Last updated 2 November 2026
Privacy policy
This policy explains what personal data NormWorks collects, why, who we share it with and the rights you have. It covers this website, the NormWorks account and Walkdrobe.
1. Who we are
NormWorks (“we”, “us”) is an independent software studio based in the United Kingdom. We are the controller of the personal data described in this policy under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For anything about your data, email privacy@normworks.uk.
The short version:
- We collect only what an app needs to work.
- We don't sell your data or use it for advertising.
- We don't use analytics or tracking.
- Your photos are never used to train AI models.
2. This website
normworks.uk sets no cookies and uses no analytics, advertising or tracking scripts. Its fonts and images are served from this domain, so a visit sends nothing to any third party.
The site is hosted on Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes technical details of each request, such as your IP address, browser type and the page requested. We use these only to run and secure the site. Our lawful basis is legitimate interests.
3. Your NormWorks account
One NormWorks account signs you in to our apps. Today that means Walkdrobe. When you create an account we store:
- Profile: your name, email address and, if you sign in with Google, a link to your Google profile picture.
- Sign-in details: the tokens Google gives us when you sign in with Google, and the public key of any passkey you add. A passkey's private key never leaves your device, and we never see your Google password.
- Sessions: a session token plus the IP address and device/browser type it was created from, used to keep you signed in and spot misuse.
The account sign-in pages use a strictly necessary cookie to keep you signed in. It is not used for tracking. Our lawful basis for account data is contract: we need it to provide the service you signed up for.
4. Walkdrobe
Walkdrobe helps you catalogue your clothes, plan outfits and try them on. It stores the following in your private account.
| What | Why |
|---|---|
| Photos of your clothes and the cut-out versions we make | To build your wardrobe |
| A full-length photo of you, if you add one | For virtual try-on |
| Your height, sizes, fit and style preferences | For try-on and outfit suggestions |
| Your items, outfits, collections, wear log, plans and feedback on suggestions | So the app works and its suggestions improve for you |
| Try-on images and walk videos made for you | So you can view and share them |
| When you agreed to our terms and confirmed you are 18 or over | A record of your consent and eligibility |
Your photos and AI-made images are stored privately. The app only opens them through links that expire, normally after six hours, or after a week for data exports. If a photo of you fails our checks, we delete it straight away and keep only the reason it failed.
On your phone
- Sign-in: your sign-in token is kept in your phone's secure storage.
- Settings and uploads: your app settings are stored on the device, and photos waiting to upload stay in the app's own storage until they're sent.
- Weather: if you allow location access, the app rounds your location on the phone to roughly 10 km. It sends the rounded location to Open-Meteo to fetch a forecast for outfit suggestions and uses it for nothing else.
Crash reports and updates
- Crash reports: if the app crashes, it sends us the error message, technical details of where it happened, the screen you were on, the app version and your phone's platform. These go to our server logs to help us fix bugs, and they are not stored anywhere else.
- Updates: the app checks Expo's servers for updates, which shares your IP address and app version with Expo.
Our lawful basis for Walkdrobe data is contract. For crash reports and security logs it is legitimate interests in keeping the app working and safe.
5. How we use AI
Walkdrobe uses AI for specific tasks, and only when you use the feature:
- Garment details: garment photos are sent to Google's Gemini API to suggest details like category, colour and fabric. Cloudflare cuts each garment out of its background.
- Photo checks: the photo of you is checked by Gemini (one person, head to feet, everyday clothes) and cut out by Cloudflare.
- Try-on: when you ask for a try-on, the photo of you, the chosen garment photos and your height are sent to Gemini to make a try-on image. That image may be sent back to Gemini to make a short walk video and to run a safety check.
- Outfit names: garment descriptions are sent to Gemini to suggest outfit names.
You check AI suggestions before they're saved. Anything AI makes is labelled, and shared images carry an “AI-generated” label. We use Google's paid Gemini API service, under which Google does not use what we send to train or improve its models. We make no automated decisions about you that have legal or similarly significant effects.
6. Who we share data with
We never sell personal data. We share it only with the service providers below, which process it on our behalf under contract, and with authorities where the law requires it.
| Provider | What they do | Data involved |
|---|---|---|
| Cloudflare | Hosting, databases, file storage, logs and image cut-outs | All the data described above |
| Google (Gemini API) | The AI features described in section 5 | Garment photos, your photo, height, garment descriptions |
| Google (Sign in with Google) | Signing you in, if you choose it | Name, email, profile picture link |
| Open-Meteo | Weather forecasts | Rounded location (about 10 km) |
| Expo | Delivering app updates | IP address, app and platform version |
If NormWorks or an app were ever sold or reorganised, personal data could transfer to the new owner under this policy. We would tell you first.
7. International transfers
Some of our providers process data outside the UK, including in the United States and the European Economic Area. Where that happens, we rely on UK adequacy regulations or on safeguards approved under UK law, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
8. How long we keep data
- Account and app data: kept for as long as you have an account. Delete an item, outfit or photo in the app and it is deleted from our storage, including the stored files.
- Sessions: a session expires after 60 days.
- Server logs and crash reports: kept by Cloudflare for a short rolling period, no more than 30 days.
- Deleting your account: if you ask us to close your account, we delete your account and all your Walkdrobe data, including photos and AI-made images, within one month.
9. Your rights
Under UK data protection law you have the right to:
- Access: get a copy of your personal data.
- Portability: receive your data in a portable format. Walkdrobe can export your wardrobe for you.
- Rectification: have inaccurate data corrected. Most of it you can edit yourself in the app.
- Erasure: have your data deleted. You can delete content in the app; to close your whole account, email us.
- Restriction and objection: ask us to limit or stop processing, including processing based on legitimate interests.
- Withdrawing consent: where we rely on your consent, you can withdraw it at any time.
To use any of these rights, email privacy@normworks.uk from the address on your account. We'll reply within one month.
If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
10. Our other apps
Lady, Proof and Pageturner are still being designed, and Groundr is in private testing. None of them is available to the public or collects personal data from the public. We'll update this policy before any of them launches.
11. Children
Our apps are for adults. You must be 18 or over to use Walkdrobe, and we don't knowingly collect data from anyone under 18. If you think a child has given us their data, contact us and we'll delete it.
12. Changes and contact
We'll update this policy when our apps or practices change, and change the date at the top. If a change materially affects how we use your data, we'll tell you in the app before it takes effect.
Questions, requests or concerns: privacy@normworks.uk.