Privacy
Zipset builds complete outfits from real stores in your size and budget. To do that well we learn your taste from how you use the app. This page explains exactly what we collect, why, who sees it, and how you take it back. Zipset is based in Vancouver, British Columbia, and handles personal information under Canada's PIPEDA and British Columbia's PIPA. Where other laws give you more rights, such as the GDPR or California's CCPA, you get those rights too.
The short version
- We never sell your personal information and we never share it for advertising.
- We never see or store your card number. Stripe handles payment.
- Download everything we hold about you, or delete your account, from Profile then Account, any time.
What we collect
| Information | Why we need it |
|---|---|
| Your email, and your name if you add it | To sign you in, send order emails and show your name to friends you add |
| Google or Apple account identifier, if you sign in with them | To sign you in. If you use Hide My Email with Apple, we only get the relay address |
| Sizes, budget, the pieces you want in a look, occasions and style settings | To show only pieces that fit you and your budget |
| Shipping and billing addresses and phone number | To deliver orders you place through Zipset checkout |
| Orders and order status | To place, ship, refund and support your orders, and for tax and accounting records |
| How you use the app, such as looks viewed and for how long, pieces swiped, locked, liked or opened, carts, settings changes and app opens | To learn your taste so the looks get better, and to learn across everyone which pieces and styles people come back for |
| Device details, such as platform, app version and an app generated random identifier | To keep you signed in, fix crashes and understand which versions work |
| Friends and invites | To let you add friends and share what you choose with them |
We do not collect your precise location, your contacts, or anything from your camera or photos unless you choose to share a photo during setup.
How the learning works
Each look you see is scored by a recommendation system that uses your activity in Zipset. Your own taste profile stays tied to your account. Across all members we use activity to work out which pieces and styles people enjoy and return for. We use these signals only inside Zipset, to rank what we show. Raw activity records are deleted after 13 months. Your taste profile is deleted when you delete your account, and you can reset it any time in Profile.
Who we share it with
Only with the service providers that run Zipset for us, under contracts that limit them to doing that work.
- Supabase, which hosts our database, sign in and server functions
- Stripe, which processes payments and saved cards
- Resend, which sends order emails
- PostHog, for product analytics
- Cloudflare, which serves our website and app
- Google and Apple, only if you choose to sign in with them
- Stores you buy from. When you check out with Zipset, we pass the store your name, shipping address and the items so they can ship your order. When you use a store link instead, you deal with the store directly under its own privacy policy
Some of these providers store data outside Canada, including in the United States, where it may be accessed by authorities under local law. We may also disclose information when the law requires it, or to protect people from fraud or harm.
Some store links pay Zipset a referral commission. The store learns that you came from Zipset. It never changes your price.
Friends
Friends only see what you allow. You choose on the Friends screen whether friends see the pieces you like and the pieces you buy. Anyone can find you by your handle so they can send a request, and they see your handle, display name and picture. Nothing is shared until you both accept.
Your choices and rights
- Access and portability. Profile, Account, Download my data gives you a copy of everything tied to your account.
- Correction. Edit your name, addresses and sizes in the app.
- Deletion. Profile, Account, Delete account removes your account, profile, addresses, likes, friends and saved cards. We keep order records as long as tax law requires, and we keep anonymous activity records with no link to you.
- Withdrawing consent. You can stop using Zipset and delete your account at any time.
Questions or requests go to privacy@zipset.app. We answer within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.
Security
Data is encrypted in transit and at rest. Database rules stop any member from reading another member's private information, and only a small team can see orders, for fulfilment. No system is perfectly secure. If a breach could harm you, we will tell you and the regulators as the law requires.
Children
Zipset is for people 16 and older. We do not knowingly collect information from anyone younger. If you think a child has signed up, email us and we will delete the account.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.