flatterlyBack to App

California Privacy Rights

Last updated: February 7, 2026

This page provides additional information for California residents about their privacy rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These rights are in addition to the rights described in our Privacy Policy.

1. Your California Privacy Rights

As a California resident, you have the following rights under the CCPA/CPRA:

1.1 Right to Know

You have the right to request that we disclose the following information about our collection and use of your personal information over the past 12 months:

  • The categories of personal information we collected about you.
  • The categories of sources from which the personal information was collected.
  • Our business or commercial purpose for collecting or selling that personal information.
  • The categories of third parties with whom we share that personal information.
  • The specific pieces of personal information we collected about you.

1.2 Right to Delete

You have the right to request that we delete any of your personal information that we collected and retained, subject to certain exceptions. Once we receive and verify your request, we will delete your personal information from our records within 45 days, unless an exception applies. We will also direct our service providers to delete your personal information from their records.

1.3 Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you.

1.4 Right to Opt-Out of Sale or Sharing

Flatterly does not sell your personal information. We do not sell personal information to third parties for monetary or other valuable consideration. We also do not share personal information for cross-context behavioral advertising purposes.

Our affiliate program involves sharing a referral identifier with retailers when you click product links. This identifier does not include your name, email, style profile, biometric data, or any other personal information. We do not consider this a "sale" or "sharing" under the CCPA/CPRA, but we disclose it here for full transparency.

1.5 Right to Limit Use of Sensitive Personal Information

Flatterly may process certain sensitive personal information, including biometric data derived from photos you submit for style analysis. You have the right to limit our use of this sensitive personal information to what is necessary to provide the Service. You may exercise this right through Settings > Data & Privacy in your account, or by contacting us.

1.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not:

  • Deny you goods or services.
  • Charge you different prices or rates, including through discounts or penalties.
  • Provide you a different level or quality of goods or services.
  • Suggest that you will receive a different price or rate or a different level or quality of goods or services.

2. Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

  • Identifiers: Name, email address, unique account ID, IP address, device identifiers.
  • Personal Information (Cal. Civ. Code 1798.80(e)): Name, payment information (processed by Stripe; we do not store full card numbers).
  • Characteristics of Protected Classifications: Age range (for age verification only; we do not collect race, gender identity, or other protected characteristics beyond what you voluntarily provide in your style profile).
  • Commercial Information: Purchase history, shopping recommendations viewed, product links clicked, subscription status.
  • Biometric Information: Body geometry measurements, color palette analysis, and style characteristics derived from AI analysis of photos you submit.
  • Internet or Electronic Network Activity: Browsing history within the app, interaction data, device and browser information.
  • Geolocation Data: Approximate location based on IP address (city/region level; we do not collect precise GPS location).
  • Sensory Data: Photos and images you upload for style analysis.
  • Professional or Employment Information: Not collected.
  • Education Information: Not collected.
  • Inferences: Style preferences, aesthetic profile, shopping behavior patterns, and the Style Genome profile generated from the above data.

3. How We Use Personal Information

We collect and use personal information for the following business purposes:

  • Providing, personalizing, and improving the Service.
  • Generating AI-powered style analysis, outfit feedback, and shopping recommendations.
  • Processing payments and managing subscriptions.
  • Communicating with you about your account, features, and updates.
  • Ensuring security, preventing fraud, and debugging.
  • Complying with legal obligations.

4. How We Share Personal Information

We may disclose your personal information to the following categories of third parties for business purposes:

  • Service Providers: Cloud hosting (Railway, Vercel), image processing (Cloudinary), AI analysis (OpenAI), payment processing (Stripe), analytics (PostHog), error monitoring (Sentry).
  • Affiliate Partners: Referral identifiers only (no personal information) when you click product links.

We have not sold personal information in the preceding 12 months. We have not shared personal information for cross-context behavioral advertising in the preceding 12 months.

5. How to Exercise Your Rights

To submit a request to exercise any of the rights described above, you may:

  • Email us at privacy@flatterly.com with the subject line "California Privacy Rights Request."
  • Use the Data & Privacy section in your Flatterly account Settings.

5.1 Verification Process

To protect your privacy, we must verify your identity before fulfilling your request. Our verification process may include:

  • Confirming your email address matches the account on file.
  • Asking you to verify recent account activity (such as recent Fit Check dates or subscription status).
  • For requests to access specific pieces of personal information, we may require additional verification steps for security.

We will respond to your verified request within 45 days. If we need additional time, we will notify you of the reason and the extension period (up to an additional 45 days).

5.2 Authorized Agents

You may designate an authorized agent to make a request on your behalf. To do so, you must provide the agent with written permission and verify your identity directly with us. We may deny a request from an agent who cannot provide proof of authorization.

6. Data Retention

We retain each category of personal information for as long as necessary to fulfill the purposes for which it was collected, as described in our Privacy Policy. In general:

  • Account and profile data is retained for the life of your account plus 30 days after deletion.
  • Photos, style analysis, and shopping data are retained for up to 365 days.
  • Biometric data is deleted within 30 days of account closure.
  • Aggregated, de-identified data may be retained indefinitely for product improvement.

7. Changes to This Notice

We may update this California Privacy Rights notice from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and may provide additional notice through the app or via email.

8. Contact Us

If you have questions about your California privacy rights or wish to exercise any of the rights described above, please contact us: