Last updated: 22 September 2026
Version 1.0 — 22 September 2026. Written in-house, not reviewed by a solicitor. The published page carries its own "last updated" date, set when it is generated from this file.
The rest of this policy is the detail behind those six points.
Glazed Ltd ("Glazed", "we", "us") is the data controller for the personal data described in this policy.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk — but we would rather you told us first.
| Data | Why | Legal basis |
|---|---|---|
| Email address | To create your account, sign you in, and send password resets | Performance of a contract |
| Password | Stored only as a cryptographic hash — we cannot read it | Performance of a contract |
| Display name (optional) | To personalise the app | Performance of a contract |
| Profile picture (optional) | Shown on your profile. Only if you choose to add one | Consent — you add it deliberately and can remove it |
| Sign-in provider identifiers | If you use Sign in with Apple or Google | Performance of a contract |
| Push notification token | A code identifying your device, so we can tell you when a creator you follow posts. Stored only if you allow notifications, deleted when you sign out or uninstall | Consent — you grant notification permission deliberately, and can withdraw it in your phone's settings or ours |
What we do not collect: the photograph of your face.
The analysis runs entirely on your device. The image is held in your phone's memory while it is processed and is then discarded. It is never uploaded to us, and there is no field anywhere in our systems capable of storing it.
What we do save, when you choose to save a result:
| Data | What it is |
|---|---|
| Season | e.g. "Deep Winter" |
| Confidence score and band | How certain the analysis was |
| Runner-up season | The next closest match |
| Axis values | Three numbers describing warmth, depth and clarity |
| Measured region colours | Numeric colour values (CIELAB) derived from your skin, hair and eyes |
| White balance method | Which correction the analysis applied |
| Date of the analysis | |
| Your answers to the tie-break questions, if you answer them | How your skin reacts to sun, whether gold or silver suits you, your natural hair colour, and how bold colour looks on you — used to settle a result the photograph could not |
| The unadjusted reading | What the photograph alone said, before your answers moved it, so a result can be explained and the method improved |
Legal basis: your consent, and your explicit consent for the skin measurement (see section 3). We do not rely on "performance of a contract" here: the app gives you a result without an account, so storing the measurement is not something the service requires — it is something you choose. You can withdraw at any time.
One of the tie-break questions asks how your skin reacts to strong sun. That is a question about your skin type, so we treat your answer with the same care as the measurements themselves.
Please read section 3 regarding the measured region colours. They are numbers, not images, but they warrant their own explanation.
| Data | Why |
|---|---|
| Photographs of clothing and accessories | So you can recognise your items. Uploaded to our storage |
| Item name, category, colour | To score items against your palette |
| Match scores | Calculated results |
Legal basis: performance of a contract.
Wardrobe photographs are stored in a private bucket. Each user's files sit in their own folder, and our database rules prevent any account reading another account's folder. Images are served through short-lived links that expire after one hour.
If you photograph a garment you are wearing, your face may appear in that image. That image is uploaded. If you would rather it were not, photograph the item flat.
| Data | Why | Legal basis |
|---|---|---|
| Which products you tap through to retailers, the retailer, your season, and the match score | To understand which recommendations are useful, and to improve matching. This is also the basis of the aggregate statistics described in section 5 | Legitimate interests — improving and funding a service you use, in a way we consider you would reasonably expect |
| Premium purchase status and history | To give you what you paid for and to handle refunds | Performance of a contract; legal obligation for records |
| Basic technical data (app version, device model, operating system, crash reports) | To fix faults | Legitimate interests |
If you turn on Help improve colour science, we also store:
| Data | Why |
|---|---|
| That you opted in, the exact wording you agreed to, and when | So we can show what you actually agreed to, rather than merely assert it |
| Your age band, if you give one | A band such as 35–44 — never a date of birth |
| Your gender, if you give one | From a short list, including "prefer not to say" |
| Your country | Read from your device's region setting, not asked |
| Whether you are over 18 | Asked before anything else on that screen. See section 9 |
Legal basis: consent, and you can withdraw it at any time in Settings → Your data. Withdrawing stops any future contribution. Statistics already published cannot be recalled, and we say so on the screen itself rather than in the small print.
This is genuinely optional. The app behaves identically whether you opt in, opt out, or ignore it. Nothing is withheld, nothing is nagged — you are asked once.
Every consent and every withdrawal is written to an append-only record. We never edit or delete an entry: a withdrawal is a new entry, so the history stays honest.
If you use Dress together to find colours you and someone else can both wear, we store only their first name and their colour season.
| Data | Why |
|---|---|
| Name | So you can tell them apart in the app |
| Season | The only thing needed to work out shared colours |
We deliberately store nothing else about them — no photograph, no email, no account, no contact details. Someone you add has not agreed to anything with us, so the least we can hold about them is the right amount. You can delete them at any time, and doing so removes the record entirely.
Legal basis: legitimate interests — a first name and a colour category, held at your request, to provide a feature you asked for.
Your handle, display name, biography, social media usernames, self-reported audience size, and your season. Legal basis: performance of a contract. Once approved, your creator profile is visible to other users — that is the point of it.
