAI website. Netlify may process IP address, browser and device information, request timestamps, requested pages, and security or server-log information. |
| Google Fonts | Delivering fonts used by the public website. When a page loads, the browser may send Google an IP address and standard request, browser, and device information. |
Together, these AWS and other contracted services may process account and session information, uploaded content, wardrobe or outfit information, AI inputs and outputs, voice streams, and technical logs on our behalf, depending on the feature used. These providers process data under their contractual and legal obligations. When an AI feature requires relevant wardrobe information, images, text, or voice to be sent to a cloud AI provider, the App initiates that processing only when you choose to use the feature and provides contextual information or permission prompts where required.
We may also disclose data if required by law, to protect rights or safety, in connection with a corporate transaction, or with your direction or consent.
Our infrastructure and service providers operate primarily in the United States and may process data in other countries. Your data may therefore be processed outside Bahrain or the country where you live. Privacy protections and government-access rules may differ between countries.
For transfers governed by Bahrain law, we rely on a transfer basis permitted by the Bahrain Personal Data Protection Law and its implementing decisions, such as processing in a jurisdiction recognized as providing adequate protection or another available authorization or legal exception. Where the GDPR, UK GDPR, or another transfer regime applies, we use an available lawful mechanism appropriate to the transfer, which may include an adequacy decision, standard contractual clauses, the UK International Data Transfer Addendum, or another recognized safeguard. You may contact us for information about the safeguard applicable to a particular transfer.
| Data | Typical Retention |
|---|---|
| Account and authentication data | While your account is active and until deletion, subject to limited security and legal records. |
| Clothing photos and item data | Until you delete the item or your account. |
| Outfit, AI, calendar, and travel data | Until you delete the relevant item, plan, trip, or account, unless a feature is designed for transient processing only. |
| Chat history on your device | Premium: kept on your device until you clear the chat or delete your account. Free: the last few messages are kept for up to 24 hours. |
| Voice audio | Processed as a transient stream and not stored as a voice recording in your DressCubeAI account. |
| Location data | Used for the weather request and not persistently stored as part of your profile. |
| Preferences and push tokens | Until changed, disabled, invalidated, or your account is deleted. |
| Referral data | Until your account is deleted, subject to limited anti-fraud and dispute records. |
| Subscription and purchase records | While needed to provide entitlements, manage balances, prevent fraud, resolve disputes, and meet applicable accounting, tax, app-store, or legal requirements. Some records may therefore remain after account deletion. |
| Analytics and diagnostics | Collection stops when you withdraw consent. Provider-held event data is retained for the configured period, typically up to 14 months, and may remain longer in aggregated or de-identified reports. |
| Advertising and reward-verification data | Google retains advertising information under its own retention rules. We retain records needed to credit Coins, maintain the Coin balance, prevent duplicate rewards and fraud, and resolve disputes for as long as reasonably necessary for those purposes. |
| Security and support records | For the period reasonably necessary to secure the Service, resolve the matter, establish or defend claims, and meet legal requirements. |
| Account-deletion records | After your account is deleted, we keep a record of the deletion for 7 years in order to demonstrate that we carried out your request. The record contains pseudonymous identifiers (your account identifier and a value derived from your email address using a one-way key, from which the address cannot be reconstructed), the dates on which the deletion was requested and completed, and the categories and number of records deleted. It contains no name, email address, photos, or other content. |
If you do not use DressCubeAI for 90 days and you are not a Premium subscriber, we delete the content stored in your account: your wardrobe items and their photos, outfits, calendar entries, wear history, and what the AI assistant has remembered about you. Your account itself, your profile, and your coin balance are kept, so you can sign in again and start with an empty closet.
We tell you before this happens. You receive a notification after 60 days of inactivity and a final one after 80 days, each stating how much time is left. If we cannot reach you with that notice, for example because notifications are switched off on your device, we do not delete your data.
Premium subscriptions are excluded for as long as the subscription is active. Keeping your wardrobe available across your devices is part of what you pay for.
After deletion, residual copies may briefly remain in encrypted backups or system logs and are removed or overwritten according to our normal retention cycles. We may retain limited information where required by law or reasonably necessary for fraud prevention, security, accounting, or dispute resolution.
Depending on your location and applicable law, you may have the right to:
To exercise a right, contact contact@dresscube.ai. We may need to verify your identity or an authorized representative's authority before acting. We will respond within the period required by applicable law. If we cannot fulfil a request, we will explain why and identify any available complaint or appeal route where required.
You can request deletion of your account or personal data at any time, with or without using the App:
Deleting your DressCubeAI account does not automatically cancel a subscription billed through Google Play or Apple's App Store. You should cancel the subscription separately in the relevant app-store subscription settings to prevent future renewal charges.
We process verified deletion requests without undue delay. Data associated with the account is deleted except for limited records that must or may be retained for legal, accounting, security, fraud-prevention, or dispute-resolution purposes, as described in Section 7.
