Privacy policy

The Minidrobe platform ("the platform"), operated by Lucas Quant Trading LLC ("the company"), takes the protection of your privacy seriously. This privacy policy explains how the platform collects, processes, uses and protects your personal data. Please read it carefully.

By using this platform you confirm that you have read, understood and agree to all terms of this privacy policy.

Personal data collected by this platform is used only for the following purposes:

• Providing, maintaining and improving the platform's services
• Handling your registration, sign-in and account management
• Handling transaction matters (listings, order processing, transaction records)
• Handling subscriptions and payments
• Sending service notifications (transaction updates, system announcements and so on)
• Analysing user behaviour to improve the service experience
• Calculate your private community achievement progress from server-trusted organising activity, approved interactions with your work and completed transaction records; leaderboard data is public only when you opt in
• Preventing unlawful activity and keeping the platform secure
• To comply with the law or a requirement of a competent authority

This platform does not sell your personal data. We may share it with a third party only in the following situations:

• With your explicit consent
• Display content according to the visibility you chose in the showcase: private content is visible only to you, members-only content only to reviewed members; content you separately confirm as public may be browsed and share-linked by signed-out visitors after platform review
• Blurring faces in public photos: on the website, when you create or list a sales batch, upload a batch cover, apply to consign items to the warehouse shop, edit the photos of an item that is already public, merge duplicate garments into an item that is already public, make a group post image, download a batch grid, make an item card or an outfit share card, or download the 7-11 listing sheet, and when you publish a 曬娃 (showcase) post, ambassador photos or a video cover, or a wishlist photo or wishlist comment photo, the site finds faces in the photos on your device and blurs them automatically; you can undo this photo by photo. Photos that warehouse staff upload for consigned items are blurred on the staff member's device first in the same way. Cut-out images on an outfit share card have their faces blurred on your device and are not stored separately. Detection sends no photo anywhere. Public pages, post images, cards and listing sheets use only the blurred photos, never a photo you have made private, and the originals in your wardrobe stay as they are. The blurred photos and your choices (whether to blur, and how many faces were found) are kept until you delete the photo or your account. Before a Minidrobe administrator features an item on the home page, the photos are checked for faces on the administrator's device. Videos themselves are not blurred automatically; you are asked to confirm before publishing one. The iPhone app also checks when you publish, from version 1.7.9.
• According to your explicit choice in community achievements, we publish the alias you choose, an eligible avatar you chose to make public, your monthly achievement score and an anonymous entry identifier that rotates each month and leaderboard; we do not publish real names, email addresses, member IDs, private wardrobe content or transaction amounts, and public display stops immediately when you opt out
• Where necessary to complete a transaction (such as sharing necessary contact details with the other party)
• Shared with third-party service providers we work with (such as Stripe for website payments and Apple for in-app purchases), who are bound by confidentiality obligations
• When you use the "Speak" feature, speech recognition is provided by your browser or operating system and the audio is processed by its vendor (such as Google or Apple) under their privacy policy; this platform only receives the recognised text.
• Brand price reference: when you mark an item as sold, the ratio of its price to what you paid counts toward that brand's price reference in aggregate. A brand shows one only with at least 5 sales from 3 members in the past year, none of them more than half. Other members see only the ratios and counts, never an item, a price or who sold it; your purchase and sale prices stay visible only to you.
• To comply with laws, regulations, legal process or a government request
• To protect the rights, property or safety of the company, its users or the public

This platform uses cookies and similar technologies to provide a better experience:

• Essential cookies: keep you signed in and the system working
• Functional cookies: remember your preferences (such as theme settings)
• Additional first-party product analytics: with your consent, we record page views, feature usage, platform, version, session, and the first and last non-direct marketing source
• Core operation records: to provide account security, cross-device sync, media lifecycle and data consistency, we record necessary outcomes such as account registration, subscription status and content creation, update and deletion; these are not affected by your additional analytics preference
• iOS app crash reports: while you allow additional product analytics, a crash sends a crash report (where the code failed, app and system versions, device model) to Google Firebase Crashlytics. It is not linked to your account and never includes photos, messages or names. Turning additional product analytics off stops the reports and deletes any not yet sent.

With your consent, product analytics while signed out uses a random identifier. At your first sign-in that session's marketing source may be linked to your account once, after which the identifier is rotated and the local source cleared. Marketing source keeps only length-limited UTM codes, a categorised referrer and an on-site path without query parameters, to understand how content leads to sign-up and subscription. Analytics does not record item names, photo content, on-site search text, full URLs, full referrer URLs, email addresses or phone numbers, and is not used for cross-site or cross-app advertising. Declining analytics clears unsent analytics events, the random identifier, the session and marketing source data, and does not affect core features.

Sign-up source: when you create an account, we record whether you signed up on the website or in the iOS app. If you allow additional first-party product analytics, we also record the category of your first visit (for example direct, search or a campaign link) and the link's campaign code (utm_campaign). After you save your first item, we ask once how you heard about Minidrobe; you can skip the question, and only the option you pick is kept. We use this only to learn which channels bring members to us. It is stored as category codes, without web addresses, referring addresses, IP addresses or free text, is included in your data export, and is deleted with your account.

