Privacy Policy
Effective Date: June 2025 | Last Updated: June 2025
1. Introduction
Welcome to FitCheck AI ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application FitCheck AI (the "App"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the App.
Apple App Store Compliance: This Privacy Policy complies with Apple App Store Review Guidelines and iOS privacy requirements, including data collection transparency and user consent mechanisms.
2. Information We Collect
2.1 Information You Provide to Us
Account Information:
- Email address (for account creation and authentication)
- Password (encrypted and securely stored)
- Profile information you choose to provide
- Apple ID (when using Sign in with Apple)
- Full name and profile data from Apple authentication (optional)
Content You Upload:
- Outfit photographs you take or select from your device
- Style preferences and occasion selections
- Feedback and ratings you provide
- Quiz responses and Style DNA preferences
Subscription Information:
- Subscription status and billing information (processed by Apple App Store)
- Analysis usage count and subscription tier
- Payment history and subscription changes (via App Store)
2.2 Information We Collect Automatically
Usage Data:
- How you interact with the App
- Features you use and frequency of use
- Time and date of your visits
- Device information (model, operating system, app version)
- App performance metrics and crash reports
Analysis Data:
- AI-generated style analysis results
- Personal Style DNA profiles based on your outfit history
- Achievement progress and statistics
- Style insights and recommendations
- Analysis usage tracking for subscription management
Device Information (iOS Specific):
- Device identifiers (IDFV) for analytics (anonymized)
- iOS version and device model for compatibility
- App version and build number for support
- Network connectivity information for service optimization
2.3 Information from Third Parties
AI Services:
- We use OpenAI's GPT-4 Vision API to analyze your outfit photos
- Image analysis results are processed and stored securely
- Original photos are stored in encrypted cloud storage (Cloudflare R2)
- No personal identifiers are shared with OpenAI
Apple Services:
- Sign in with Apple authentication data
- App Store subscription and billing information
- App Store review and rating data (aggregated)
- Apple Push Notification service for app notifications
3. How We Use Your Information
We use the information we collect to:
3.1 Provide Core Services
- Analyze your outfit photos using AI technology
- Generate personalized style feedback and recommendations
- Build and update your Personal Style DNA profile
- Track your style evolution and progress over time
- Award achievements and calculate progress statistics
- Manage subscription limits and billing (6 free analyses, then subscription required)
3.2 Subscription Management
- Track analysis usage against your subscription tier
- Process subscription renewals through Apple App Store
- Enforce analysis limits for free vs. premium users
- Provide subscription status and billing information
- Manage trial periods and promotional offers (if applicable)
3.3 Improve Our Services
- Enhance AI analysis accuracy and relevance
- Develop new features and functionality
- Analyze usage patterns to improve user experience
- Debug technical issues and maintain service reliability
- Optimize subscription conversion and user retention
3.4 Communication
- Send you important service updates and notifications
- Respond to your inquiries and support requests
- Notify you of new achievements and milestones (if enabled)
- Send subscription-related notifications (renewal reminders, limit notifications)
- Provide customer support for billing and technical issues
4. How We Share Your Information
4.1 We Do Not Sell Your Personal Information
We do not sell, trade, or otherwise transfer your personal information to third parties for monetary compensation.
4.2 Service Providers
We may share your information with trusted third-party service providers who assist us in:
- OpenAI: For AI-powered outfit analysis (images are processed securely, no personal data shared)
- Cloudflare R2: For secure cloud storage of your photos
- Neon Database: For secure data storage and management
- Apple App Store: For subscription billing and payment processing
- Expo/React Native: For app functionality and performance monitoring
4.3 Apple-Specific Data Sharing
- App Store Connect: Aggregated analytics and crash reports (no personal identifiers)
- Apple Sign In: Authentication tokens only (personal data stays with Apple)
- In-App Purchases: Subscription status and billing through Apple's secure systems
- Push Notifications: Device tokens for notifications (no personal content)
4.4 Legal Requirements
We may disclose your information if required by law or in good faith belief that such disclosure is necessary to:
- Comply with legal obligations or court orders
- Protect our rights, property, or safety
- Protect the rights, property, or safety of our users
- Investigate potential violations of our Terms of Service
4.5 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified via email and/or prominent notice in the App.
