Last updated: 5 November 2026 · Replaces the version of 1 November 2026
Wearlo is an AI virtual try-on app for Android and iOS, operated from India by Akash Modak (“Wearlo”, “we”, “us”). This policy explains what we collect when you use the Wearlo app and website, why, how long we keep it, who processes it for us, and the choices and rights you have. It is written to be read, not skimmed. If anything here is unclear, write to contact@getwearlotry.com.
The data fiduciary (the “controller” in European terms) is Akash Modak, trading as Wearlo, India. The app is published on Google Play under the package name com.wearlo.app. Contact details and the grievance officer are in section 13.
We collect only what the app needs to work and to keep it safe. Nothing is collected for advertising.
| Data | Where it comes from | Why we use it |
|---|---|---|
| Account: email address, display name, profile picture URL, sign-in method (Google or Apple), account id, role, creation date and the time of your last sign-in | Your Google or Apple sign-in | To create and secure your account, keep your credits, and reach you about your account |
| Photos: the photo of yourself and the outfit photo (or the product images fetched from a shop link you pasted) | You, each time you start a try-on, outfit edit, AI edit or extraction | Only to produce the result you asked for. See section 3 |
| Generated images | Produced by the AI from your photos | Delivered to your phone; kept on our servers for at most 24 hours |
| Try-on activity: for each generation, its type, status, the garment category or edit template, the text prompt you typed for an AI edit, the AI model used, cost, and timestamps | Generated by the app | To run the job, charge or refund the right number of credits, show you its status, detect abuse, and understand failures |
| Credits and purchases: credit balance and ledger, the store’s order or transaction id, product bought, amount and currency, subscription status and renewal date | The app and Google Play or the App Store | To grant what you paid for, prevent double grants, handle renewals and support requests. We never receive your card or bank details |
| Feedback and bug reports: your message, an optional star rating, the app version, operating system version and phone model, the screen you were on, and whether you agreed to a reply by email | You, through Help → Send feedback or Report a bug | To read and answer feedback and fix bugs |
| Content reports: the reason you chose, your note, and which generated image you reported | You, through the Report button | To review and act on harmful or poor results, as Google Play requires for AI apps |
| Notifications: your device’s push token and your three notification preferences | Your device, if you allow notifications | To tell you when a look is ready, remind you when your free credit unlocks, and send product news only if you leave that toggle on. From 1 December 2026 also to notice several accounts signing in on the same app install (see Security records below) |
| Usage analytics: event names such as “try-on started” with technical properties | The app | To see which features are used and where the app fails. No advertising identifiers, no cross-app tracking |
| Technical logs: IP address, request path, timing, status codes, app version | Our servers, automatically | Security, rate limiting, debugging. Logs are kept for a short period and are not combined with your photos |
| Security records, from 1 December 2026: a keyed hash of the network address an account was created from (never the address itself), and the IP address of each sign-in | Our servers, automatically | To stop one person creating many accounts to collect free credits, and to protect accounts. We compare these records, push tokens, account names and sign-in times across accounts and list possible matches for a member of our team, who decides what happens. Nothing is decided automatically |
| Email we send you and whether it was delivered | Our email provider | A welcome email on sign-up, a confirmation when Wearlo Pro starts, and replies to your feedback |
| Data | Kept for |
|---|---|
| Input photos | Until the generation finishes, then deleted |
| Generated results on our servers | Up to 24 hours |
| Account, credits, try-on activity, notification settings, feedback | Until you delete your account; then deleted immediately |
| Sign-in marker after deletion: a keyed hash of your Google or Apple account id (not the id, your email or your name) | 365 days after you delete your account (deleting another account made with the same Google or Apple account restarts the period), so the free signup credits are given once per Google or Apple account. It cannot be turned back into your account id without our key |
| Refund record after deletion: keyed hashes of your paid order numbers (not the numbers themselves) and, if a store refund of an order you had already spent credits from arrives after the deletion, the number of credits owed | 365 days after you delete your account, with the sign-in marker. If you sign in again with the same Google or Apple account within that time, the owed credits are deducted from the free credits the new account receives, never from credits you buy |
| Sign-up network hash, from 1 December 2026: a keyed hash of the network address an account was created from | 90 days from the sign-up, also after you delete your account, so that accounts created and deleted in bulk still count. It cannot be turned back into an address without our key |
| Sign-in sessions: the IP address of the sign-in (recorded from 1 December 2026) and the short technical description of the app and phone software that the app sends with it (its user agent) | Until that sign-in expires, 30 days at most, then both are erased |
| Credit-pack purchase records | Until you delete your account, then deleted (apart from the refund record above). Google Play and the App Store keep their own records of your purchases under their policies |
| Wearlo Pro subscription record (the store’s subscription identifier, product, status, dates and the last billing period credited) | Kept after account deletion without the link to your account, so the same store subscription can never be credited twice through a new account, and so a later renewal, cancellation or refund reported by the store is handled correctly |
| Content reports | Kept after account deletion, without your account link, for as long as needed to keep the service safe and to meet legal obligations |
| Usage analytics | Kept without your account link after deletion, in aggregate form |
| Technical logs | A short period, then deleted or anonymised |
We share personal data only with providers that help us run Wearlo, under agreements that limit their use of it to our instructions. We do not sell personal data and we do not share it with advertisers or data brokers.