The analysis produces numeric measurements of your skin, hair and eye colour. These are numbers, not images, and they cannot be turned back into a photograph of you.
We want to be straightforward about something: it is arguable that measurements of skin colour could be said to reveal information about racial or ethnic origin, which is a special category of personal data under UK data protection law and attracts stronger protection.
Our position is that these measurements exist solely to place you into one of twelve colour seasons, are not used to identify you as an individual, and are not used to infer your ethnicity, nor shared for any such purpose. But we would rather state the question openly than pretend it does not exist.
Because of this, we ask for your explicit consent before saving these measurements, and you can withdraw that consent at any time by deleting your analysis or your account. Withdrawing consent does not affect anything done beforehand.
How well it works across skin tones. Our test set currently under-represents deeper skin tones, due to a small sample size and the study being early on. Results may therefore be less reliable for some people than for others. We would rather say so than let you find out. Every result carries a confidence score, and a low one means exactly what it says — and we are continuing to widen the sample.
We do not use these measurements, or any inference from them, to make automated decisions that produce legal or similarly significant effects about you.
We do not sell your personal data. We never have and we do not intend to. (Section 5 covers anonymous statistics, which are a different thing entirely.)
We use the following service providers, who process data on our instructions:
| Provider | What they handle | Where |
|---|---|---|
| Supabase (Supabase Pte. Ltd, Singapore) | Database, accounts, wardrobe image storage | Data stored in Frankfurt, Germany |
| Apple | Payment processing for the premium unlock. Apple is the merchant of record and we never see your card details | Ireland / USA |
| RevenueCat | Verifies your purchase receipt so we know what you are entitled to | USA |
| [ANALYTICS PROVIDER, IF ANY] | Crash reporting and usage statistics | [REGION] |
| Affiliate networks (e.g. Sovrn, Awin) | When you tap through to a retailer, the network records the referral so we can be paid commission | UK / EU / USA |
When you tap a product link you leave Umber and enter the retailer's own website, which is governed by their privacy policy, not ours.
Your data is stored in the European Economic Area, which the UK recognises as providing adequate protection. Our database provider is a Singapore company, so for that relationship we also rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, which form part of their contract with us. Where any other provider above is outside the UK and EEA, we rely on the same safeguards or on an adequacy decision.
We may also disclose data where we are legally required to, or to establish or defend legal claims.
This section describes something we do commercially. We would rather you read it than find out later.
What we may do. We create statistics from patterns across our users, and may publish, share or licence them to third parties — fashion retailers, beauty brands, research firms, trend forecasters. For example:
That third example is the kind that needs your opt-in, because it cuts the figures by age and gender. Without it we can still say the first two.
What leaves this company is a statistic. Never a record.
This is the distinction the whole section rests on, so we will be plain about it. A single row of our data — your season, your measurements, your age band — would be close to unique to you even with your name stripped out. We therefore never sell, share or licence data at the level of individual people, to anyone, under any agreement. What we license is counts and percentages about groups.
How we protect this. These are commitments, not aspirations:
Your control. Two separate things, and you can change either at any time in Settings → Your data:
Once a statistic is made, it is no longer personal data and data protection law no longer applies to it — which is precisely why we set the rules above ourselves rather than waiting to be told.
| Data | Retention |
|---|---|
| Account and analyses | Until you delete your account |
| Wardrobe items and photographs | Until you delete them, or your account |
| Click history | 24 months, then deleted |
| Push notification tokens | Until you sign out, uninstall, or turn notifications off. Tokens reported as dead by Apple are deleted automatically |
| Purchase records | 7 years — required by UK tax law |
| Tie-break answers | With the analysis they belong to; deleted with it |
| Consent and withdrawal records | 6 years after the account closes — they are the evidence that consent was given, so they outlive the consent |
| Age band, gender, country | Until you withdraw from "Help improve colour science", or delete your account. Withdrawing clears them |
| Anonymous aggregate statistics | Indefinitely, as they are no longer personal data |
| Backups | Deleted data disappears from backups within 30 days |
Under UK GDPR you have the right to:
You can do the first four yourself, immediately, in the app: Profile → Your data → Export everything, or Delete my account data.
For anything else, email hello@getglazed.app. We will respond within one month.
Passwords are hashed and we cannot read them. Data is encrypted in transit and at rest. Access rules are enforced by the database itself rather than by application code, so a bug in the app cannot expose another user's data. Wardrobe images sit in private storage behind expiring links.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will tell you and the ICO without undue delay.
Umber is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
Separately, and whatever your age, nobody under 18 is included in any statistics we licence. We ask your age band before we ask anything about research, and:
We rely on what you tell us rather than verifying your age, which we judge proportionate to what this app does. Skipping the question costs you nothing.
If we make a material change — particularly to section 5 — we will notify you in the app before it takes effect. We will not retrospectively apply a new use to data collected under an older policy.
hello@getglazed.app Glazed Ltd, 282 Leigh Road, Leigh-on-Sea, England, SS9 1BW