Privacy Policy
Wholefit (“we”) is operated by Ivan Kachur. Wholefit shows complete outfits built from products on brands' own online stores and links you to those brands to buy. This policy explains what we collect, why, how long we keep it and the choices you have. It applies to the Wholefit website. Wholefit is intended for people in the United States, the United Kingdom and the European Union.
Who's responsible for your data
The controller of your personal data under the EU General Data Protection Regulation (GDPR) is Ivan Kachur, sole trader trading as Ixen - Ivan Kachur (NIP 6793345724), ul. Krakowska 40F, 32-020 Wieliczka, Poland. Because Wholefit is run from the European Union, the GDPR applies to how we handle personal data wherever you live, alongside the US state laws described below. Contact us at privacy@getwholefit.com, or by post at ul. Władysława Pytlasińskiego 16/13, 00-777 Warszawa, Poland.
The short version
- You can browse, like looks and personalize your feed without an account. Your device keeps that data and sends it with each feed request so our server can rank looks for you; we don't keep what it sends. Unless you turn it off, the interaction log (below) does record what you do here, including likes, hides and your answers, and, for each look in your feed, where it was placed and the scores our ranking gave it. If you sign up for alerts or the weekly email, we keep the looks saved on that device. You can turn personalization off on Your Privacy Choices.
- If you create an account (with Google, or with an email and password), we store your name and email address (and your Google profile picture), plus your likes and taste profile so they follow you across devices.
- We log interactions (looks viewed, opened, liked, swapped, sent to checkout; what you search for on the site; which pages you visit, how long you're active on each and how far you scroll; how long each look and each part of a page is on screen, and which parts you tap; whether you'd wear a look, when you answer; how fast the page you opened loaded and any error the site hit in your browser; and, in Europe, whether you said yes to being remembered) against a random device id, never your name or account, to rank popular looks and to see what on the site is useful. They are deleted after 90 days, and the copy PostHog analyses for us after at most a year. You can turn this off. In Europe we ask first whether to remember your device; until you say yes nothing is logged but your answer, under an id that's never stored in your browser.
- Outside Europe, with interaction logging on, Microsoft Clarity records how you move through the site (taps, scrolling, the pages you open) so we can see where it's hard to use. Typed text is hidden from it.
- With interaction logging on (in Europe, once you say yes to being remembered), PostHog records how you move through the site (taps, scrolling, the pages you open) so we can see where it's hard to use. Typed text is hidden from it, and recordings are deleted after 30 days.
- We don't sell your personal information for money or show ads. Pinterest and Google measure and improve their ads with your visit and purchases here. Outside Europe that's on unless you turn it off (it may count as a “sale” or “sharing” under US state laws); in Europe it's off until you say yes.
- Purchases happen on the brand's own website, under that brand's privacy policy.
Information we collect
| What | Why | How long |
|---|---|---|
| On your device: likes, saved looks, your optional taste answers (who you shop for, styles, colors, fit, how much color you wear, occasions, budget, sizes, and the looks you picked or passed over), looks you've seen and the look a visit began on, the brand, collection and piece pages you've visited, your recent searches, whether you shop women's or men's looks, whether you see one or two looks a row on a phone, your answers to "Would you wear this?" on looks and pieces, which prompts you've already seen, the stores' carts you opened from Wholefit (store, pieces, sizes, prices and when) and whether you told us you ordered, and a random device id with a random id for the current visit (in Europe, only if you choose to be remembered). During a visit, which looks you stayed on and which you scrolled past is kept in the open page only, and forgotten when you leave it (with interaction logging on, how long each was on screen is also logged, as above) | Personalizing your feed. It's sent with each feed and taste-step request and used there to rank looks for you, then not kept by us (your likes, taste profile and pieces you've viewed are, if you're signed in). The scores it gives the looks you're shown are logged with those views (see Interaction events). | Until you clear your browser storage |
| Interaction events: what you did (viewed, opened, liked, swapped, hid or took a look or one of its pieces to checkout, or tried to before choosing sizes; a filter or tab you chose; a search and what it found; a page you visited, how long you were active on it and how far you scrolled; how long a look or part of a page was on screen and how often you tapped it; your answer to "Would you wear this?", and in the taste step each screen you reached and how long it was on screen, who you shop for, your budget band, the fits and colors you picked, whether you gave a size (not the size), each look it showed you with how likely its model thought a yes was, your yes or no to it and how long you took, the reason you gave for a run of no's, Back, Undo, and leaving the step or putting it away, all under a random id for that run of the step; how fast the page loaded, and the text of any error the site