DressCubeAI uses cloud-based AI services, including services provided through Amazon Web Services and other contracted cloud AI providers, to analyze clothing and outfit information and generate classifications, styling suggestions, ratings, packing lists, and conversational responses. When you request an AI feature, the information needed for that request may be sent to and processed by the relevant AI service provider on our behalf.
AI-generated suggestions may be inaccurate or unsuitable and are provided for informational and entertainment purposes only. They do not constitute professional advice or binding decisions, and you are not required to follow them.
Voice chat is optional. Microphone access is requested only when you choose to use the feature. Audio is streamed for real-time processing to generate an AI response and is not stored as a voice recording in your DressCubeAI account. The service provider may handle short-lived technical buffers and operational data as necessary to deliver and secure the service.
Voice processing is based on your consent. You may decline the permission or revoke microphone access at any time through your device settings, in which case voice chat will not function.
When you participate in the optional referral programme, we process referral codes, referral relationships, subscription-verification events, waiting-period status, and reward balances to operate the programme and prevent fraud. Subscription status may be checked through RevenueCat after the stated waiting period before a reward is granted. Referral rewards have no cash value. Referral data is deleted with your account except for limited anti-fraud, security, legal, or dispute records.
Google Firebase Analytics, Crashlytics, and Performance Monitoring are disabled until you provide consent through the in-App prompt. If enabled, these services process pseudonymous usage events, app-instance or device information, crash diagnostics, and performance metrics. Information collected through these consent-controlled Firebase analytics and diagnostic services is not used by us for advertising and is not intentionally passed by us to Google AdMob for advertising purposes.
You can withdraw consent at any time under Settings → Usage analytics. Collection then stops and locally buffered analytics data is cleared where supported. Previously collected information may remain for the configured retention period or in aggregated reports.
The free version of DressCubeAI displays advertising, including rewarded and interstitial advertisements, through Google AdMob. Advertising helps fund the Service.
Depending on your platform, region, device settings and the consent or restriction signals available to Google, an advertisement may be personalized, non-personalized or limited. Where Google does not receive a consent signal required for a particular form of advertising, Google may restrict advertising, attempt to serve an eligible limited advertisement, or serve no advertisement. Limited advertisements do not use personal data for personalization, but IP address and limited technical information may still be processed to deliver the advertisement and protect against fraud and abuse.
Android. The App requests Android's advertising-ID permission. Google AdMob may access the Android advertising identifier where the operating system and your device settings make it available. You can manage or delete the advertising identifier through your Android privacy settings.
Apple devices. The current App does not request Apple's App Tracking Transparency authorization and does not intentionally make the Apple advertising identifier (IDFA) available for tracking across other companies' apps or websites. Advertising may still be delivered using contextual, technical or other information permitted by Apple and your device settings.
Reward verification. For an advertisement that credits Coins, the App sends AdMob a pseudonymous internal account identifier as both the reward-verification user identifier and custom data. Google returns this identifier in the server-side verification process so that we can credit the correct account and prevent duplicate or fraudulent rewards. It does not contain your name or email address.
Google processes advertising data under its own terms and privacy information. For more information, see Google's Privacy Policy and How Google uses information from sites or apps that use its services.
DressCubeAI uses automated processing to generate AI classifications and recommendations and to perform certain entitlement, reward, duplicate-claim, fraud, and security checks. Google AdMob also uses automated systems to select and deliver advertisements. DressCubeAI does not use its AI styling outputs to make decisions that produce legal or similarly significant effects about you. If you believe an automated entitlement, reward, fraud, or account-security result is incorrect, contact us so that we can review it. Where applicable law provides a right concerning a solely automated significant decision, you may request human intervention, express your point of view, and contest the decision.
We may send essential account, security, transaction, deletion, and service notices; these are not marketing messages. We will send optional promotional communications about DressCubeAI only where permitted by law and will obtain consent where required. You may object or opt out at any time, free of charge, by using the unsubscribe or notification control provided or by contacting us. We do not provide your contact information to third parties for their own direct marketing.
We use technical and organizational measures designed to protect personal data, including encryption in transit and at rest, secure authentication, access controls, monitoring, and rate limiting. No electronic service can guarantee absolute security.
DressCubeAI is not directed at children under 16, and we do not knowingly collect personal data from children under 16. If a user is under the age of legal capacity in the country where the user lives and applicable law requires consent from a parent or legal guardian for consent-based processing, the parent or guardian must provide the required authorization. Advertising may be displayed to users aged 16 or 17 and is subject to applicable platform, regional, consent, and age-related restrictions. If we learn that personal data from a child under 16 has been collected, we will take reasonable steps to delete it. If you believe a child has provided us with personal data, contact us.
We may update this Privacy Policy to reflect changes in the Service, our providers, technology, or legal requirements. We will update the "Last Updated" date and, where appropriate, provide additional notice through the App, by email, or by other suitable means.
For questions, concerns, complaints, or requests regarding this Privacy Policy or your personal data, contact:
Upsite Consulting W.L.L.
Flat 2142, Building 2648, Road 5720, Block 257
Muharraq, Kingdom of Bahrain
Email: contact@dresscube.ai