privacy policy

Last updated: 20 July 2026

This privacy policy explains how i spy (“we”, “us” or “our”) collects and uses your personal data when you use the i spy app (iOS and Android) and our marketing website at ispyplatform.com (a landing / support site only — the product itself is the app), including data you provide when you register with us.

i spy is not intended for children under 13, and we do not knowingly collect data relating to children under 13.

1. Controller

i spy is the controller and responsible for your personal data.

If you have questions about this privacy policy or your data, contact us at support@ispyplatform.com.

2. The types of personal data we collect about you

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you, grouped as follows:

Identity Data — first name, last name, username or similar identifier, and other profile details you choose to provide.
Contact Data — email address and, if you provide them, telephone numbers.
Technical Data — IP address, device information, browser type, login data, time zone, device platform, and cookie / similar technology data.
Profile Data — saved fashion finds, Closet items, Boards, uploaded photos, preferences, and interactions.
Usage Data — information about how you use the i spy app and our marketing website.
Marketing and Communications Data — marketing opt-ins and preferences.

We do not collect or store payment card details. When you click through to an external retailer, any transaction data is processed by that retailer under their own privacy policy and terms.

We also collect and use aggregated data (such as statistics or demographics) that is not personal data because it does not directly or indirectly identify you. For example, we may aggregate Usage Data to understand which features people use so we can improve i spy.

3. How is your personal data collected?

Your interactions with us

You may give us personal data by filling in forms or corresponding with us (including by email). This includes data you provide when you:

create an account;
upload photos or content to use i spy features (such as Boards, Closet, or visual search);
subscribe to our newsletter or marketing emails;
take part in product testing, a competition, or a survey;
contact us for support or feedback.

Automated technologies or interactions

As you use the i spy app or visit ispyplatform.com, we automatically collect Technical and Usage Data about your device, actions and patterns. In the app this supports product features and performance. On ispyplatform.com we may use limited cookies or similar tools and basic site analytics (see Cookies below).

Third parties or publicly available sources

We may receive analytics and technical information from third-party providers that help us operate and improve i spy. This can include:

website analytics providers (we currently use Vercel Analytics on ispyplatform.com; providers may process data outside the UK);
affiliate networks that track click-throughs to external retailers;
advertising or social media services if you engage with our content there (for example Instagram or TikTok).

4. How we use your personal data

We use your personal data to operate, improve and personalise i spy; to provide access to your account, Closet and Boards; and to communicate with you about updates, features and offers that may interest you (where permitted).

Legal bases

We rely on one or more of the following legal bases:

Performance of a contract — to give you access to your account and core features (for example Closet, Boards, saved products, visual search).
Legitimate interests — to operate, secure and improve the i spy app (for example analysing feature usage, preventing fraud, or sending relevant service updates), while balancing your rights and interests.
Legal obligation — where we must process data to comply with law.
Consent — where you have agreed (for example marketing emails, campaigns, or making a Board public). You can withdraw consent at any time.

Purposes and retention (summary)

Data: Identity, Contact. Basis: contract. We keep account data while your account is active and delete it within about 30 days of account closure (subject to backups/legal needs).

Provide visual search

Data: uploaded content, Usage, Technical. Basis: consent (for uploaded images where required) and legitimate interests (to provide and improve visual search). Photos are processed to find matching or similar fashion items. Temporary processing copies are removed when no longer needed for that purpose; limited anonymised metadata may be kept for analytics for up to about 24 months.

Closet & Boards

Data: uploaded content, Profile, Usage, Technical. Basis: consent (where you upload personal photos) and legitimate interests (to run Closet and Board features). Your Closet is private. Boards may be private or public depending on your settings. Public Boards may be discoverable by others. We keep this data while the account or content remains active, and remove it when you delete it or close your account, with backups up to about 90 days for security.

Affiliate links to retailers

Data: Technical, Usage, and limited click/redirect metadata. Basis: legitimate interests (to operate affiliate partnerships and measure performance). When you open a product link we may track redirects via affiliate partners. i spy does not collect or store payment or order data. Affiliate click data may be retained up to about 26 months under network policies.

Manage our relationship with you

Data: Identity, Contact, Profile, Marketing preferences. Basis: contract, legal obligation and/or legitimate interests (for example policy updates and support). Kept while your account is active or up to about 12 months after inactivity, as relevant.

Feedback, surveys & product testing

Data: Identity, Contact, Profile, Usage. Basis: legitimate interests. Participation is voluntary. Kept up to about 12 months after the activity ends.

Administer and protect our business and the app

Data: Identity, Contact, Technical. Basis: legitimate interests (security, troubleshooting, maintenance) and legal obligation where required. Technical logs typically up to about 12 months, then deleted or anonymised.

Improve the product and measure engagement

Data: Identity, Profile, Usage, Technical, marketing preferences (as relevant). Basis: legitimate interests. Usage and search analytics may be retained up to about 24 months; aggregated/anonymised data may be retained longer.

Optional marketing

Data: Identity, Contact, Usage, Profile, Marketing preferences. Basis: consent where required. Kept until you unsubscribe or withdraw consent.

