Privacy Policy

1. Data we collect

We collect only what the service needs:

• Account details from Google when you sign in: your name, email address and profile picture.
• Photos you upload (a person photo and/or a clothing photo) and the results created from them.
• Try-on and purchase records: what you tried on, when, your try-on balance, and the packs you bought. Card details are handled by our payment provider and never reach us.
• Technical data: IP address, browser and device information, pages visited and a random visitor id stored in cookies, used for security, abuse prevention and measuring how the site is used (including through Google Analytics).

2. How we use it

We use your data to:

• create your try-on results and show them to you in My Looks;
• run your account, balance and purchases, and return try-ons that fail;
• prevent abuse, such as bots or one person creating many accounts for free try-ons;
• understand, in aggregate, how the service is used so we can improve it;
• answer your messages and meet legal obligations.

3. Who processes it

We share data only with the providers that run the service, each for its own task:

• Genlook (genlook.app, AI try-on provider) receives the two photos of each try-on to create the result and keeps the result for up to 1 day. See section 3a for the AI models it uses.
• Vercel hosts the website and stores your results and uploaded photos in private storage.
• Neon hosts our database of accounts, balances and try-on records.
• Google provides sign-in.
• Cloudflare Turnstile checks that requests come from a person rather than a bot.
• Google Analytics 4 measures visits and how pages are used, with Google signals and ad personalization turned off. It does not receive your photos, results or account details.
• Waffo Pancake processes payments as merchant of record and handles your payment details under its own privacy policy.

3a. AI models used

Try-on results are created through the Genlook virtual try-on API. According to Genlook’s published list of subprocessors, its image generation runs on Google’s Gemini image generation models, served through Google Cloud Vertex AI, together with Genlook’s own generation pipeline hosted on Comfy Cloud and RunPod. Images generated through Gemini on Vertex AI are subject to Google’s built-in safety filters.

We do not train or fine-tune any AI model, and we do not use your photos or results for training.

4. What we never do

We do not sell your data, do not use it for advertising, and do not use your photos or results to train AI models.

5. How long we keep it

Your results and uploaded photos are kept in My Looks until you delete them there or delete your account. Account, balance and try-on records are kept while your account exists. Purchase records may be kept longer where tax or accounting law requires it.

6. Cookies

We use a sign-in session cookie, a first-party visitor cookie (tof_vid) to count visits to the fitting room, Google Analytics cookies (such as _ga) to measure site usage, and the cookies Cloudflare Turnstile needs for bot protection. We do not use advertising cookies. You can block or delete cookies in your browser settings; the site keeps working, though signing in needs the session cookie.

7. Your rights

You can delete any look in My Looks at any time. You can also ask us to access, correct, export or delete your personal data, or to delete your account, by emailing sg4h40n4n@gmail.com. We will reply within 30 days.

8. Security and international transfers

Results and uploaded photos are stored privately and are shown only to the signed-in owner. Our providers may process data in countries other than yours, including the United States; we use providers that protect data with industry-standard security.

9. Children

The service is for adults aged 18 and over. Do not upload photos of children. If you believe a child’s data has been uploaded, contact us and we will delete it.

10. Changes and contact

We may update this policy; the date at the top shows the latest version. Questions or requests: sg4h40n4n@gmail.com.