Privacy policy

We process as little data as possible and only to provide Umkleide. This page explains which data that is, what we use it for, on what legal basis and with which partners. The Swiss Federal Act on Data Protection (FADP) applies and – for users in the EU – the General Data Protection Regulation (GDPR).

1. Controller

Feldon GmbH
Roosstrasse 53
8832 Wollerau
Switzerland

Email: info@umkleide.ai
Phone: +41 76 839 11 02

2. Website and server

Umkleide’s website and server run on Fly.io, Inc. (USA) in a data centre in Frankfurt am Main, Germany. When you visit, technically necessary connection data is processed (e.g. IP address, time, requested address, browser details) to deliver the pages and to prevent abuse. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

The website uses no analytics or advertising trackers. Fonts and images are loaded from our own server.

A cookie is only set when you open a partner or campaign link (umkleide.ai/r/…). It stores the campaign for 30 days so that its discount is applied at checkout and we can count which campaign led to a sign-up or purchase. The cookie only contains an identifier of the campaign. If you then sign in or buy, we note in your account which campaign you came from. Partners only see totals, never data about you. The legal basis is our legitimate interest in running partner campaigns and in giving you the promised discount (Art. 6(1)(f) GDPR); storing the cookie is strictly necessary for the discount you request by opening the link (§ 25(2) no. 2 TDDDG).

3. Account and sign-in

You sign in with your email address or with your Google account. With email, we send you a six-digit code that is valid for 10 minutes and that we store only as a hash (never in plain text). After you sign in, we store a session (up to 90 days), your credits, your plan and when you used try-ons. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).

If you sign in with Google, we redirect you to Google, where Google’s own privacy policy applies. We then receive only a unique ID for your Google account and your email address – we don’t request your name or profile picture. We store only this ID and the email address. We never see your Google password.

We send emails via Resend, Inc. (USA) with sending servers in the EU (Ireland). Open and click tracking is turned off.

4. AI try-on

Photo try-on

The Chrome extension stores your photo only locally in your browser. For a try-on, your photo and the image of the garment are transferred in encrypted form via our server to fal.ai (Features & Labels, Inc., USA), where the AI model FASHN creates the result. There, the uploaded photo is deleted automatically after one hour and the result image after 7 days at the latest. Our server doesn’t store any photos.

Live try-on

In live mode, your camera image is transferred in encrypted form directly from your browser to Decart (decart.ai) and processed there in real time. Our server only issues a short-lived access key for this and receives no images. The camera is only active when you turn it on. During the free camera check, the image stays on your device; it is only transferred once you start the live try-on.

You can optionally record a live try-on as a video. The recording is created exclusively locally in your browser on your device. It is not transferred to us and not stored by us – we have no access to it. The video carries an Umkleide watermark and the note “AI-generated”. Whether you save or share it is entirely up to you.

Legal basis

The processing is necessary for the try-on (Art. 6(1)(b) GDPR). Before you upload your photo, the extension also asks for your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by deleting your photo. Please only upload photos of yourself – or of people who have agreed – and no photos of children.

5. Payment

Payments are processed by Stripe Payments Europe, Limited (Ireland). You enter your payment details directly with Stripe; we don’t receive them. From Stripe we only receive what we need for your subscription (e.g. customer and subscription number, plan, term, payment status). The legal bases are the performance of the contract and statutory retention obligations (Art. 6(1)(b) and (c) GDPR).

6. Cancellation

If you cancel via “Cancel contracts here”, we process the details from the form to carry out the cancellation and to confirm its receipt (Art. 6(1)(b) and (c) GDPR, Section 312k of the German Civil Code). We keep them for up to three years as proof.

7. Chrome extension and web app

The extension stores your photo, your saved garments and your recent results locally in your browser. On shop pages it reads product data (e.g. name, image, price) so that you can try a piece on. Under “Settings” → “Delete all my data” you remove everything with one click; you can delete your account under “Account”.

In the web app (umkleide.ai/app), your photo, your pieces (product links and garment images you upload) and small previews of your recent results are stored only in your browser (local storage), not on our servers. If you paste a product link, our server loads that public product page once to read the product image, name and price; we don’t store the page. For a try-on they are transferred encrypted as described in section 4; we use an uploaded garment image only for that try-on. The web app loads result images through our server so that your browser only connects to umkleide.ai; we don’t store them. You remove everything by removing your photo in the web app, deleting your account under “Your account” or clearing your browser’s site data for umkleide.ai.

8. Transfers abroad

Data is transferred to the following countries: Germany (server in Frankfurt am Main), Ireland (Stripe, Resend sending servers) and the USA (Fly.io, Resend, fal.ai, Decart and – if you sign in with it – Google). Transfers to the USA are based on appropriate safeguards – in particular the Swiss-U.S. and EU-U.S. Data Privacy Framework or standard contractual clauses. We have data processing agreements with our service providers.

9. Retention

We keep data only as long as the respective purpose requires: account data until you delete your account, invoices and payment records as long as tax and commercial law require (up to 10 years).

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 25 et seq. FADP, Art. 15–21 GDPR), and to withdraw any consent you have given. Just send us an email.

You can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or – if you live in the EU – with the data protection authority of your country.

Last updated: November 2026