This update clarifies Apple subscription billing, account deletion, and optional native analytics and cancellation feedback. The camera recording and safety terms are unchanged from the September 18, 2026 version; this clarification does not reset that camera acknowledgment. Fresh consent will be requested where required by applicable law or Google policy.
This Privacy Policy explains how Beautiqxx LLC, doing business as Alessio ("Alessio," "we," "us," or "our"), collects, uses, discloses, and retains personal information when people use tryalessio.com, text Alessio, use a camera feature or the virtual try-on mirror, make a purchase, use the account dashboard, or use the Alessio iOS application (together, the "Services").
The general Terms and Privacy checkbox records agreement to the Terms of Service and this Privacy Policy. The camera, recording, moderation, retention, and deletion details are stated below. Camera access requires acknowledgment of the current camera recording and safety notice presented before use.
Your choice and access. Connecting Gmail is optional and requires your permission through Google. We receive your Google email address and an authorization credential; we do not receive your Google password. The direct Gmail connection requests read-only mailbox access. That permission covers more than clothing receipts. With the direct Gmail connection, Alessio searches purchase-category messages using clothing terms, normally covering the current and previous calendar year. If a hosted Unipile connection is used, the search instead matches “receipt” or “order” across up to five years of email. We read matching message bodies before AI clothing filtering to provide your clothing Wrapped, closet, and style profile. The hosted search can therefore retrieve a broader set of non-clothing or unrelated messages. Matching messages can contain personal details. We do not send, modify, or delete your Gmail messages. We do not download separate email attachments or continuously monitor your inbox in the background. Scans occur when you connect or request a refresh, within a limited processing window.
What goes to OpenAI. Alessio retrieves matching messages itself, selects their text or converts HTML to readable text, and limits the amount sent for processing. We send that message text, together with sender, subject, and date information, to OpenAI through its API to identify clothing, footwear, and fashion accessories and generate a style summary. This is not an anonymization step: text sent for extraction may include names, email addresses, postal addresses, order numbers, payment references, or other information present in a matching message. We do not give OpenAI your Gmail authorization credential or direct access to your mailbox.
Receipt product photos. We extract product-image references and nearby item text from receipt HTML already retrieved during a scan. OpenAI receives text and opaque image identifiers to associate references with clothing items; receipt-import photo bytes and source image URLs are not sent to OpenAI for this matching step. Alessio can request matched photos from the retailer or image host and serve them through an authenticated account endpoint. That host receives a server request for its image URL, which may contain receipt-specific identifiers, but not your Gmail credential or Alessio account cookie. We save matched source references with your extracted purchases, and the app saves downloaded photos locally for your closet. Some receipts have no usable product photos; images can be missing or incorrectly matched.
What we save and use. We save your connection email and authorization credential (or a connection identifier when a hosted connection provider is used). We also save extracted item descriptions, categories, brands, purchase dates, item prices and currencies, order references and item positions used to identify duplicates, style summaries, and scan status and coverage information. These records are associated with your account; they are not anonymous. They support the purchase history, brand and category summaries, spending comparisons, closet, and style features you request. The routine scan processes message bodies in memory rather than keeping an archive of your inbox in our application database. Operational logs can contain account identifiers, timing, counts, usage, and errors.
AI processing and limits on use. Gmail data and information derived from it are not sold, used for advertising, or used by Alessio to train or fine-tune general-purpose AI models. OpenAI's API does not use submitted data for model training by default; applicable provider data controls and retention still apply. OpenAI may retain submitted content for abuse monitoring, normally for up to 30 days, with exceptions for legal or safety needs and different approved retention arrangements. Formatting or shortening an email does not eliminate that provider processing. See OpenAI's API data controls. Human access to Google data is limited to the circumstances permitted by Google's Limited Use requirements, such as your explicit agreement to review specific data for support, necessary security investigations, or legal obligations.
Your controls. You can skip Gmail connection and use other available ways to add clothing. You can stop future Gmail access by removing Alessio in your Google account connections. Removing Google's permission does not by itself delete purchase details already saved in Alessio. To delete those account-linked records, use authenticated account deletion in the app or account dashboard, or contact hello@tryalessio.com with a privacy request. See Section 8 for retention and deletion details.
