Privacy Policy

Last Updated: October 24, 2026

1. Introduction

Welcome to PrefNest ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our persona management application.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Username, email address, and password (encrypted)
  • Persona Data: Names, birthdays, and other information you add to your personas
  • Profile Information: Optional profile details you choose to provide

2.2 Information from Third-Party Login Services

When you sign in using Google, Facebook, Apple, or GitHub, we receive:

  • Google: Email address, name, profile picture
  • Facebook: Email address, name, profile picture
  • Apple: Email address, name (on first login only)
  • GitHub: Email address, username, profile picture

2.3 Automatically Collected Information

  • Session Data: Login timestamps and session management data
  • Security Logs: IP addresses and authentication attempts (for security purposes)

3. How We Use Your Information

We use your information to:

  • Provide and maintain your account
  • Enable you to create and manage personas
  • Authenticate your identity when you log in
  • Send you important account notifications
  • Protect against unauthorized access and fraud
  • Comply with legal obligations

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • Encryption: Passwords are hashed using bcrypt/Argon2. Dates of birth, your address and your phone number are encrypted in our database (AES-256), with the key stored separately
  • Private photos: Persona photos and face crops are stored encrypted (AES-256) and are never public. They're shown only to you when you're signed in. An AI assistant you connect gets a link that expires after one hour
  • HTTPS: All data transmission is encrypted with SSL/TLS
  • Database Security: Prepared statements to prevent SQL injection
  • CSRF Protection: Tokens to prevent cross-site request forgery
  • Session Security: Secure session cookies with HttpOnly and SameSite flags
  • Visit statistics: We count page visits with Cloudflare Web Analytics, which uses no cookies, doesn't fingerprint your device, and doesn't collect personal data
  • Bot check: The sign-up and forgot-password forms use Cloudflare Turnstile to tell people from bots. It runs in your browser, uses no tracking cookies, and Cloudflare uses the signals only for this check

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • With Your Consent: When you explicitly agree to share your information
  • People you share a profile with: When you send someone an invite link for a persona and they accept it, they can see the parts you ticked (see 5.5). Nothing is shared until they accept, and you can stop sharing at any time
  • Legal Requirements: When required by law or to protect our rights
  • Service Providers: Third-party authentication providers (Google, Facebook, Apple, GitHub) when you choose to use their login services
  • AI analysis (Anthropic): Search queries and persona details (such as sizes and color preferences) are sent to Anthropic's Claude AI to understand what you're looking for. When you save a persona's style inspiration (for example a celebrity or a look), that text and the persona's gender are sent to Claude to describe the style as shopping keywords
  • "Who's it for?" photos and links: When you snap an item (and its size tag) or paste a product link, the photo or the product's details go to Anthropic's Claude AI together with short summaries of the people you shop for (sizes, colors, style, loves and no thanks, and only the shared parts of profiles shared with you). Names, notes, birthdays and photos of people are not sent. Photos are used once and never stored. For a link, we read the product page's name, price and picture from the store's website
  • Product search (Shopify): Search queries and persona shopping context are sent to Shopify's product catalog to find products. No account or contact details are shared
  • Affiliate partners: When you click a product or brand link, we record the click (the store's address and which persona's search it came from) and may add an affiliate code, so the store or an affiliate network can credit us if you buy. The store learns that you came from PrefNest; we don't share your name, email or persona details with it. This never changes the price you pay. Click records are kept for 12 months, then deleted automatically. If you delete a persona, its clicks are no longer linked to it, and if you close your account, they're no longer linked to you
  • AI agents you connect: If you create an access token, or approve an app with "Sign in with PrefNest" (for example from claude.ai or ChatGPT), that assistant can read your personas' profiles. If you allow it when connecting (personal access tokens always allow it), it can also see your trips and occasions, including their destinations, dates and weather, and add or update them; it can't delete them. It keeps that access until you revoke the token or disconnect the app on My Account
  • Shopify stores with our app: Stores that install the "Fit me with PrefNest" Shopify app work like any store you connect (below): you approve each store once, and it only ever gets a size suggestion for the product you're looking at, never your profile. The app reads nothing from the store and we keep no data from Shopify about its customers. If a store removes the app, its access ends at once
  • Stores you connect ("Fit me with PrefNest"): When you approve a store, it gets size suggestions for one persona you choose, plus saved sizes, body measurements, or color, style and brand preferences only if you tick them. Measurements you save are used to suggest sizes even when you don't share them. Stores never receive names, photos, birthdays, addresses or your email, and each store gets a different ID for the persona. Every store access is listed on My Account for 90 days and then deleted automatically, and you can disconnect the store at any time. Deleting a persona disconnects its stores and erases its store history

5.1 Color Profile (Face Photo Analysis)

Color analysis is optional and runs only when you press "Analyze colors" and confirm consent. When you do:

