Privacy Policy

This Privacy Policy explains how FemStyle AI("we", "us", "our") collects, uses, shares, and protects your personal data when you use our website and services at https://femstyle.ai. We respect your privacy and aim to be transparent about our data practices.

1. Data Controller

The data controller for your personal data is FemStyle AI, operated by a private entrepreneur registered in Ukraine. You can contact us for any privacy-related questions at hello@femstyle.ai. Full legal details of the operator are available upon request from competent data protection authorities.

2. What Data We Collect

Data you provide

• Account information: email address, password (stored in hashed form), optional username.
• Uploaded photos:photos of yourself (the "person" photo) and photos of clothing items ("garment" photos) that you submit for processing.
• AI-generated results: images produced by the AI from your uploads.
• Preferences: language, referral code, subscription tier.

Data collected automatically

• Technical data: IP address, user agent, device type, browser, and basic log information necessary to operate the Service and prevent abuse.
• Usage data: pages visited, features used, timestamps of generations, counts of Femfit credits consumed.
• Cookies and local storage: essential cookies for authentication, and optional analytics cookies if you consent.

Data we do NOT collect

We do not collect government IDs, bank card numbers (handled entirely by our payment provider), health data, or biometric identifiers beyond what is contained in the photos you choose to upload.

3. Why We Process Your Data (Legal Basis)

• Contract performance: to create and maintain your account, process photo uploads, run AI generations, track Femfit balance, and deliver paid features.
• Legitimate interest: to secure the Service, detect abuse, rate-limit, maintain backups, and improve the product.
• Consent: for optional analytics cookies and marketing communications, where applicable. You can withdraw consent at any time.
• Legal obligation: to respond to lawful requests from authorities.

4. How Long We Keep Your Data

• Uploaded photos (person and garment): automatically deleted after 24 hours via an automated daily job.
• AI-generated results: retained for 30 days on the free plan and up to 90 days on paid plans, then deleted.
• Account data: retained for as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., billing records).
• Logs and backups: kept for up to 90 days for security and operations.

5. AI Training Disclosure

We do not use your uploaded photos or AI-generated results to train, fine-tune, or improve any AI models — ours or third parties'. Your photos exist in our systems only for the time required to generate your results and for the retention periods described above.

6. Third Parties We Share Data With (Processors)

To operate the Service we rely on a small number of trusted processors. They only receive the data necessary to perform their function and are bound by contracts to protect it.

• Supabase (authentication, database, storage) — privacy policy
• Replicate (AI model hosting and inference; your uploaded photos are transmitted to Replicate for processing) — privacy policy
• Resend (transactional email delivery) — privacy policy
• Lemon Squeezy (payment processing; we never see your full card details) — privacy policy
• Vercel (website hosting and edge delivery) — privacy policy
• Cloudflare (DNS and network) — privacy policy

We do not sell your personal data to advertisers or data brokers.

7. International Data Transfers

Some of our processors are located outside of your country of residence, including in the United States and the European Union. When we transfer data internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or equivalent mechanisms.

8. Your Rights

Depending on your jurisdiction (GDPR for EU/EEA, UK GDPR, and similar laws elsewhere), you have the following rights:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure— request deletion of your data ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, where processing is based on consent.
• Complain to a supervisory authority — you may lodge a complaint with the data protection authority in your country.

To exercise any of these rights, email hello@femstyle.ai. We will respond within 30 days.

9. Cookies

We use a small number of cookies:

• Essential (authentication session) — required for the Service to work. Cannot be disabled.
• Analytics (if enabled) — to understand how the Service is used in aggregate. Only set after you accept the cookie banner.

You can manage your consent at any time through your browser settings or by clearing cookies for our site.

10. Children

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at hello@femstyle.ai and we will promptly delete it.

11. Security

We use HTTPS across the entire Service, store passwords only in hashed form, restrict administrative access, and rely on database-level Row Level Security to isolate user data. No internet service can be 100% secure; if we become aware of a data breach affecting your personal data, we will notify you within 72 hours where required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Material changes will be announced via email or in-app notice.

13. Contact

For any privacy-related question or request, email hello@femstyle.ai.