Privacy Policy

You give us:

• Account details — your email address and a password (stored only as a secure hash; we never store your plaintext password).
• Body measurements — height, chest, waist, hips, weight, and optionally bra size and shoe size, plus your gender and fit preference. These are used to fit garments and calculate fit scores.
• Photos — the front, side, and/or face photos you upload during onboarding, used solely to generate your base model (see Section 5).
• Garment photos — any clothing image you upload to try on.

We generate or collect automatically:

• Your base model and try-on results — the images our AI produces from your photos and the garments you try on.
• Usage data — try-on history, credit balance and usage, saved outfits, cart contents, and basic technical logs (IP address, request time, device/browser) used for security and to operate the service.

• To create and operate your account and generate your base model and try-on images.
• To calculate fit scores and size recommendations from your measurements.
• To track credit usage and prevent abuse or fraud.
• To send you essential account emails (verification, password reset). We do not send marketing email without your consent.
• To maintain security, debug problems, and improve the service.

Where data-protection law (such as the EU/UK GDPR or Jordan's Personal Data Protection Law) requires a legal basis, we rely on:

• Performance of a contract — to provide the service you sign up for: your account, base model, try-ons, fit scores, and credits.
• Your consent — for processing your photos and the biometric/likeness data derived from them (Section 5). You can withdraw this consent at any time by regenerating or deleting your base model, or by deleting your account.
• Legitimate interests — to secure the service, prevent fraud and abuse, and improve how Fitox works, balanced against your rights.
• Legal obligation — to keep limited records where the law requires it.

Your photos — and the personalized model we generate from them — are the most sensitive information you share with us. Your face photo and your base model can qualify as biometric or special-category data under some laws, so we process them only with your explicit consent, given when you upload your photos, and we treat them accordingly:

• Uploaded onboarding photos are stored privately (not publicly accessible) and are used only to generate your base model.
• After your base model is created, the original front/side/face photos are deleted from our storage. We keep your generated base model so you can try on clothes without re-uploading.
• To generate images, your base model and the garment image are sent to third-party AI providers (Google's Gemini image models and, as a fallback, Fashn.ai). These providers process the images to produce a result and, per their configuration, do not retain the try-on output on their servers.
• Your base model and try-on results are visible only to you, are never sold, never shared for advertising, and never used to train our or anyone else's AI models.
• You can withdraw your consent at any time by regenerating or removing your base model, or by deleting your account — which erases your base model and try-on images (see Sections 8 and 10).

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising (as those terms are used under California law). We disclose it only to:

• Service providers (sub-processors) that run Fitox on our behalf: Supabase (database), Cloudinary (image storage), Google (Gemini AI), Fashn.ai (AI try-on), Resend (email), Railway (API hosting), and Cloudflare (app hosting). Each processes data only to provide their service to us, under contract.
• Stores — when you place an order, the order details you choose to send (items, sizes, colors, quantities) are shared with that store via WhatsApp so they can fulfill it. We do not share your photos or measurements with stores.
• Legal reasons — if required by law or to protect the rights and safety of our users and Fitox.

• Original onboarding photos: deleted after your base model is generated.
• Base model, try-on results, measurements, and account data: kept while your account is active.
• When you delete your account, we delete your personal data and images, except where we must retain limited records to comply with legal obligations.

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — get a copy of the personal data we hold about you.
• Correction — fix inaccurate data (you can edit your measurements and profile in the app anytime).
• Deletion — delete your base model, or delete your account, which removes your personal data and images.
• Restriction and objection — ask us to limit or stop certain processing.
• Portability — receive your data in a portable format.
• Withdraw consent — withdraw your consent to biometric/photo processing at any time (Section 5).
• No sale or sharing — because we do not sell or share your data for advertising, there is nothing to opt out of, but you can confirm this with us.
• Non-discrimination — we will not treat you differently for exercising any of these rights.

To exercise any of these rights, contact us at privacy@fitox.co. If you are in the EU, UK, or another region with a data-protection authority, you also have the right to lodge a complaint with your local regulator.