Alessio's use and transfer of information received from Google APIs, including derived information, will adhere to the Google API Services User Data Policy and the Google Workspace user data and developer policy, including the Limited Use requirements. Those limits take precedence over broader descriptions of permitted use or disclosure elsewhere in this policy and the Terms.
Purchases made by text or on the web use Apple Pay through Linq and Stripe. Purchases made in the Alessio iOS app use Apple's In-App Purchase and are billed by Apple to the purchaser's Apple Account; for those purchases Alessio receives transaction and entitlement status from Apple rather than payment details. Alessio receives transaction status, amount, plan, subscription identifiers, billing dates, limited payment metadata, and the phone number or account associated with the purchase. Alessio does not receive or store full card numbers. Messaging, email, payment, and other providers return delivery, transaction, and account status needed to operate the Services.
Alessio may collect IP address, browser and device characteristics, operating system, approximate country, referring page, pages and features used, dates and times, diagnostics, error reports, and security logs. When optional analytics is enabled, Alessio also collects a first-party visitor identifier and usage events. Alessio does not collect precise device location.
Approximate device location. With permission, the Alessio iOS app collects the device's approximate location when a user asks for weather-informed outfit recommendations. Coordinates are rounded, sent to our weather provider only to retrieve current conditions for that request, used solely to inform outfit recommendations, and are not stored, not used to train or fine-tune AI models, and not used for advertising or profiling.
Alessio uses personal information to:
When you opt into a discoverable profile, other signed-in users can find your handle, display name, profile photo, and follower/following counts. Posts you deliberately publish are available to your followers and to you. Adding clothing or importing receipts does not publish a post. Receipt evidence, email content, purchase prices, closet spend, and personal recommendations are not included in social posts.
We store selected post photos, captions, item labels, follows, likes, bookmarks, comments, reports, blocks, and moderation decisions to operate and protect these features. Submitted social text and photos are sent to OpenAI for automated safety checks; clothing photos also undergo a relevance check. This is separate from receipt-image matching described above. Only publish photos and information you intend to share. Authorized moderators may review reported content and remove content or restrict accounts. Contact hello@tryalessio.com for safety concerns.
Your in-app inbox records notifications about deliberate posts from people you follow. If you enable push notifications, Apple receives your device notification token and a generic notification payload through Apple Push Notification service. Opening a notification checks your current access again. You can change notification preferences, block users, delete your own posts, or request account deletion. Unfollowing, blocking, deletion, and moderation may make previously visible posts unavailable.
The browser or device asks for camera permission before a camera feature runs. A user may decline camera permission, but camera-dependent features will not work.
Camera surfaces use live automated moderation for sexual content, self-harm, and graphic violence. The automated system may terminate a camera experience automatically or promptly when it detects or reasonably suspects this content. Moderation frames are transient and are not archived as moderation frames. If a user is accepted into a mirror session, the ordinary mirror session recording described below may still contain the session.
Mirror sessions are recorded by default for accepted users. There is no separate recording opt-out. A user who does not want a mirror session recorded should not enter the mirror. Authenticated account deletion is the control for deleting ordinary recordings, subject to the exceptions in Section 8.
The key-gated creator studio is enabled only when it is linked to a configured, authenticated owner account that has accepted the current policies. New studio recordings are linked to that owner for deletion. Older unregistered studio objects can be removed only when the configured ownership relationship can be established; unknown or independently retained legacy copies cannot be promised deleted.
Alessio uses mirror recordings for safety moderation and human review where appropriate, enforcement of the Terms, investigation of flagged activity, fraud prevention, account and service security, disputes, and legal compliance.
Current AI and product-use restriction. Alessio does not currently use mirror recordings, photos, or location information to train or fine-tune AI models, for model evaluation, for product improvement, for marketing or content creation, or for styling personalization beyond the recommendation a user requests. This statement describes current practice rather than an irrevocable promise. If this practice changes, Alessio will update this policy and obtain fresh consent where required by law.
Alessio does not sell photos or mirror recordings and does not license them to another company for that company's own advertising or product development.
Where a law requires a legal basis, Alessio relies on one or more of the following:
Users in Canada may withdraw consent subject to legal and contractual restrictions and reasonable notice. Alessio may also process information without consent where Canadian law permits, including for fraud investigations, emergencies, legal process, and specified business transactions.