hit in your browser; in Europe, your answer to the "remember this device" question), which look or piece, when, the random device id, the country your IP address is in (the address itself isn't kept), and the site or campaign that first brought the device here (for example "pinterest.com"). For each look in your feed: where it was placed, which version of the ranking placed it, and the scores it got from your taste and activity (numbers, not your answers themselves). In Europe, unless you choose to be remembered: nothing but your answer to that question, under a random id for that visit only, and no site or campaign | Ranking popular looks, measuring whether ranking changes help, and seeing what on the site is useful. The yes and no answers of many devices also fit a shared model of which looks people like, which becomes the starting point for everyone's feed; it holds averages, not any one device's answers | 90 days; the copy PostHog analyses for us, per PostHog's retention on our plan: at most a year. To have that copy deleted sooner, email privacy@getwholefit.com with this device's id (in your browser's local storage for getwholefit.com, under wholefit:session:v1) and we'll have PostHog delete it |
| Outbound clicks: the store, pieces and look you clicked through to, a random click id, the time, the country your IP address is in and, unless you've turned logging off, the random device id and first site or campaign | Sending you to the brand and matching affiliate commissions to looks. When a store's affiliate network reports a sale from your click, your device can ask for it by its device id, to show the order as confirmed under Saved › Bought (the store and pieces only, never the amount) | 13 months |
| Account (only if you create one): name, email address, and either your Google profile picture and account id or a one-way hash of your password (never the password itself), your likes and taste profile, the feed signals your device keeps (sizes you wear per brand, pieces you own, pieces you said you would or wouldn't wear, looks you hid, what you opened and swapped, carts you opened and what you said you ordered), sign-in sessions (including IP address and browser) and, if you turn on alerts, the last price and size availability we emailed you about for each saved piece, and which return reminders we've sent | Signing you in, keeping your saved looks and preferences in sync, and sending the alerts you turned on | Until you delete your account; sessions expire after 30 days, and sign-in, verification and password-reset links within hours |
| Weekly email and alerts without an account (only if you sign up): your email address, whether you shop women's or men's looks, and when you signed up, confirmed and were last emailed; the looks and pieces saved on the device you signed up on (to pick looks in your budget, and for alerts) and what it says you ordered through Wholefit (store, pieces, prices and when, for return reminders and ways to wear what you bought); for price and restock alerts, the last price and availability we emailed you about | Sending the weekly looks email or the alerts you asked for. We confirm your address before sending anything else. | Until you unsubscribe, which deletes your address (or, if you still get the other email, only what that one needed). A sign-up that's never confirmed is deleted after 30 days |
| Saved custom looks: the pieces in a look you generated or edited | So the look can be shown again. The look itself isn't linked to you. | Indefinitely |
| Visit recordings (outside the EEA, UK and Switzerland, with interaction logging on): taps, mouse movement, scrolling and the pages you open, with the page as you saw it, your browser, device, country and the site that sent you, collected by Microsoft Clarity, labelled with who you shop for and your budget band if you answered them in the taste step. Text you type, numbers and email addresses are hidden before anything is sent. Recording doesn't start on account, Saved or email-link pages, and if you open them during a recorded visit their content is masked (your taps and scrolling there are still recorded) | Seeing where the site is confusing or broken, by watching how visits go | Recordings 30 days at Microsoft (any we mark to keep, up to 13 months) |
| PostHog visit recordings (with interaction logging on; in the EEA, UK and Switzerland only after you say yes to this device being remembered): taps, mouse movement, scrolling and the pages you open, with the page as you saw it and how long what it loaded took, your browser and device, under the random device id and the visit's id, so a recording can be matched to that visit's interaction events. Text you type is hidden before anything is sent, and recording stops on account, Saved and email-link pages. PostHog discards your IP address | Seeing where the site is confusing, broken or slow, by watching how visits go | 30 days at PostHog, stored in the EU |
| Server logs from our hosting provider: IP address, browser and pages requested | Security and keeping the site running | Per our hosting provider's retention: at most 30 days |
| Abuse limits: the IP address a request came from and how many requests it made recently, for sign-in, sign-up and what can be sent without an account | Stopping automated abuse, such as password guessing and floods of fake events | 2 days |
We don't collect payment details: you pay the brand directly. We don't knowingly collect information from children under 13, or under 16 in the European Union, and we don't knowingly sell or share personal information of anyone under 16. We don't use or sell personal data to train large language models.