Community campaigns & collaborations

Data: Identity, Contact, Profile, Usage, Marketing (as relevant). Basis: contract where applicable, and/or legitimate interests to run community activity. Limited data to manage participation and communication.

5. Marketing

Direct marketing

When you opt in (for example at sign-up or when joining a mailing list), you consent to email from us. We may use Identity, Contact and Usage Data to understand preferences and send updates about features, launches and style-related content.

You will receive marketing only if you have opted in where the law requires it.

Third-party marketing

We will not share your personal data with third parties for their own marketing without your explicit consent.

We may work with affiliate or advertising partners to measure referrals and campaigns. They typically receive anonymous click or conversion data rather than identifying personal data, except where needed and permitted to run the service.

Opting out

Opt out anytime via the unsubscribe link in our emails, or by emailing support@ispyplatform.com. Even if you opt out of marketing, we may still send essential service messages (for example account access or important policy changes).

6. Cookies

i spy is an app. Almost everything you do in the product (visual search, Closet, Boards, shopping links) happens in the iOS or Android app — not as a full web product. App privacy is also covered by the App Store / Google Play listings and your device settings.

This cookie section only applies when you visit our marketing and support site at ispyplatform.com (home, guides, legal pages, brand/creator forms, and similar).

On that site we may use:

Essential — only if needed for the page to work (for example session cookies if you use any web sign-in on this site).
Basic site analytics — Vercel Analytics, so we can see which marketing pages are visited. It is not used to run ads on this site.

We do not currently use Google Analytics or Meta Pixel on ispyplatform.com. If you leave our site (for example to a retailer, Instagram, or TikTok), those services may use their own cookies under their own policies.

You can block or delete cookies in your browser settings. For questions, email support@ispyplatform.com.

7. Disclosures of your personal data

We may share personal data where necessary with:

service providers who support the i spy app and website (for example cloud hosting, email delivery, analytics);
affiliate and analytics partners (for example Awin, Rakuten, and our website analytics provider) who help us measure performance and referred purchases;
professional advisers where needed for business or legal compliance;
regulators or authorities where required by law;
parties involved if we sell, transfer or merge parts of our business or assets — and the new owners would use personal data as described in this policy.

We require third parties to respect the security of your personal data and process it in accordance with the law. They may only process personal data for specified purposes and under our instructions, not for their own unrestricted purposes.

8. International transfers

We may transfer personal data to service providers outside the UK that help us run the i spy app and marketing website (for example cloud storage, analytics, communications or affiliate tracking).

Where we transfer personal data outside the UK to countries that may not offer the same level of protection, we use appropriate safeguards. These may include transfers to countries recognised as adequate by the UK, or contracts that incorporate UK-approved standard clauses (such as the International Data Transfer Agreement or Addendum).

Contact support@ispyplatform.com for more information about international transfers.

9. Data security

We take the security of personal data seriously and use appropriate technical and organisational measures against unauthorised access, loss, misuse, alteration or disclosure.

Measures can include secure cloud hosting, encryption where appropriate, access controls, and monitoring. Access is limited to authorised team members and trusted providers who need it and are under confidentiality obligations.

We maintain procedures to identify, investigate and respond to suspected personal data breaches. Where legally required, we will notify affected people and relevant authorities.

10. Data retention

We keep personal data only as long as needed for the purposes we collected it — including to maintain your account, provide features, and meet legal, security or operational needs.

Account data — while your account is active; permanently deleted within about 30 days of closure (subject to lawful backups).
Uploaded content (photos, Board content) — while active; deleted within about 30 days after you remove it or close your account.
Analytics and technical data — typically up to about 24 months.
Marketing preferences — until you unsubscribe or withdraw consent.

Limited backups may remain for security or legal compliance. We may anonymise data for research or statistics and use anonymised information indefinitely.

11. Your legal rights

Under data-protection law you may have the right to:

Access — a copy of personal data we hold about you;
Correction — fix inaccurate or incomplete data;
Deletion — ask us to delete data where there is no legal or operational reason to keep it;
Restriction — ask us to suspend processing in certain cases;
Objection — object to processing based on legitimate interests, or to marketing at any time;
Portability — receive data in a structured, commonly used format;
Withdraw consent — where we rely on consent (for example marketing).

To exercise these rights, email support@ispyplatform.com.

You will not usually be charged unless a request is clearly repetitive or excessive. We may ask for proof of identity. We aim to respond within one month of a valid request.

12. Contact details

Questions about this policy or your personal data, or to exercise your rights:

Email: support@ispyplatform.com
Website: ispyplatform.com

13. Complaints

You can complain to the Information Commissioner's Office (ICO), the UK regulator for data protection (www.ico.org.uk). Please contact us first at support@ispyplatform.com so we can try to help.

14. Changes to this privacy policy

We may update this privacy policy from time to time for operational, legal or regulatory reasons. This version was last updated on 20 July 2026. Updates will be posted on this page.

Please keep your account information accurate so we can contact you and keep your data up to date.

15. Third-party links

The i spy app and website may include links that redirect you to external retailer or affiliate sites. When you use those links, you leave i spy.

We do not control and are not responsible for the content, privacy practices or security of those third-party sites. Please read their privacy policies.