Honey Does This

Privacy Policy

Last updated November 8, 2026

Honey Does This (“Honey,” “we,” “us”) makes a mobile app that gives supportive AI feedback on outfit photos you upload, and lets you share results with a small circle of friends or via a private link. This policy explains what data we collect, why we collect it, who else sees it, and how to remove it. We try to collect as little as we can to make the product work.

Information we collect

Account info: your email address and a hashed password, stored to let you sign in and recover your account. Plus a profile you pick during onboarding — a globally-unique @handle and a free-text display name — that other Honey users see when you interact with them.

Outfit and clothing photos: the photos you upload so the AI can give you feedback (Fit Check) or style a piece you own (Style This). Photos are stored privately and are not used to train any model.

Generated images: the styled-look renders Style This creates (on a stand-in model) and, only when you tap "See Honey's tweak," a re-rendered version of your own photo with suggested swaps applied. These are stored privately with the same retention as the photo they came from.

Optional "Looks like me" reference photo: if you choose this option, one photo of yourself that guides Style This renders toward a model resembling you. We record when you consented. It is kept as part of your profile until you replace or remove it (any time, from You → Style This → Model) or delete your account, and it is never shared with friends or link recipients.

Style preferences: the occasion, fashion styles, and stand-in model attributes (gender presentation, build, skin-tone step) you optionally pick. These are profile settings, never required.

Lookbook: the looks you choose to save and the collections you organize them into.

Approximate location for weather: if you grant location permission, the app uses your device's location at the moment you ask for a read to fetch the local weather, so feedback can account for it. If you plan a trip, the destination name you type is looked up to get its forecast. We do not store your coordinates or the place name — only a coarse weather bucket (for example "cold" or "rainy") alongside the analysis.

AI feedback: the supportive text the model returns about your photo, stored alongside the analysis so you can revisit it within the retention window.

Friend graph: who you've sent friend requests to and accepted from, plus the contact-match hashes you submit when you choose to find friends from your address book. Raw contacts never leave your device — see the Friend graph section below.

In-app activity: which results you've shared with which friends, the friend reactions and replies you've received, the anonymous web reactions on links you've minted.

Push tokens: an Expo / APNS / FCM device token registered with us when you grant notification permission, so we can deliver pushes to your device.

Usage data: limited request-level metadata (e.g. when you uploaded, anonymized request identifiers) so we can debug problems and enforce per-user rate limits.

Device info: app version, OS name, and crash diagnostics when an error occurs, sent to our error-reporting tool to fix bugs.

We also record anonymous, city-level signup and activity counts from our network provider's edge geolocation (never your IP address and never linked to your account), pruned after 30 days.

We do not collect contact lists (only hashes — see below), precise location history, browsing history, or advertising identifiers, and we do not use your photos for facial recognition or identification.

How we use your information

We use your information only to run the product: signing you in, processing the photo you submit, returning AI feedback, surfacing it to the friends you choose, delivering pushes you opted into, showing your history within the retention window, and keeping the service reliable. We do not sell your information, share it with advertisers, or use it for any form of behavioral advertising.

Sub-processors

We rely on a small set of trusted services to operate the app:

Photo retention (7 days)

Every photo you upload auto-deletes 7 days after upload, unless you save the look to your Lookbook. Saving is the one exception: a saved look (its photo, its result, and any pieces you kept with it) stays until you remove it; unsaving starts a fresh 7-day clock. Your optional "Looks like me" reference photo is profile data and stays until you replace or remove it or delete your account. The analysis row tied to that photo carries the same expiry — when the photo is gone, the result screen shows a placeholder.

You can also delete an individual result at any time from the result screen or from your history. Deletion is immediate from your view; the underlying storage object and database row are removed by our cleanup worker on the next run (within the hour) and are unrecoverable after that.

When the photo is deleted (by you or by the 7-day clock):

To make your recommendations better over time, we keep a private record of what you've analyzed and what you did with it — the occasion and styles you picked, a structured summary of the feedback (never the photo, never the written verdict), and whether you saved, shared, deleted, or let the look expire. It never includes your photo, your location, or who your friends are. It's tied to your account and deleted the moment you delete your account.

Sharing your results

You can share a result in two ways. Both are opt-in and revocable.

In both cases, you can revoke at any time from the share sheet on the result screen. Revocation is propagated to every surface (web link → 410 Gone, in-app feed item → 'no longer shared') within seconds.

Nobody but you can mint a share for your own results. Only reciprocal Honey friends can land an in-app share on each other.

Friend graph & contacts (on-device only)

Honey has a friend graph: you can find friends by @handle, by contact match, or via friend requests. Your friends list and pending requests are stored with us.

Contacts never leave your device. When you tap 'Find friends from contacts,' the app reads your contacts' email addresses locally on your device, normalizes each one, and hashes it with a server-provided salt using SHA-256. Only the hashes are sent to our /contacts/match endpoint. (Matching is by email only — we don't hash or send phone numbers.) Our server computes the same hashes for every active Honey profile in-request, finds matches, and returns just the matched user IDs. We never see your raw contacts, never store the hashes server-side, and keep the salt only in our worker secret store.

Friend requests are explicit and reciprocal. There are no follows, no public profiles, and no friend suggestions outside of contact match. Declining a request silently removes it; we don't notify the sender they were declined. Per-user request rate limits cap how many requests one account can send per 24 hours.

Reporting and removal: if a friend or anonymous commenter behaves badly, use the in-app Report path. We review every report. Severe violations (harassment, doxxing, illegal content) result in account termination and full data deletion per the retention rules below.

Push notifications

If you grant notification permission, we register your device's Expo push token with our server so we can deliver pushes for five specific categories: friend request received, friend accepted your request, friend weighed in on a look you shared, friend sent you a look, friend replied in your thread. Each category has its own toggle in You → Notifications, plus a master switch.

Lock-screen notifications never include the photo. Payloads we send to Apple / Google through Expo carry only a category, a sender first name, and a short title / body line — never the photo, never your friend's @handle, never any free-text comment. Tap-to-open requires you to be authenticated; the photo only appears once you're inside the app.

If you turn the master toggle off, we remove your device token from our records so we stop sending. Turning it back on re-registers the token. Deleting your account also removes the token.

Account deletion

Deleting your account from You → Delete account cascades through every table that holds data about you: profile, photos, analyses, share links, anonymous feedback rows on your share links, friendships (both mirrored rows), friend requests (both incoming and outgoing), in-app feed items you sent or received, thread messages and reactions on those feed items, push devices, push settings, your Lookbook and collections, your style and model preferences, your "Looks like me" reference photo, generated images, and your style-signal history. Your storage folder under our object store is wiped by a follow-up cleanup job.

Some operational logs may persist for a short period for security and abuse-prevention reasons; those logs do not contain your photo, your AI feedback, or any free-text content you produced.

We do not keep backups of deleted accounts that you can restore. Your @handle is freed for someone else to claim once your profile is deleted.

Your choices

Children

Honey Does This is not directed at children. You must be at least 13 years old (or the higher age of digital consent in your jurisdiction) to use the app. If you believe a child has provided personal information to us, contact us and we will delete it.

International users

We are based in the United States and our service is built around U.S.-based infrastructure. If you use the app from outside the United States, you understand that your information will be transferred to and processed in the United States.

Changes to this policy

We may update this policy as the product changes. If we make a material change we will surface a notice in the app and update the date at the top. Continued use of the app after a change means you accept the updated policy.

Contact

Questions or requests? Reach the developer at support@honeydoesthis.com. We will respond within a reasonable time.