Legal bases (GDPR)
| Use | Legal basis |
|---|---|
| Your account, syncing likes and taste, and sign-in and password-reset emails | Performing our agreement with you, the Terms (Art. 6(1)(b)) |
| The weekly email and price or restock alerts | Your consent (Art. 6(1)(a)), which you can withdraw at any time by unsubscribing or turning alerts off. When you create an account, the box for price and restock alerts is ticked. In Europe (the EEA, UK and Switzerland), leaving it ticked only sends you an email with a link, and the alerts start when you tap it; until then we don't email you about your saves. Outside Europe they start when you sign up, unless you untick the box |
| Ranking your feed with the taste profile, likes and activity your device sends (profiling) | Our legitimate interest in showing you looks you'll like, which you asked for by using the feed (Art. 6(1)(f)). You can object at any time by turning off "Personalize my feed from my activity" on Your Privacy Choices: your feed is then ranked as it would be for a new visitor, using only who you shop for and the budget and sizes you chose. It still leaves out looks you hid, or answered “Not for me” to under “Would you wear this?” on a look; puts looks led by a style or colour you removed in Your style, from a store or for an occasion you removed, or with a piece you said you wouldn't wear, last; and puts near-copies of pieces you own further down. |
| Interaction events | Our legitimate interest in ranking popular looks, learning which looks people like overall, and improving Wholefit (Art. 6(1)(f)). You can object at any time on Your Privacy Choices. In Europe (the EEA, UK and Switzerland), where having your browser send this or keeping a device id in it needs your agreement, we log no interactions, only your answer to that question (with a random id held in the open page, never stored and without where you came from), unless you consent (Art. 6(1)(a)) to this device being remembered, which we ask on your first visit. We note when you said yes. |
| Outbound clicks | Our legitimate interest in sending you to the brand and being paid commissions (Art. 6(1)(f)). The device id and first site are added only when interaction logging is on. |
| Pinterest and Google ad measurement | In the EEA, UK and Switzerland: your consent (Art. 6(1)(a)), asked before anything is stored on your device or sent to Pinterest and Google; we keep a record of when you agreed and to which wording. Elsewhere: our legitimate interest in knowing which ads bring visitors and sales (Art. 6(1)(f)). Either way, turn it off at any time on Your Privacy Choices; Global Privacy Control turns it off too. |
| Visit recordings | Our legitimate interest in finding what makes Wholefit hard to use (Art. 6(1)(f)). Not used in Europe. Turning off interaction logging on Your Privacy Choices stops it and deletes Clarity's cookies; Global Privacy Control turns it off too. |
| PostHog visit recordings | In the EEA, UK and Switzerland: your consent (Art. 6(1)(a)), given with your yes to this device being remembered. Elsewhere: our legitimate interest in finding what makes Wholefit hard to use (Art. 6(1)(f)). Either way, turning off interaction logging on Your Privacy Choices stops it; Global Privacy Control turns it off too. |
| Server logs and security | Our legitimate interest in keeping Wholefit secure and running (Art. 6(1)(f)) |
| Keeping records the law requires, and handling legal claims | Legal obligation (Art. 6(1)(c)) and our legitimate interest in defending claims (Art. 6(1)(f)) |
You don't have to give us any personal data to browse Wholefit. An email address is needed only to create an account or get emails. Your feed is personalized automatically (profiling), but this never has legal or similarly significant effects on you: it only changes which looks and swaps you're shown, and in what order. You can see and change what it's based on in Your style, start over there, or object and turn it off on Your Privacy Choices.