| Provider | What they process | Purpose |
|---|---|---|
| fal.ai (United States) | Your photos and the prompt, for the duration of the generation | Running the AI image models |
| Google (Sign-In, Play Billing, Firebase Cloud Messaging) | Sign-in identity; purchase tokens; your device push token | Signing you in, verifying purchases, delivering notifications |
| Apple (Sign in with Apple, App Store), on iOS | Sign-in identity; purchase receipts | Signing you in, verifying purchases |
| Railway (United States) | Everything our servers and database hold | Hosting the API, database and cache |
| S3-compatible object storage (United States) | Photos and results, for the periods in section 4 | Temporary file storage |
| Resend (United States) | Your email address and the content of the emails we send | Delivering our emails |
| Online shops whose links you paste (Amazon, Flipkart, Myntra, Ajio, Meesho) | The link you pasted, fetched from our servers, not from your phone | Fetching the public product images for your try-on. Nothing about you is sent to the shop |
We may also disclose data when the law requires it, to protect people from harm, to enforce our terms, or, if Wearlo is ever sold or merged, to the new operator under this same policy.
Our servers and the providers above are in the United States. If you are in India, your data is therefore transferred outside India, which the Digital Personal Data Protection Act permits except to countries the Government restricts. If you are in the European Economic Area or the United Kingdom, transfers rely on the providers’ standard contractual clauses and equivalent safeguards.
Where a legal basis is required (for example under the GDPR), we rely on: performance of our contract with you for the account, photos, generations, credits and purchases; your consent for notifications, product news and contacting you about feedback, which you can withdraw at any time in the app; legitimate interests in keeping the service secure, preventing abuse and understanding how it is used; and legal obligations and fraud prevention for subscription records and content reports.
You can ask us to confirm what personal data we hold about you, to correct it, to erase it, to give you a copy, or to stop a particular use. Write to contact@getwearlotry.com from the email address on your account. We reply within seven days and act on valid requests without charge. Where the law gives you a right to lodge a complaint, you may do so with the Data Protection Board of India or, in the EEA or UK, with your local supervisory authority.
Data travels over TLS. Access to accounts is through signed, short-lived tokens; access to our administration tools is limited to named staff, role-restricted and logged. Photos are stored only for the periods above. No system is perfectly secure, so if we learn of a breach affecting you we will tell you and, where required, the authorities.
Wearlo is for adults. You must be at least 18 years old to use it, and you may only upload photos of adults. We do not knowingly collect personal data from anyone under 18; if we learn that we have, we delete it. Parents or guardians who believe a child has used Wearlo can write to the address below.
This website is static. It sets no cookies, runs no analytics and loads no advertising trackers. Links to Google Play and to shops are ordinary links.
When we change this policy we update the date at the top. For changes that affect what we collect or how we use it, we also tell you by email or in the app before they take effect. This version adds the security records in sections 2 and 4, which start on 1 December 2026; every account is told by email before then, in the same notice as the refund record after deletion added on 4 November 2026. The 1 November 2026 version explained our existing practice in more detail and did not change what we collect or why. Earlier versions are available on request.
Akash Modak is the grievance officer for Wearlo under India’s Digital Personal Data Protection Act. Email contact@getwearlotry.com with “Privacy” in the subject. We acknowledge every message and respond within seven days.