Privacy Policy

ALMARA, previously branded PADAN, is an AI-powered Personal and Family Digital Wardrobe. You can capture outfit-of-the-day (OOTD) photos, identify visible clothes and accessories with AI, build and organize wardrobes, request outfit ideas, plan family occasions and preserve historical photographs and family memories.

The Product Owner has identified NeoDataX Technology as the proposed operator. Its official registered identity and contact details remain subject to verification. This document is a review draft, not an approved or effective policy.

Account information includes the name and email you provide, authentication identifiers, profile information and preferences such as your Personal or Family wardrobe experience. Authentication also processes session information needed to keep you signed in.

Wardrobe records can include clothing names, categories, colours, patterns, materials, sizes, quantities, purchase prices and other details you choose to provide, ownership and review status, and clothing photographs. Photo and memory records can include personal OOTDs, family images, clothing crops, historical photographs, capture dates, save dates and optional notes.

Managed family records can include names, relationships, life stages, profile photos, associated wardrobes and activity records. AI-related information includes the image you select for analysis, clothing attributes and review decisions, outfit recommendations, request identifiers and usage-limit records. Stylist results are currently temporary rather than saved as permanent outfit records.

The service also processes technical information needed for requests, authentication, security and diagnostics. Browsers and hosting infrastructure may expose information such as device/browser characteristics and network request details. This does not mean ALMARA collects every possible device identifier.

ALMARA integrates Google Sign-In through Supabase Auth and requests the identity scopes openid, email and profile. Where Google Sign-In is enabled, Google may supply your account identifier, name, email address, email verification status and profile image where available.

These requested scopes do not grant access to your Gmail inbox, contacts or Google Drive. Availability depends on the operator's Google and Supabase configuration. Google handles its own authentication service under its applicable policies.

Information is used to authenticate you, maintain your chosen account experience, store OOTDs and memories, organize Personal and Family wardrobes, associate records with the correct managed member, manage clothing details and plan activities and outfits.

When you request AI, relevant information is used for clothing detection, wardrobe matching or Stylist recommendations. Usage records enforce pilot limits and protect against duplicate or abusive requests. Technical and diagnostic information supports reliability, troubleshooting and security.

AI requests are user-initiated. Saving a photo, opening a wardrobe or viewing an existing result does not itself start a new AI analysis. Clothing detection sends a prepared version of the selected photo to the Lovable AI gateway for Google Gemini processing. People and surroundings visible in that photo may therefore also be processed, even though the task is to identify clothing rather than people.

An explicitly requested AI clothing comparison may send two clothing images for a similarity assessment. AI Stylist sends selected wardrobe text—clothing names, categories, colours, patterns, materials and recorded visible details—together with your occasion, style, include/avoid preferences and any weather information you enter. The Stylist request does not send wardrobe photos, member profile photos or family photos. Avoid including unnecessary personal or sensitive information in free-text fields.

AI is not necessarily processed on your device. Results can be incomplete or wrong, and you should review detections, matches and suggestions before relying on them or confirming wardrobe records. Recommendations do not establish that a garment is currently owned.

External providers may process and retain submitted data under their applicable terms and arrangements with the operator. We do not promise that images are never retained, never used by providers, or deleted immediately. Provider retention, processing locations and contractual safeguards require operator confirmation before this draft becomes final.

ALMARA accounts are intended for adults. A parent or authorized guardian may maintain a child's managed family profile without creating an individual account for the child. The account holder must have appropriate authority and permission to upload other people's photographs and to request processing of those images.

Personal and family photos and wardrobe records are private by default under the application's existing account-scoped access controls. Applicable family authorization and AI consent are checked before external family photo analysis. ALMARA does not automatically identify people using facial recognition; temporary labels used to describe visible clothing are not identity recognition.

Family clothing-detection permission is stored for the account holder and Family Space and may be revoked through the existing Family AI settings on Profile. Enabling permission does not start analysis. Family Stylist also requires explicit metadata-only confirmation. Revocation blocks future applicable requests but does not itself erase saved photos, wardrobe records or data already processed by providers.

Supabase provides authentication, database and photo storage. Google provides authentication where enabled and Gemini AI processing. Lovable provides application hosting/development infrastructure and AI routing where applicable. Each service may process information relevant to its role under its own terms and the operator's arrangements.

Requested AI processing can transfer selected content outside ALMARA's storage environment and may involve processing outside Malaysia. This policy does not make unverified promises about provider locations, contractual guarantees or retention. Disclosure may also be necessary to respond to valid legal requirements or protect the service and users, subject to applicable law.

The application uses authentication, user-scoped record access, private photo storage and time-limited authorized image links. Access to wardrobe and family records is checked against the account and, where relevant, the managed member. You should protect your account and avoid sharing access or private image links.

These measures reduce risk but do not guarantee absolute security or privacy. No online service can promise that loss, unauthorized access or interruption will never occur. This draft makes no certification or audit claim.

Records are retained as needed to provide the service and meet applicable obligations. The operator must confirm specific operational retention and backup practices; no fixed retention period or immediate permanent deletion guarantee is stated here.

Available editing and item-removal controls affect the relevant records. Deleting a wardrobe item does not necessarily delete its stored image or original OOTD. Removing a cover does not erase the underlying family memory or file. Some usage request identifiers are retained to prevent replay. Withdrawing AI permission is not a deletion request.

There is currently no verified self-service account-closure or complete data-erasure workflow in the application. Account closure and data deletion require an operator-handled request, with identity and authorization checks and any applicable legal exceptions. An official request contact must be confirmed before this draft is approved. Deletion timing, backups and external-provider deletion handling are not yet verified.

Subject to applicable Malaysian personal data protection law and any lawful exceptions, you may request access to personal data, correction of inaccuracies, deletion or account closure, and withdrawal of applicable consent. You can edit supported profile and wardrobe information and revoke Family AI permission using existing settings.

The operator may need to verify your identity and authority, particularly for family-member information. Withdrawal can affect features that depend on consent and does not undo processing already lawfully completed. Nothing in this policy removes rights you have under applicable law. The official contact and request-handling procedure must be confirmed before final approval.

Authentication uses browser session storage mechanisms to maintain and refresh your session. The application also uses local storage for the active wardrobe space where relevant, session storage for a temporary sign-in destination, and session storage for your legal-page language choice. Temporary photo-review and Stylist results can be held in browser memory.

Clearing browser storage can sign you out or reset preferences; it does not delete server-side account records. Shared interface code contains a sidebar-preference cookie where that interface is used. No additional analytics, advertising tracker or cookie is introduced by these legal pages. Hosting-level logging and tracking settings still require an operational review; this draft does not claim that all infrastructure is tracking-free.

The operator may update this policy as ALMARA's features, providers or obligations change. An approved version should identify its effective date and explain material changes through an appropriate service notice. Where a changed processing purpose requires renewed consent, applicable consent must be obtained before that processing. This draft has no effective date.

Proposed operator: NeoDataX Technology, subject to verification of official registered details. A verified privacy/support email, any required registered address, and the procedure for privacy or closure requests have not been supplied. No contact address is invented in this draft. These details and the complete policy require Product Owner review and approval before publication or use in Google OAuth Branding.