  • The persona's dashboard photo is sent to Anthropic's Claude AI, which describes visible colors (skin undertone and depth, hair, eye and lip color) and suggests makeup shades
  • We store only those color results and suggestions. We do not create or store facial geometry, face measurements, or any biometric identifier
  • The analysis is not available for anyone under 18, and you must confirm the person in the photo agreed to it
  • You can edit or delete the color profile at any time on the persona page. Deleting a persona or your account deletes it too
  • If you select the face in a photo, a cropped copy of that area is saved alongside the photo and used for the analysis. It is deleted with the photo

5.2 Style Profile (Full-Length Photo Analysis)

Style analysis is optional and runs only when you press "Analyze style" and confirm consent. When you do:

  • The photo you marked as Full length, with the persona's height, is sent to Anthropic's Claude AI, which suggests flattering cuts, fits and lengths
  • We store only the written suggestions. The analysis is instructed never to estimate or comment on weight or body size
  • It is not available for anyone under 18, and you must confirm the person in the photo agreed to it
  • You can delete the style profile at any time on the persona page. Deleting a persona or your account deletes it too

5.3 Trips & Occasions

  • When you add a trip or event, we store its dates, who is going, and the place, name and notes you enter. The place, name and notes are encrypted
  • The city name is sent to our weather provider (Open-Meteo) to find the weather. Only the city and rounded coordinates are sent, never who is travelling
  • To plan outfits, the occasion, place, weather and each person's gender, age, height, and color and style preferences are sent to Anthropic's Claude AI. Names, photos, birthdays and addresses are not sent
  • If you ask for a reminder, we email you 14 days before. You can turn it off on the occasion page
  • Occasions are deleted automatically 90 days after they end, or when you delete them. Closing your account deletes them too

5.4 Birthdays, important dates and reminder emails

  • Important dates you add to a persona (such as an anniversary) are stored encrypted, like dates of birth
  • We email you 7 days before each persona's birthday and each important date, with gift ideas. These emails are on by default
  • Turn them off anytime on My Account or with the "Stop these reminders" link in any reminder email. You can also turn off reminders for a single date
  • We keep a record of which reminders were sent, so you don't get the same one twice. It's deleted after about a year

5.5 Shared profiles

  • You can share a persona with family or friends with an invite link. You choose what they see: sizes, colors, style, brands, "Loves and No thanks", color profile results, birthday (month and day only) and body measurements. They always see your latest version, read-only
  • Never shared: photos, birth year and age, height, weight, your notes about the persona, your trips, and your email address. The person sees your name (or username)
  • You can also ask someone (or their parent) to fill in a persona you keep for them, with a request link. If they answer, they choose a profile of theirs, or start a new one from the details you had (not your notes, photos or brands), and share it back to you; it then replaces your copy. Nothing is shared until they answer
  • Invite and request links work once and expire after 7 days. We store only a scrambled (hashed) form of the link, and the name you give an invite is encrypted
  • If you share your sizes (or measurements), someone you share with can also use your profile at stores with "Fit me with PrefNest" when buying you a gift. The store only gets a size suggestion for the item, never your profile or name, and can't tell it's you. This stops as soon as you stop sharing or stop sharing your sizes
  • Someone you share with can use the profile to search for gifts, add the person to their trips, see their birthday under "Coming up" and get a birthday reminder email, and see a short note of what changed (for example "Loves: added soccer"). AI assistants they connect can read the shared parts too
  • They can keep private notes and their own important dates (such as an anniversary) on the profile. Notes and dates are encrypted, and only they can see them
  • If they already had their own persona for you, they can use your shared profile instead. Their copy is hidden, not deleted, and comes back if sharing stops. Their trips and dates for you move to your shared profile, but stay theirs: you never see them
  • You can change what each person sees, or stop sharing, on the persona's page. Stopping is immediate, the person isn't notified, and their notes are deleted. They can also remove the profile from their account. Deleting the persona ends all its sharing
  • "What changed" notes are deleted after 90 days, and used or expired invite links are deleted daily

6. Your Privacy Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Update: Modify your account information and persona data
  • Delete: Request deletion of your account and all associated data
  • Export: Download your persona data
  • Withdraw Consent: Disconnect third-party login services

To exercise these rights, visit the Data Deletion Instructions page or contact us.

7. Third-Party Services

When you use third-party login services (Google, Facebook, Apple, GitHub), their own privacy policies apply to the information they collect. We recommend reviewing their privacy policies:

8. Data Retention

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. When you delete your account, we permanently remove all your personal data from our systems within 30 days.

Security records are deleted automatically after 90 days: failed sign-in attempts (the email or username tried and the IP address), which we use to block password guessing, and used or expired sign-in codes and password-reset links.

Shared profiles: used or expired invite links are deleted daily, and "what changed" notes after 90 days.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. A parent or other adult may keep a persona for a child on their own account and may share it with family; the child does not have an account. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@ganootech.com
Website: https://prefnest.com

Data Deletion Instructions | Home