Last updated 6 September 2026
Dresy lets you upload a photo of a person and see them wearing a different outfit. Photos of people are sensitive, so this policy explains plainly what we collect, where it goes, how long it stays, and how to get rid of it.
The short version. Your uploaded photos are stored privately and are never public. To create a result we send them to an AI partner, who deletes them within 72 hours and does not use them to train their models. Images you generate are stored so you can view and share them. You can delete your account and everything in it from inside the app at any time.
Dresy is operated by the Dresy team. For anything in this policy, write to hello@dresyapp.com.
| What | Why |
|---|---|
| Email address and display name | To create and secure your account |
| Photos you upload | To generate the result you asked for |
| Images we generate for you | So you can view, download and share them |
| Credit balance and transaction history | To run the credit system and support you if something goes wrong |
| Your referral code and who joined through it | To award referral credits |
| Basic usage events — sign-ups, generations, shares | To understand what people use and fix what breaks |
| Device and app version | To diagnose crashes |
We do not collect your contacts, your location, or your camera roll. We only receive the specific photos you choose to upload.
Photos you upload go to private storage. They are not publicly accessible and cannot be reached by anyone browsing the internet. When we need to send a photo to our AI partner, we generate a short-lived link that expires within a couple of hours.
Images we generate for you are stored at a public link so that sharing and gift cards work. Anyone holding that specific link can view that image. The links are long and unguessable, but they are not password protected. If you would rather an image not exist at all, delete it in the app.
We do not run the AI ourselves. To create a result we send your photo and the chosen garment to one of two providers:
We send only the image and the instruction needed to produce your result. We do not send your name, email or any other account information.
Before showing you a garment library, we run one automated check on your uploaded photo to estimate whether the person appears to be a child, so that we can limit which garments are offered. We also run an automated check on Couple Look results to make sure nobody has been rendered less clothed than in the original photo. Both checks are automated, produce a simple yes or no, and are not reviewed by a person.
| Data | Kept |
|---|---|
| Photos you upload | Until you delete the generation or your account |
| Copies held by our AI partner | Deleted by them within 72 hours |
| Images we generate | Until you delete them or your account |
| Account and credit records | Until you delete your account |
| Payment records | As long as tax and accounting law requires |
Purchases are handled by Apple and Google through their app stores, with RevenueCat managing subscription state. We never see or store your card details. We receive only confirmation that a purchase happened, so we can add the credits.
Dresy is for people aged 13 and over. Under 18s should have a parent or guardian's permission.
Dressing up a child in a family photo is something we expect people to do, and it is allowed — but only by that child's parent or guardian. By uploading a photo of a child you confirm you are their parent or guardian, or that you have that person's permission. When our automated check suggests the subject may be a child, we restrict the garments on offer.
If you believe a child's photo has been uploaded without permission, email hello@dresyapp.com and we will remove it.
Most Dresy photos are of someone other than the person using the app. Only upload a photo of another adult if they are happy for you to do so. If someone asks us to remove an image of them, write to us and we will.
Depending on where you live, you may have further rights under the GDPR, the UK GDPR or the CCPA. We honour these requests regardless of where you are.
Data is encrypted in transit and at rest. Uploads sit in private storage governed by row-level security, so one account cannot reach another's data. API keys are held server-side and never shipped inside the app. No system is perfect, and we will tell you promptly if a breach affects you.
Our database and storage are hosted by Supabase in Singapore. Our AI partners process images on infrastructure that may be in other countries, including the United States. Using Dresy means agreeing to that transfer.
We record simple product events such as sign-ups, generations and shares, so we can tell which features are worth keeping. We do not sell your data, and we do not run advertising trackers.
If we change this policy in a way that matters, we will tell you in the app before it takes effect. The date at the top always reflects the current version.