Privacy Policy

Last updated October 28, 2026

Steal (“Steal”, “we”, “us”) is operated by Mesibash LLC. This policy explains what we collect when you use the Steal website and iOS app, why, and the choices you have. We keep it short on purpose. If anything is unclear, write to hello@stealapp.ai.

What we collect

• Account. Your email address and, if you sign in with Apple or Google, the identifier and name those services share with us.
• Taste. Which pieces you like, dislike, save or skip in the app, and how long you look at them. This is how Steal learns what to show you.
• Fit. Gender, birth year, height and the clothing sizes you tell us you wear, including which brand you referenced for each. We do not ask for or store body photos.
• Preferences. Your price range, minimum discount, favorite brands and notification settings.
• Activity. Which alerts you open and which retailer links you tap, so we can learn what works and so retailers can pay us a commission on purchases.
• Device and diagnostics. Device type, OS version, app version, push token and crash reports.
• Waitlist. The email you leave on this website and any campaign (UTM) parameters in the link you arrived from.

What we do with it

• Build and update your private taste and size profile, and rank which markdowns to show you.
• Send the notifications you ask for.
• Open retailer pages through affiliate links. The retailer may pay us a commission; the price you pay does not change.
• Fix bugs, measure what features are used, and keep the service secure.
• Email you about your account and, if you opt in, about Steal itself.

What we do not do

• We do not sell your personal data.
• We do not show your swipes, sizes or purchases to other users.
• We do not use your data to train models that are shared outside Steal.
• We do not collect biometric identifiers or body images.

Who we share with

Service providers that run Steal on our behalf: cloud hosting (Amazon Web Services), authentication (Clerk), error reporting (Sentry), product analytics and push delivery. They process data under contract and only for us. When you tap a retailer link, the retailer and the affiliate network it uses receive a click identifier so the purchase can be attributed; they do not receive your profile. We may disclose data if the law requires it, or in a merger or acquisition, in which case this policy continues to apply.

Your choices

• Edit your sizes, preferences and notifications in the app at any time.
• Turn off push notifications in iOS Settings.
• Delete your account from Profile → Settings. Your profile, swipes and sizes are deleted within 30 days; aggregated statistics that cannot identify you may be kept.
• Ask us for a copy of your data, or to correct or delete it, at hello@stealapp.ai. California, Virginia, Colorado, Connecticut, Texas and other state privacy laws may give you additional rights; we honor them for everyone, and we do not discriminate for exercising them.

Retention and security

We keep your data while your account exists and delete it when you leave, except where we must keep records for legal, tax or fraud-prevention reasons. Data is encrypted in transit and at rest, and access inside the company is limited to people who need it to run the service.

Children

Steal is for people 18 and older. We do not knowingly collect data from anyone under 18.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top always shows the current version.

Contact

Mesibash LLC · hello@stealapp.ai