Capucine

Privacy policy

Last updated: November 10, 2026

Translation provided for convenience: if there is any difference, the French version prevails. Français

Capucine is an iPhone and iPad app that turns your clothes into stickers and dresses your photo in the outfit you choose. This page explains, plainly, what we do with your data.

Who is responsible

Capucine is published by Samir Medani, in Poitiers (France). For any question about your data: contact@capucine.studio.

Data we use

We only use what the app needs to work and, if you agree, to improve it:

  • the garment photos you add or check before buying (“Should I buy it?”), and the stickers made from them;
  • your try-on photos (up to 5), each cropped around you directly on your iPhone before being sent, and the generated images (your looks);
  • your real face on your looks: after a try-on, your iPhone puts the face from your original photo back onto the look, so that AI does not redraw it. This setting is handled entirely on your iPhone, with Apple’s tools: the position of your face and its features (eyes, nose, mouth) is used only to align the two images; it is neither stored nor sent to our server or OpenAI, and is never used to recognize or identify you. The image with your real face stays on your iPhone: our server keeps the AI-generated image, and that is what your friends see in an “A or B?” vote. “See the AI-generated face” switches back to the generated image, look by look, and “Restore my real face” restores your face;
  • your inspiration photos (“Recreate this look”): a screenshot, a photo of a friend, a magazine or a shop, which may show another person. We only extract the clothes being worn (type, colour, pattern), without facial recognition or any data about the person photographed, and the photo is not kept;
  • if you launch an “A or B?” poll, the two looks you choose and the votes received. Your friends see them through a link you share: it is impossible to guess, does not appear in any search engine and expires after 7 days (you can delete it earlier in the app). Anyone who receives this link can see the photos of these two looks: only share it with people you trust. People who vote do not need an account; we only keep a random cookie fingerprint from them, to count one vote per browser and allow them to change their mind, and their IP address remains in memory for one hour at most, without being recorded, to prevent bursts of votes;
  • what you share with Capucine from iOS’s “Share” menu (Vinted, Safari, Instagram, Photos…): a link to a page, an image or text containing a link, and nothing else from the original app. The extension uses the Capucine account already open on your iPhone, without a new login; our server opens the link page to extract the image and the item information (if the shop refuses, your iPhone sends the page preview it retrieved, or the shared image), then the item is analysed as in “Should I buy it?”;
  • the progress of a try-on, displayed on your Lock Screen and in the Dynamic Island with the item names, never your photo: this display stays on your iPhone;
  • a random identifier specific to your device and, if you sign in, the identifier provided by “Sign in with Apple” (your email only if you choose to share it);
  • the status of your subscription and credits (active, dates, allowances), sent by Apple through RevenueCat: we never see your payment details;
  • your settings (Demo mode, Preferences) and technical logs limited to errors;
  • your approximate location, only if you allow it: it stays on your iPhone and is used to request the weather from Apple; our server only receives today’s weather;
  • your friend codes and the invitations linked to them;
  • an Apple DeviceCheck check, which verifies that an iPhone has not already received the welcome try-ons, without sending us a permanent identifier;
  • the app’s source (App Store, TestFlight or Xcode), kept with your account to keep test accounts separate;
  • if the app crashes, freezes or launches slowly, the technical report provided by iOS (app version, iPhone model, iOS version), without an account or device identifier: it is used only to fix bugs and is deleted after 90 days;
  • if you agree (sheet on first opening, “Usage statistics” setting in “Me”), your usage statistics: what you do in the app (screens opened, items added, try-ons, dice, looks, Rewind, shares, subscription), when you open it and how long you stay there, your iPhone model, your iOS version, your language and your country, linked to your account;
  • if you allow it in the iOS tracking request, your iPhone’s advertising identifier, its model, its iOS version and the opening of the app are sent to Meta to find out which advertisement made you discover Capucine; RevenueCat then links your free trial, subscription and credit purchases to it (never your payment methods). Your photos, your closet and your looks are never sent to Meta. Without your consent, nothing is sent to Meta: Apple only indicates, anonymously, that an installation came from an advertisement. You can change your mind at any time in Settings › Privacy & Security › Tracking;
  • the e-mails you write to us (your address, your message and its attachments), to reply to you;
  • if you accept it from one of our emails, the opening of those emails.

Why

To cut out and analyse your clothes, recognise those in an inspiration photo or an item you check before buying, compose and generate your try-ons, let your friends vote between two looks, sync your closet across your devices, manage your subscription, answer you and fix bugs. With your consent only, your usage statistics show us what helps you, what gets in the way and what to improve. We also count accounts, items, try-ons and subscriptions, without publishing anything, to monitor the health of the service. No advertising in the app, no resale of your data; with your consent only, Meta measures which advertisement made you discover Capucine.

This processing is based on providing the service you request; on your consent to send photos to the AI (requested in the app before the first upload) and to usage statistics and to Meta’s ad measurement (iOS tracking request), which you can withdraw at any time as easily as you gave it; and on our legitimate interest in aggregate service counts.