5. Data Security
5.1 Security Measures
We implement appropriate technical and organizational security measures to protect your personal information:
- Encryption: All sensitive data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Authentication: Secure JWT-based authentication system with Apple Sign In integration
- Access Controls: Limited access to personal data on a need-to-know basis
- Regular Updates: We regularly update our security practices and dependencies
- Apple Security Standards: Compliance with Apple's security requirements for App Store
5.2 Data Breach Response
In the event of a data breach, we will:
- Investigate the incident promptly (within 24 hours)
- Notify affected users within 72 hours (where legally required)
- Notify Apple and relevant authorities as required
- Take immediate steps to contain and remedy the breach
- Provide clear information about what data was affected
6. Your Privacy Rights
6.1 Access and Control
You have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (account deletion)
- Portability: Request transfer of your data in a machine-readable format
6.2 Account Management
You can:
- Update your profile information at any time
- Delete your analysis history individually or in bulk
- Deactivate or delete your account entirely through the App
- Control notification preferences for all types of notifications
- Manage subscription settings through your Apple ID account
6.3 Subscription Rights
You have the right to:
- View subscription status and billing history through the App
- Cancel subscriptions at any time through Apple App Store settings
- Request refunds according to Apple's refund policy
- Export subscription data before account deletion
6.4 Regional Rights
For EU Users (GDPR):
- Right to object to processing
- Right to restrict processing
- Right to withdraw consent
- Right to lodge a complaint with supervisory authorities
- Right to data portability for subscription data
For California Users (CCPA):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (though we don't sell data)
- Right to non-discrimination for exercising privacy rights
7. Data Retention
7.1 Retention Periods
- Account Data: Retained until you delete your account
- Analysis History: Retained until you delete specific analyses or your account
- Subscription Data: Retained for 7 years for tax and legal compliance
- Usage Data: Aggregated and anonymized after 24 months
- Photos: Stored securely until you delete them or your account
- Apple Authentication Data: Retained until account deletion or Apple ID disconnection
7.2 Deletion Process
When you delete your account:
- Personal information is permanently deleted within 30 days
- Photos are removed from cloud storage within 7 days
- Analysis history is permanently deleted
- Subscription data is anonymized but retained for legal compliance
- Apple Sign In tokens are revoked immediately
- Some aggregated, anonymized data may be retained for service improvement
8. Children's Privacy
FitCheck AI is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly and notify parents if required by law.
Family Sharing: If you use Apple's Family Sharing to share subscriptions, the primary account holder is responsible for ensuring appropriate use by family members.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers:
- Adequacy Decisions: Transfers to countries with adequate protection
- Standard Contractual Clauses: For transfers to other countries
- Encryption: All data is encrypted during transfer
- Apple Global Infrastructure: Utilizing Apple's global data centers with appropriate safeguards
10. Third-Party Links and Services
The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.
Apple Services Integration: This App integrates with Apple services (Sign In, App Store, Push Notifications) which are governed by Apple's Privacy Policy available at https://www.apple.com/privacy/.
11. Apple-Specific Privacy Disclosures
11.1 App Store Privacy Labels
We provide accurate privacy labels in the App Store that describe:
- Data types collected by the App
- How data is used (analytics, personalization, etc.)
- Whether data is linked to your identity
- Whether data is tracked across other companies' apps
11.2 iOS Privacy Features
- App Tracking Transparency: We request permission before tracking data across apps
- Privacy Report: iOS users can view our data collection through Settings > Privacy & Security
- Data & Privacy Information: Available in Account settings within the App
11.3 Sign in with Apple
When you use Sign in with Apple:
- We receive only the information you choose to share
- Apple may provide a private relay email address to protect your privacy
- You can manage Apple Sign In through your Apple ID account settings
12. Updates to This Privacy Policy
We may update this Privacy Policy from time to time. When we do:
- We will post the updated policy in the App
- We will update the "Last Updated" date
- For material changes, we will notify you via email or in-app notification
- Continued use of the App after changes constitutes acceptance
- Apple App Store: Material changes will be submitted for App Store review
13. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Email: kstarventures@gmail.com
Subject Line: Privacy Policy Inquiry
Data Protection Officer: kstarventures@gmail.com
Subject Line: Data Protection Request
Apple App Store Inquiries: kstarventures@gmail.com
Subject Line: App Store Privacy Inquiry
Response Time: We will respond to privacy inquiries within 30 days.
For urgent privacy concerns or data breach reports, please mark your email as "URGENT - PRIVACY."
14. Compliance and Certifications
FitCheck AI is committed to maintaining the highest standards of data protection and privacy compliance:
- Apple App Store Guidelines: Full compliance with App Store Review Guidelines
- iOS Privacy Requirements: Compliance with iOS 14+ privacy features
- GDPR Compliant: Full compliance with EU General Data Protection Regulation
- CCPA Compliant: California Consumer Privacy Act compliance
- SOC 2 Type II: Security controls and practices (planned)
- ISO 27001: Information security management (planned)