Sign in with Google
When you sign in with Google we receive only your basic profile (name, email address, profile picture and Google account id). We use it solely to create and secure your Wholefit account. We don't access your Gmail, contacts, Drive or any other Google data. Wholefit's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Browser storage and cookies
We store information on your device, or read it, only where the feature you use needs it (§ 25(2) no. 2 TDDDG; art. 399 of Poland's Electronic Communications Law); in Europe, the device id and the ad tags only with your consent. In Europe, usage measurement (our own visit statistics, and Vercel's page-view and speed counts) and the history of looks and searches you've viewed also wait for your consent. Wholefit uses your browser's local storage for likes, taste answers, the country you ship to and the random device id, and a first-party cookie to keep you signed in. To offer the Wholefit site for where you ship to, the page asks our server which country your IP address is in; the answer isn't kept. Ad measurement uses Pinterest's tag and its cookies (_epik and similar, kept up to a year) and Google's tag and cookies (_gcl_aw and _gcl_au, kept 90 days): outside Europe unless you turn it off; in Europe only after you say yes, before which neither tag loads (we tell you're in Europe from your browser's time zone, or from your being on our British or European site). Vercel, our host, counts page views, clicks through to stores and page speed for us without cookies or anything stored in your browser. Visit recordings (outside Europe, with interaction logging on) use Microsoft Clarity's cookies: _clck keeps a Clarity id for this browser so its visits can be told apart, _clsk ties a visit's pages together, and Clarity's own domain may set others (CLID, MUID). We tell Clarity not to use them for ads. PostHog analyses the interaction log described above for us, sent from our servers together with the kind of device, browser and operating system (worked out from your browser's user agent, which isn't sent), the visit's id, and the campaign tags and referring site of the link a visit arrived by. With interaction logging on, PostHog also records visits, as described above, with its script in your browser. It sets no cookies and stores nothing in your browser. We use no other analytics service. When you click through to a brand, the brand or an affiliate network may set its own cookies to track the referral, under its own policy.
Affiliate links
Links to brands may be affiliate links (see the Affiliate Disclosure). We pass the network a random click id so a commission can be matched to a look. We never pass your name, email or account id.
Pinterest ad measurement
Unless you turn it off on Your Privacy Choices (in the EEA, UK and Switzerland: only if you allow it, in the prompt on your first visit), Pinterest's tag and its cookie record the pages you visit here and the looks you take to checkout. When you click through to buy, we also send Pinterest that click, and later the purchase if the brand's affiliate network reports one: the amount, the pieces' ids, your IP address, browser, Pinterest's click id and, if interaction logging is on, a hashed form of your random device id. Pinterest uses it to measure and improve its ads, under its own privacy policy, and if you have a Pinterest account it may link this to it. We don't use it to build audiences or to show you ads again (retargeting). The tag never loads on pages whose address holds a password-reset or email link.
For collecting this data on Wholefit and passing it to Pinterest, we and Pinterest are joint controllers (GDPR Art. 26). We're responsible for telling you about it, asking your consent where it's needed, and for what we send; Pinterest is responsible for what it does with the data once it has it. Pinterest is Pinterest Europe Ltd (Ireland) for people in the EEA, UK and Switzerland, and Pinterest, Inc. (USA) elsewhere. You can exercise your rights with either of us.
We keep the IP address, browser and click id with the click for 30 days, then delete them. If you turn it off (or withdraw consent), we delete Pinterest's cookies on Wholefit and what we've kept of your earlier clicks, so no later purchase from them is reported; what was already sent stays with Pinterest under its policy. In Europe we ask again after a year, or sooner if what we send changes. With Global Privacy Control on, none of this happens.
Google ad measurement
Outside Europe, Google's tag is on every page you open, under Google's consent mode, unless you've turned it off; in the EEA, UK and Switzerland it loads only once you say yes. It never loads on pages whose address holds a password-reset or email link. Unless you turn it off (in Europe: once you say yes), it and its cookies note the Google ad you came from (Google's click id) and, when you click through to buy, that click: the amount and the page you were on, with your IP address and browser. On each page it loads on, the tag also tells Google the page's address and title. Google uses this to measure and improve its ads. We turn off ad personalization and Google signals, and we don't use it to build audiences or to show you ads again (retargeting).
In the EEA, UK and Switzerland, until you say yes, your browser doesn't load Google's tag and nothing about your visit is sent to Google. We tell you're in Europe from your browser's time zone, or from your being on our British or European site; if it doesn't look European but Google places you in Europe by your IP address, the tag loads but Google keeps it in its no-cookies mode, where a buy click sends only a signal without cookies or a click id. Outside Europe, once you turn it off, the tag in the open page is switched to denied consent at once and we send it nothing more, and from your next page load your browser doesn't load it at all. With Global Privacy Control it never loads.
Google (Google Ireland Ltd for people in the EEA, UK and Switzerland, Google LLC elsewhere) uses this data as an independent controller under its own privacy policy; see also how Google uses information from sites that use its services. If you turn it off, we delete Google's cookies on Wholefit; what was already sent stays with Google.
Who we share information with
- Service providers that run Wholefit for us: Vercel (hosting, and cookieless page, click and speed counts), Neon (database), Google (sign-in, and the inbox for email and contact-form messages you send us), PostHog (analysing the interaction log and recording visits, stored in the EU), and Resend (account, alert and weekly emails, and carrying contact-form messages to that inbox). They process data only on our instructions.