Alessio discloses information to providers only as reasonably needed for the Services and subject to appropriate contractual or legal safeguards. Current provider functions include:
These providers may process identifiers, messages, images, live video, recordings, account data, transaction data, or diagnostics according to their function. Their own legally required retention may apply.
Alessio may also disclose information to comply with law or valid legal process, protect people or rights, investigate fraud or security incidents, enforce agreements, resolve disputes, or complete a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets. Alessio does not sell personal information or share it for cross-context behavioral advertising. Mobile opt-in information is not shared with third parties or affiliates for their own marketing; sharing with messaging subcontractors needed to deliver texts is permitted.
Alessio uses an essential first-party account session cookie after one-time-code verification. It supports authentication and account state and is not advertising or analytics. Optional personally linked analytics is used only when permitted. Unlinked operational server events may be sent to PostHog without creating a person profile. Alessio does not use third-party advertising cookies or targeted-advertising trackers.
Optional personally linked browser analytics begins when the user chooses to begin onboarding. That choice permits analytics only and is not permission to record a mirror session, which the agreement box asks for separately before the mirror opens. Alessio currently provides no visible analytics preference toggle. Global Privacy Control is treated as a decline and clears optional identifiers. Unlinked operational server events may still be processed without creating a PostHog person profile. Legacy Do Not Track signals do not have a uniform standard and are not otherwise acted on. Analytics state does not disable default recording of accepted mirror sessions. See the Cookie Notice.
In the native iOS onboarding flow, optional usage analytics is off unless you enable Share optional usage analytics. It sends fixed screen and action names with a random visitor identifier to Alessio and, when configured, PostHog. It does not include form answers, receipt contents, photos, or account credentials. You can turn it off in the app's analytics setting. The server may also receive device or browser characteristics and an approximate country supplied by the hosting infrastructure.
If you choose to send cancellation feedback, Alessio stores the selected reason and any optional message to understand membership feedback and improve the service. This feedback is separate from the optional onboarding analytics setting. The Apple cancellation-feedback record does not include your account or visitor identifier, but information you type in the message may identify you. Sending feedback is optional and does not cancel an Apple subscription; cancellation remains available through Apple.
Mirror session recordings are retained while the account remains active and until account deletion, subject to law and operational necessity. Ordinary photos, profile information, reports, and conversation memory are generally retained while the account is active or until they are deleted or no longer needed. Transient moderation frames are not archived as moderation frames. One-time codes and session data are retained only as needed for authentication and security.
For Gmail receipts, we retain the connection email, authorization credential or provider connection identifier, extracted purchases, and derived summaries while needed for your connected account and requested features. Account deletion removes our receipt-connection and digest records and attempts to revoke the Google credential or remove the hosted connection. Revocation may fail if a provider is unavailable; you can also remove access directly in Google. Deletion does not delete the original emails in your Gmail account, and provider-retained processing or security records may remain subject to the provider's applicable retention obligations. Withdrawing Google's permission stops future access but does not automatically erase saved Alessio results; request deletion as described above.
Users may delete their account through the authenticated account dashboard or from within the Alessio iOS app. Account deletion disables future renewal for a web membership, revokes access, and starts deletion of ordinary mirror recordings, photos, profile information, and conversation memory associated with the account. Storage cleanup may continue briefly after confirmation while an already-issued upload window and its cleanup grace period close. It does not create an automatic refund. A membership billed by Apple through In-App Purchase is canceled in the Apple Account's subscription settings; account deletion does not cancel an Apple-billed subscription. For an annual commitment billed monthly, the remaining committed monthly payments continue through the commitment end after access is revoked; the next annual renewal is disabled.
Alessio may retain limited information when subject to a legal hold or when required or permitted for payment processing, tax, accounting, fraud prevention, security, dispute resolution, enforcing rights, backup integrity, or other legal and operational necessities. Retained information is restricted to those purposes and deleted or anonymized when the exception no longer applies. Payment providers and other service providers may retain records where independently required by law.
Account deletion does not delete Linq, iMessage, SMS carrier, or recipient-device message history. Alessio deletes the application data and Evermind memory it controls; messaging providers and devices may retain message history under their own controls and obligations.