Under the Personal Data Protection Act, you have the following rights:

• Enquire about or request access to your personal data
• Request a copy of your personal data
• Request that your personal data be supplemented or corrected
• Request that we stop collecting, processing or using your personal data
• Request deletion of your personal data
• Opt out of public participation in community achievements at any time; opting out does not affect viewing your own progress privately

To exercise any of these rights, contact us:[email protected]

We will handle your request within a reasonable period as the law requires. Please note that deleting your account or stopping data use may mean some or all of the service can no longer be used.

Accounts and sharing on this platform are for adult parents or guardians only. We do not ask children to create accounts and do not knowingly collect personal data from children. The showcase may contain family photos uploaded by a parent or guardian; the uploader must have the right to share them and any necessary guardian consent, and should avoid revealing a child's name, school, address, real-time location or other sensitive information. Before publishing you can choose private, members-only or public visibility, and public content additionally requires explicit confirmation and platform review. If you find that a minor's data has been provided without proper consent, contact us and we will restrict access promptly and handle or delete it as the law requires.

Raw product events are kept for up to 13 months; hourly ingestion quality data for 90 days; de-identified daily aggregates, retention and funnel data for up to 760 days. Lifecycle audit records for deleted assets are kept for 180 days; unreferenced assets are quarantined for 30 days before cleanup. When you delete your account, directly identifying data and assets not retained by law are deleted, while records such as transactions are retained as the law requires and restricted in use.

We make a daily off-site backup to Google Cloud (Taiwan). Deleted data stays in these backups for at most 90 days and is then removed from them as well.

When the website or the app runs into an error, we send technical details about it (error type, page path, version, browser or system version) to Google Cloud so we can find and fix the problem. These details do not include your name, email, wardrobe content or account identifiers, and are kept for 30 days.

Similar items in your wardrobe (paid plans): on a paid plan (Starter or Advanced) you can search your own wardrobe with a photo for similar items. The search uses the feature vectors described in the next paragraph, “Brand recognition from photos”: numbers describing how an item's main photo looks, computed on our own systems without any AI model provider and stored in Google Cloud (BigQuery). It compares only your own items, and the results are never shown to other members. If you move back to the free plan, you can no longer use this search; the feature vectors are kept as that paragraph describes and deleted when you change or delete an item's photo, delete the item, or delete your account (recovery copies inside Google Cloud are kept for at most 14 more days).

Brand recognition from photos: so that we can tell you which brand a garment looks like while you record it, we turn the main photo of every member's branded items into a set of numbers describing its appearance (a feature vector). That happens on our own systems, without any AI model provider, and the numbers are stored in Google Cloud (BigQuery). When you add a photo, we find the closest-looking photos and the database counts the brands on them; we only suggest a brand when photos from at least two other members agree on it, and the answer carries the brand name and how many members agreed — never another member's photo, name, price or identity, and never what you own. The suggestion is available to free and paid members alike. We also compare the photo with the photos brands publish in their own online shops (no member data). Replacing or deleting a photo, deleting the item or deleting your account deletes the matching vectors (recovery copies inside Google Cloud are kept for up to 14 more days).

Find by description (paid plans): what you type is used only to compare with the feature vectors of your own items' photos and is not stored. Words in it that our built-in glossary does not know are first sent to Google Cloud Translation to be translated into English.

Search by photo (marketplace): the photo you choose is turned into a feature vector on our own systems, without any AI model provider, compared with the main photos of items on sale in the marketplace, and discarded straight after; it is not stored. Results show only what sale bundles already make public, and your photo and identity are never shown to sellers.

To help you check the results of a safe batch edit, we keep an operation record readable only by you. An eligible batch can be reverted within 7 days; if an item has since been changed, or its folder or tags have changed, newer data will not be overwritten. Detailed before-and-after values such as names and notes are kept for up to 30 days, after which they are no longer readable and are removed by the retention cleanup, leaving only a minimal summary of time, item count and result. Your personal data export covers your own records still within the retention window, and they are deleted with your account. Permanent deletion of items, images and transactions is not covered by this revert mechanism.

Cloud services used by this platform may store data on servers outside Taiwan. We make sure the receiving region offers an adequate level of data protection and sign data protection agreements with the relevant service providers.

Where each kind of data is mainly processed today:

• Account, wardrobe, transaction and message data: the Supabase database (Singapore).
• Photos: Cloudflare R2 and Supabase Storage, delivered over Cloudflare's global network.
• AI features: Google Cloud in Taiwan (Cloud Run, BigQuery, Cloud Storage); Gemini models run through Google Vertex AI's global endpoint and may use Google data centres outside Taiwan.
• Automatic translation: a sale bundle's title and description and its item names (only text that is already public, never notes) are sent to Google Cloud Translation to be translated into other languages. Translations are stored in Supabase and deleted when the text changes or the bundle is taken down.
• Message translation: when you and the other member use different languages, or when you tap Translate, the text of that message is sent to Google Cloud Translation. The translation is stored in Supabase, only the two of you can see it, and it is deleted when the message is unsent or edited, or the account is deleted.
• iOS app crash reports: Google Firebase Crashlytics (United States).
• Daily off-site backups: Google Cloud in Taiwan.
• Daily operating statistics, counts only with no personal data: Google Cloud BigQuery (United States).
• On-device AI in the iOS app runs on your device; when needed it uses Apple's Private Cloud Compute instead, without passing through our servers.

The company reserves the right to revise this privacy policy at any time. For significant changes we will notify you by platform announcement or email. We recommend reviewing this policy periodically.

If you have any question or suggestion about this privacy policy, contact us in any of these ways: