Privacy

Playground test release · Updated 14 October 2026

The Eritta App is operated by Locus Ludendi Ltd, company number 17521434, registered in England and Wales, trading as Eritta. Our registered office and current postal contact is 8 Godric Road, Newport, United Kingdom, PO30 2FR. Company record.

Our intended launch website is erittaapp.com. The planned contact@erittaapp.com mailbox is not active yet. During this test, mark postal privacy requests “Eritta privacy”. Public launch and purchases require a working electronic contact first.

Your wardrobe stays on your device

Clothing photos, descriptions, labels, saved combinations and previews, and your optional wearer photo, appearance description and measurements are stored in your app or browser. Browser and native wardrobes are separate. Eritta does not maintain a cloud wardrobe or automatically synchronise clothes. Your device or operating-system backup settings may create additional copies.

Wardrobe backups include local photos and optional profile information. They do not include your password, login session or credit entitlement. You choose where to save or share these files; protect them as you would the original photos.

What the server processes

An account stores your email, account identifier, password hash, hashed session tokens, credit balance, daily usage and recent preview-job records. Optional recovery codes are stored as hashes. Connection addresses are used temporarily to limit abuse.

Free clothing analysis sends the selected clothing photo to the local model on our hosted server. Outfit suggestions send clothing descriptions and your request. You can enter labels and select outfits manually instead.

When local previews are available, only the selected garment images, your request and optional wearer photo/profile are sent to the private preview engine on our server. Default and described models use your description and approximate measurements; your own photo is optional. The app explains the processor before sending images. Local processing does not send these photos to an external AI company.

Image inputs and processing files are held in memory or temporary memory-backed storage and removed after processing. We do not save inputs, prompts or generated images in the account database or create a server photo gallery. Completed previews are temporarily available in memory for up to one hour. Expired copies are cleared on the regular cleanup cycle, normally within one further minute. Save a completed look on your device to keep it.

A separately configured xAI preview route is disabled unless its required zero-data-retention configuration is verified. It requires a separate notice and sharing choice identifying xAI. A local request is not silently switched to an external provider after failure. External processing and transfer safeguards must be reviewed and explained before activation.

Why we process information

Account details and inputs you select provide the service you request, on the basis of performing our service agreement. Limited account and connection information supports security and abuse prevention, on the basis of legitimate interests. Financial records, if purchases are enabled, are also kept where necessary for legal accounting obligations.

Optional photo processing is your choice. We do not use your photos to train Eritta models, sell personal information or target advertising. Suggestions are advisory. We do not use facial recognition to identify you or make decisions with legal or similarly significant effects.

Hosting and payment providers

Our hosting provider is Contabo. Authorised maintainers and the hosting provider may access information where needed to operate, secure or support the service. Verification of the contracted hosting region, processor agreement and relevant access/transfer safeguards is a launch requirement; this test does not claim UK-only hosting or a completed compliance assessment.

Payments are not connected in this release. When enabled, Stripe will process checkout, payment and subscription information. Card details are entered on Stripe's payment pages and are not stored by Eritta. Eritta keeps order and payment references, amounts, entitlements and refund/dispute-review records to verify purchases and handle queries. Stripe's processing details will be linked before paid launch.

Retention and deletion

Local wardrobe data remains until you remove it, clear app/browser storage or uninstall. Export a backup first. Account data remains while your account is open. Sessions expire after 30 days; terminal preview-job and daily usage records are retained for about 30 days; temporary abuse-limiting records are cleared after about 24 hours.

Account deletion revokes sessions and removes account, recovery-code and live usage records. Financial transaction records needed for accounting, disputes or legal obligations may remain separately with the account link removed; deletion does not erase Stripe's records. Paid launch requires a documented financial-retention schedule. Complete an active preview and resolve any open checkout or subscription renewal before deletion.

Deletion cannot remotely erase device copies, exported backups or recovery-code files you control. Use local-data controls on each device too.

Your controls and rights

Me provides wardrobe backup/import, account-data export, password change, recovery codes, account deletion and local-data controls. Keep recovery codes separately and privately; they are shown once and each works once. Replacing them invalidates the previous set. Email password reset is not available in this test.

You can request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. Contact the registered office above during the test. We may need to verify identity and will consider requests under applicable law. You can complain to the Information Commissioner's Office.

Browser and phone storage

Local storage, the wardrobe database and an offline cache provide your requested wardrobe, login and offline functions. There are no advertising trackers or optional analytics cookies. Account API responses are excluded from the offline cache. Clearing site data removes the browser wardrobe.

We will update this notice when processing changes and explain new external photo processors before your images are sent.