Alessio uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. No transmission or storage system can be guaranteed completely secure.
Alessio and its providers primarily process information in the United States and may process it in other countries. Where required for transfers from the EEA, UK, or Switzerland, Alessio uses recognized transfer mechanisms and supplementary safeguards.
Depending on location and applicable law, users may have rights to know or access personal information, correct it, delete it, restrict or object to processing, withdraw consent, obtain a portable copy, opt out of sale, targeted advertising, or certain profiling, limit certain uses of sensitive information, and receive equal service without unlawful discrimination for exercising a right.
Where applicable, users may also have a right to human review of a solely automated decision that produces legal or similarly significant effects, to appeal a denied request, and to complain to a state attorney general or data protection authority. EEA and UK users may complain to their local supervisory authority; Swiss users may contact the Federal Data Protection and Information Commissioner.
To exercise a right, email hello@tryalessio.com. Alessio may verify identity by confirming control of the phone number or email associated with the account. Authorized agents may submit requests where permitted by law, subject to proof of authorization. Alessio will respond and handle appeals as applicable law requires.
Replying STOP or UNSUBSCRIBE stops applicable text messages. It does not cancel a paid membership. A membership billed through Stripe is canceled through the authenticated account dashboard or the authenticated membership controls in the Alessio iOS app; texting a cancellation request provides the secure /cancel route but does not itself change billing. A membership purchased through Apple's In-App Purchase in the Alessio iOS app is canceled in the Apple Account's subscription settings; Alessio cannot cancel an Apple-billed subscription there.
The table describes categories of personal information Alessio may collect and disclose to service providers for business purposes. Not every category is collected from every user.
| Category | Examples | Collected |
|---|---|---|
| Identifiers and customer records | Phone number, email, nickname, IP address, account identifiers | YES |
| Protected characteristics | Age range and biological sex if voluntarily disclosed | YES |
| Commercial information | Plan, purchase status, clothing items, brands, prices, currencies, purchase dates, and order references | YES |
| Internet or network activity | Service interactions, device data, and optional analytics | YES |
| Audio, electronic, visual, or sensory information | Photos, live camera video, mirror recordings, and matching email content | YES |
| Inferences | Fit scores, style preferences, and receipt-based style summaries | YES |
| Sensitive information | Account credentials, private email content, and camera content where state law classifies it as sensitive | YES |
| Biometric identifiers | Faceprints, voiceprints, or identity templates | NO |
| Precise geolocation | Precise device location | NO |
Alessio has not sold personal information or shared it for cross-context behavioral advertising in the preceding twelve months. It has disclosed the collected categories above to the service-provider categories in Section 6 as needed for business purposes. Alessio does not use sensitive personal information to infer characteristics beyond information users choose to provide for the Services.
California residents may also request information under the California "Shine the Light" law about disclosures, if any, for third-party direct marketing. Alessio does not disclose personal information to third parties for their own direct marketing.
Camera data may be regulated by laws such as the Illinois Biometric Information Privacy Act, Texas CUBI, and Washington's My Health My Data Act. Alessio processes camera images and video to analyze outfits and render garments, but it does not use face recognition to identify users, match a face against a database, or extract faceprints or voiceprints. Browser camera permission is required before camera use.
Mirror recordings are retained and deleted as stated in Section 8. This policy does not reduce any specific notice, consent, deletion, or other right required by applicable biometric or health-data law.
The Services are not directed to children under 13, and Alessio does not knowingly collect personal information from a child under 13. A user under the age of majority where they live must have permission from a parent or guardian. If Alessio learns that it collected information from a child in violation of applicable law, it will take appropriate steps to delete it.
Alessio may update this Privacy Policy. The revised version will display a new "Last updated" date. Alessio may post a notice or send a general email stating that its policies were updated and linking to the revised version. Continued use after the effective date constitutes acceptance where legally permitted. Alessio will obtain fresh consent where applicable law requires it. Camera access requires acknowledgment of the current camera recording and safety notice presented before use.
Questions, complaints, and rights requests may be sent to hello@tryalessio.com.
Beautiqxx LLC, doing business as Alessio.
‹ back to alessio