Where your data lives

Your closet, try-on photos, looks and the items you have checked are kept on our server in Poitiers (France). A virtual private server at OVH, in France, may take over as a backup. For cutout, clothing analysis and try-on, the necessary photos are also sent to OpenAI (see “Service providers”).

Service providers

A few providers help, each for a specific task:

  • OpenAI (United States) cuts out and analyses your clothes, recognises those in your inspiration photos and the items you check, and generates your try-ons from the photos sent. Data sent through the API is not used to train its models; OpenAI may keep it for up to 30 days to detect abuse, then deletes it. The transfer is covered by the safeguards provided by the GDPR.
  • Apple handles “Sign in with Apple” and App Store payments.
  • RevenueCat (United States) tells us the status of your subscription and credit purchases.
  • Meta Platforms Ireland (Ireland, with transfers to the United States) measures, only if you allowed it in the iOS tracking request, which Facebook or Instagram advertisement made you discover Capucine, based on your iPhone’s advertising identifier, the opening of the app and your trial or subscription. Meta uses this data according to its own privacy policy. The transfer is covered by the safeguards provided for by the GDPR.
  • Cloudflare (United States) routes encrypted exchanges between the app and our server.
  • OVH (France) hosts the backup server.
  • Purelymail (United States) delivers Capucine’s emails; messages sent to contact@capucine.studio are also forwarded to the publisher’s Outlook (Microsoft) mailbox.
  • OpenAI or Anthropic (United States), depending on the day: an artificial intelligence (AI) agent reads the e-mails you write to us and drafts the reply using one of these providers’ models, which receives your message to prepare it; we read it over before sending it. Each reply indicates this at the bottom of the message. The transfer is governed by the safeguards provided for by the GDPR.

How long

Your photos and looks stay as long as you keep them. Deleting a garment, a look or a try-on photo erases its images from our servers. Deleting your account from the Me tab erases all your data.

A “A or B?” poll and its votes are deleted 7 days after the link expires, or immediately if you delete it or delete your account; if you delete one of the two looks, its photo disappears from the link. The voting cookie remains in the browser of the person who voted for 30 days at most.

Your inspiration photos are not kept: once the clothes have been recognised, they remain neither on our server, nor in your account, nor in your looks; only usage is counted, as with other analyses. The items you check remain in “Already checked” until you delete them.

When you delete your account, everything is erased from our servers right away, and your photos are removed from our backups the following night. Any other data remaining in older copies of the database disappears within 30 days at the latest. You’ll receive a deletion reference confirming the erasure.

Newsletter addresses are deleted when you unsubscribe. If we don’t hear from you for 3 years, we’ll ask whether you want to remain subscribed, then delete your address if you don’t reply.

Your usage statistics are kept for no more than 25 months. They are deleted immediately if you withdraw your consent in “Me”, and along with your account.

Capucine is not a backup

We do our best to keep the service running, but Capucine does not replace a backup: keep your original photos. To the extent permitted by law, we are not responsible for lost images.

Your rights

You can access, correct, delete or get a copy of your data, object to or restrict its processing. Write to contact@capucine.studio. You can also contact the French data protection authority (CNIL, cnil.fr) or your local authority.

Age

Capucine is meant for people aged 16 and over. For try-ons, only upload photos of yourself, or of people who agreed to it; for inspiration, only use photos you have the right to show.

If we learn that an account belongs to someone under 16, we delete it along with all its data.

Security

Exchanges are encrypted (HTTPS), server access is restricted to the publisher and your images are never public.

This website

capucine.studio uses no advertising cookies and no third-party analytics. We measure our audience ourselves, without cookies and anonymously:

  • Audience measurement: page viewed, language, approximate country, device type, operating system and browser, screen width, theme, referring site and campaign parameters, invitation code from the link, visit length, share of the page viewed and a few actions (App Store badge, sharing, open-ended questions). The country is derived from your IP address at the time of the visit, then the address is discarded: it is never stored. To count visitors, a fingerprint computed with a key that changes every day is kept; it cannot recognise you from one day to the next. These statistics are kept for 13 months.
  • Newsletter: if you sign up, we keep your email address, language, approximate country, date, how you found us (referring site, campaign, friend’s link), device type, your own sharing link and the sending status of our emails. It is used only to send you a welcome email and, from time to time, news from Capucine. People who signed up for the former waiting list are now part of it, with the same unsubscribe link. Every email contains this link; unsubscribing removes your address from the newsletter, then from our dashboard’s technical log within 7 days.
  • Preferences: your theme and language choices are kept in your browser; if you choose a language, a small technical cookie, “capucine_lang”, remembers it for a year. The default language comes from your browser settings, never from your location.

Changes

If this policy changes, the date at the top is updated and the app tells you about any important change.

This site is also available in: