Effective April 17, 2026 · Last updated: October 14, 2026
This policy describes how the Fitwear app (the "Service", "we", hosted at fitwear.app) collects, uses and protects your data. By using the app, you agree to this policy.
Account data:
Content and preferences:
Technical data:
Usage events. The app sends our own server a record of the screens you open and the steps you complete (for example “opened the wardrobe”, “photo upload failed: network”), together with the app version and platform. Events are linked to your account, never contain your photos, texts or email, are used only to find where the app breaks or confuses people, are not shared with anyone, and are deleted automatically after 90 days. We use no third-party analytics or advertising SDKs.
Notifications on Android. Push notifications are delivered through Google Firebase Cloud Messaging (Google LLC, USA). Firebase receives your device's push token, a Firebase installation ID, the app version and basic device information — only to deliver notifications. Notification text may include the name of a look or item; your photos are never sent. Together with the push token, the app sends our server the Android ID of your device, so that a refreshed token replaces the old one and the same device does not receive duplicate notifications.
Staying signed in on Android. So that you don't have to sign in again after reinstalling, the app keeps a copy of your sign-in key in Google Block Store on your device. It never leaves the device (cloud backup is turned off) and is removed when you sign out or delete your account.
On-device checks on Android. Before upload, the app uses Google ML Kit on your device to check that a person is fully in the frame and to cut the garment out of the background. Images are processed on the device and are not sent to Google; ML Kit sends Google only technical diagnostics (device model, OS and app version, processing time). No faceprints or biometric templates are created.
Purchases on Android. Payments are processed by Google Play. We receive the purchase token and product ID, along with the billing period and status, to verify your subscription and activate your plan — never your card details. Google's privacy policy applies to the payment itself.
To run AI features we send your photos (body scan and garment photos) to external AI providers and, for outfit suggestions, garment descriptions and your style preferences. Your face may be visible in these photos. Your name, email, phone number and payment details are never sent to providers.
Providers process data on our instructions and only for the tasks listed above; provider retention periods are in § 10. When you delete your account, we delete your photos on our side (§ 5, § 7); copies held by providers expire under their own retention periods, or earlier at your request to privacy@fitwear.app, which we will pass on to the providers.
We do not sell your data to third parties and do not use it for advertising.
Data is stored on servers located in the European Union. Database backups are created daily and kept for 7 days. Uploaded images live on the server filesystem and are accessed via HTTPS (most operations require authorization).
Under applicable law (including GDPR), you can:
We respond within 30 days.
The Service is not intended for users under 16. We do not knowingly collect data from children under 16. If you discover a child under 16 is using the Service, please write to privacy@fitwear.app and we will remove the account.
For material changes, we will update the "Effective" date and notify active users via the app or email. Continued use after changes means you accept the new version.
For the purposes of GDPR (EU 2016/679), UK-GDPR, and equivalent data-protection laws worldwide, the Data Controller is:
EU representative (GDPR Art. 27): [to be appointed via Prighter / DataRep / equivalent after registration].
Legal basis for processing (GDPR Art. 6): consent (Art. 6(1)(a)) for biometric data and AI processing, and for emails about new What's trending editions; contract performance (Art. 6(1)(b)) for service delivery; legitimate interest (Art. 6(1)(f)) for fraud prevention, service security, and service emails about your account and changes to the service. Consent to trend emails is separate from accepting our terms and is not required to sign up; you can withdraw it at any time via the link in any email or in Profile → Trends & looks by email. Withdrawal does not affect emails sent before it. You can always object to these emails (GDPR Art. 21(2)–(3)).
Biometric and face data (GDPR Art. 9): photos of your face and body used for virtual try-on are uploaded to our servers, stored, and shared with our AI providers only with your explicit consent obtained in-app. You can withdraw consent at any time from the app (Profile → AI generation consent): AI features stop until you consent again. To erase your photos and derived images, delete the scan or the account (see the account deletion page).
On-device frame check: before any upload, the app checks on your device — using Apple's on-device Vision framework — whether a person is fully in the frame, so that an unusable photo never leaves your phone. This check runs entirely on your device, returns only a technical result (person in frame, legs cropped, head cropped, no person), creates no faceprint or biometric template, and performs no recognition or matching against anyone. Neither the photo nor any derived image data leaves your device as part of this check.
Face data — collection, use, sharing, and retention: the only face data we collect is the photos you voluntarily upload as body scans and photos of items you wear, which may include your face. We do not create faceprints, facial-geometry templates, or any facial-recognition identifiers, and we do not use face data to identify, track, or match users. Face data is used solely for virtual try-on, photo checks (that the scan shows an adult in full length with no disallowed content, and which gender to match garments to), quality review of try-ons, garment studio shots, and to cover the face on garment photos before try-on. For these tasks photos are sent to the providers in § 3 — Google, BytePlus, fal.ai (including Google Gemini models via fal), Runware and WaveSpeed. Checks return only technical labels (e.g. “adult”, “full length”); no faceprints or biometric identifiers are created. Retention at providers: Google logs requests and responses for 55 days only to detect policy violations, keep the service secure and make legally required disclosures, and does not use them to improve its products; fal.ai keeps request data for up to 30 days; for files we upload and the results of its models, we set a retention period of 24 hours; BytePlus and WaveSpeed do not publish a retention period; Runware does not publish one for input photos, and we collect the finished shot from it within 10 minutes. Under fal's Data Processing Addendum, the photos we send are used only to provide the service; Runware states that images are not used for model training. Face data is stored on our servers in the European Union (see § 4) for as long as you keep the scan in your account: deleting a scan or deleting the account permanently removes the photos and all derived images within 30 days (see § 5 and § 7).
Automated decision-making (GDPR Art. 22): AI-generated try-on images and style recommendations are produced by machine-learning models. These are creative/decorative outputs and do not produce legal or similarly significant effects. You can disable AI features at any time without losing access to your data.
International transfers (GDPR Art. 44–49): photos and requests are transferred to AI providers in the US (Google; fal.ai; Google Gemini models via fal and its supplier OpenRouter), the UK (Runware; computing in the US and EU), Singapore (BytePlus) and Singapore/Hong Kong (WaveSpeed). Transfers to the UK rely on the EU adequacy decision; for Google LLC, on its certification under the EU–US Data Privacy Framework and, where required, Standard Contractual Clauses; for fal.ai we rely on the EU Standard Contractual Clauses (Module 2) in its data processing terms; for BytePlus, on the safeguards in its data processing addendum. Singapore and Hong Kong have no EU adequacy decision and WaveSpeed offers no contractual safeguards, so transfers to WaveSpeed rely on your explicit consent (GDPR Art. 49(1)(a)), requested on the in-app AI Consent screen before the first processing. The risks of such a transfer: your data may be less protected than in the EU, including from access by local authorities, and your rights may be harder to enforce. WaveSpeed receives photos only when our primary provider declines a try-on. Providers process data only for the tasks listed in § 3. Push notifications on Android are delivered via Google (USA), which relies on the EU–US Data Privacy Framework and Standard Contractual Clauses.
California residents have the right to:
To exercise these rights, email privacy@fitwear.app with subject "California Privacy Request". We will respond within 45 days. Authorized agents may submit requests with verifiable authorization. Categories of personal information collected match Section 1 above (Cal. Civ. Code §1798.140(o)).
Privacy: privacy@fitwear.app
Support: support@fitwear.app
Legal: legal@fitwear.app