- Microsoft (Clarity) for visit recordings outside Europe, as described above. Microsoft also uses Clarity data under its own terms and privacy statement.
- Brands and affiliate networks receive the click when you choose to visit or buy, as described above.
- Pinterest and Google for ad measurement, unless you turn it off (in Europe, only if you allow it), as described above.
- Legal reasons: if required by law, or to protect Wholefit, our users or others.
- Business transfers: if Wholefit is merged or sold, subject to this policy.
We don't sell personal information for money. Letting Pinterest and Google and Microsoft (Clarity) collect data on Wholefit for their own purposes may count as a sale, sharing for cross-context behavioral advertising or targeted advertising under California and other state laws. You can opt out of it at any time on Your Privacy Choices (linked at the bottom of the site's pages), and we treat Global Privacy Control as an opt-out.
International transfers
Our service providers store and process data in the United States. Where data is transferred from the European Economic Area, we rely on the EU–US Data Privacy Framework for providers certified under it, and otherwise on the European Commission's Standard Contractual Clauses. Where data is transferred from the United Kingdom, we rely on the UK Extension to the Data Privacy Framework for providers certified to it, and otherwise on the UK International Data Transfer Addendum to those clauses. Pinterest, Inc., Google LLC and Microsoft Corporation, which get data on Wholefit as described above, are certified to the EU–US Data Privacy Framework, its UK Extension and the Swiss–US Data Privacy Framework (dataprivacyframework.gov). For people in the EEA, UK and Switzerland, ad measurement data goes first to Pinterest Europe Ltd and Google Ireland Ltd, and visit recordings don't run. Email us for a copy of the safeguards that apply.
Your right to object (Art. 21 GDPR)
You can object at any time to processing based on our legitimate interests, including profiling for your feed, on grounds relating to your situation. Turn it off on Your Privacy Choices or email privacy@getwholefit.com.
Your choices and rights
- Turn off feed personalization (object to profiling) on Your Privacy Choices: your feed is then ranked as for a new visitor, from who you shop for and your budget and sizes, and what you've ruled out (looks, values and pieces).
- Stop interaction logging (or, in Europe, choose whether this device is remembered) on Your Privacy Choices. We also honor the Global Privacy Control (GPC) browser signal automatically.
- Delete local data by clearing your browser's site data for Wholefit.
- Do Not Track: browsers' older Do Not Track signal has no agreed meaning, so we don't respond to it; Global Privacy Control, which we do honor, turns off interaction logging and ad measurement. Microsoft Clarity records visits here as described above. Other than Pinterest and Google through ad measurement, and a brand or affiliate network once you click through to it, we don't let third parties collect information about your activity on Wholefit over time and across other sites.
- Download or delete your account from your account page. Deleting removes your profile, likes, taste and sessions. Interaction events are never linked to your account.
Depending on your state (including California, Colorado, Connecticut, Virginia, Texas, Oregon and others), you may have the right to know, access, correct, delete or get a copy of your personal information, and to opt out of its sale, sharing, targeted advertising or profiling. To make a request, email privacy@getwholefit.com. We'll verify the request using the account email, respond within 45 days, and won't discriminate against you for exercising your rights. You may use an authorized agent. If we deny your request, you can appeal by replying to our decision.
Under the GDPR, wherever you live, you have the right to access your personal data, correct it, delete it, restrict how we use it, receive it in a portable format, object to uses based on our legitimate interests, and withdraw consent at any time (without affecting what we did before). Email privacy@getwholefit.com and we'll respond within one month. You can also complain to a data protection authority, in particular in the EU country where you live or work. Ours is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl. If you live in the United Kingdom, the same rights come from the UK GDPR. You can complain to us at privacy@getwholefit.com: we'll acknowledge your complaint within 30 days and tell you the outcome. You can also complain to the UK's Information Commission (the ICO), ico.org.uk.
Security
Data is encrypted in transit, and access is limited to what's needed to run Wholefit. No system is perfectly secure, but we'll notify you as required by law if a breach affects your information.
Changes
We'll update the date below when this policy changes, and tell signed-in users about material changes before they take effect.
Contact
Ixen - Ivan Kachur, ul. Krakowska 40F, 32-020 Wieliczka, Poland. By post: ul. Władysława Pytlasińskiego 16/13, 00-777 Warszawa, Poland. Email privacy@getwholefit.com.
Last updated 2 November 2026.