OUTFT AI Privacy Policy

Last Updated: November 5, 2025

This Privacy Policy ("Policy") describes how OUTFT AI ("we," "us," "our," or the "App") collects, uses, stores, and protects your information when you use our iOS mobile application. OUTFT AI is operated as a solo developer project.

By using OUTFT AI, you agree to the collection and use of information in accordance with this Policy. If you do not agree with the terms of this Policy, do not access or use OUTFT AI.

Key Points About OUTFT AI's Privacy Practices

Before diving into the details, here are the critical things you need to know:

• OUTFT AI is a clothing try-on app that uses AI to place reference clothing images onto photos of you.
• We process two types of images: reference clothing images from the internet and personal photos you upload.
• All processing occurs through Google's Gemini API - we do NOT store any images on our servers or cloud storage.
• Images are stored ONLY locally on your device. If you delete the app or your account, all images are permanently lost.
• We collect minimal data necessary to operate the app and process payments.
• We do NOT sell your personal information to third parties.
• We do NOT use your photos for any purpose other than providing the try-on functionality you request.

1. Information We Collect

1.1 Images You Provide

When you use OUTFT AI's core functionality, you provide two types of images:

Critical Information About Your Images:

• Images are processed through Google's Gemini API for AI generation
• Images are transmitted securely via HTTPS encryption
• Images are NOT stored on any server, cloud storage, or Firebase
• Images are stored ONLY on your local device
• We do not retain, backup, or have access to your images after processing
• We take steps to strip EXIF metadata (including location data, timestamps, and camera information) from uploaded images during processing
• If you delete the app or your account, all locally stored images are permanently deleted and cannot be recovered

1.2 Account and Payment Information

Account Data:

• Device identifier (to manage your subscription and app instance)
• App installation date and version
• Subscription status (active/inactive)

Payment Information:

• We use Apple's In-App Purchase system for all transactions
• We do NOT collect or store credit card numbers, billing addresses, or payment credentials
• Apple processes all payment information according to their privacy policy
• We only receive confirmation that you have an active subscription ($2.99/week)

1.3 Technical and Usage Data

Device Information:

• Device model and operating system version (iOS)
• App version
• Device language and region settings
• IP address (for API requests only)
• Screen resolution

Usage Analytics:

• App launch and session times
• Features used within the app
• Error logs and crash reports
• API request counts
• Time spent in app

API Usage Data:

• Number of API calls to Gemini
• Processing times
• Error rates
• Request/response sizes (NOT including image content)

This data helps us improve app performance, fix bugs, and optimize the user experience.

1.4 Information We Do NOT Collect

• Your name, email address, or contact information (unless you contact us for support)
• Precise geolocation data beyond country/region
• Contacts, calendars, or other device data
• Photo library contents (we only access photos you explicitly select)
• Biometric data or facial recognition profiles
• Social media accounts or login credentials

2. How We Use Your Information

2.1 Image Processing

We use your images ONLY to provide the core functionality of OUTFT AI:

Step 1: Clothing Analysis

• Reference clothing image is sent to Gemini API
• Gemini extracts JSON data describing clothing attributes (color, style, type, fit)
• Image is discarded after JSON extraction

Step 2: Try-On Generation

• Your personal photo and extracted clothing JSON are sent to Gemini API with specific prompt instructions
• Gemini generates a new image showing you wearing the reference clothing
• Original images are not retained by Gemini or us after processing
• Generated image is returned directly to your device and saved locally

We do NOT:

• Store your images on servers or cloud storage (including Firebase)
• Create a profile or database of your appearance
• Use your images to train AI models
• Share your images with third parties
• Use your images for any purpose beyond generating your requested try-on
• Retain your images after the API processing is complete

2.2 Subscription Management

We use payment and device data to:

• Verify your active subscription status
• Enable premium features for paid subscribers
• Process subscription renewals through Apple
• Provide customer support for billing issues

2.3 App Improvement and Support

We use technical and usage data to:

• Diagnose and fix technical issues and bugs
• Monitor app performance and API reliability
• Understand which features are most valuable to users
• Optimize API usage and reduce costs
• Improve user interface and experience
• Respond to support inquiries

2.4 Legal Compliance and Safety

We may use and disclose information where legally required to:

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from government authorities
• Enforce our Terms of Service
• Protect our rights, property, and safety or that of our users
• Detect, prevent, or address fraud, security, or technical issues

3. How We Share Your Information

3.1 Third-Party Service Providers

We share limited information with the following service providers who help us operate OUTFT AI:

Google Gemini API

• Purpose: AI image processing and generation
• Data Shared: Reference clothing images, personal photos, and processing instructions
• Data Retention: Images are processed in real-time and NOT stored by Google per their API terms
• Privacy Policy: https://policies.google.com/privacy

Apple App Store

• Purpose: Payment processing and subscription management
• Data Shared: Device identifier and subscription status
• We do NOT receive your payment credentials
• Privacy Policy: https://www.apple.com/legal/privacy/

Analytics Provider (if applicable)

• Purpose: App performance monitoring and crash reporting
• Data Shared: Technical data, usage statistics, anonymized identifiers
• No personally identifiable information is shared

3.2 What We Do NOT Share

• We do NOT sell your personal information to anyone
• We do NOT share your images with advertisers, marketers, or data brokers
• We do NOT share your images with other users
• We do NOT provide your data to third parties for their independent use

3.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. You will be notified via app notification or other reasonable means of any such change in ownership or control of your personal information.

4. Data Storage and Retention

4.1 Local Storage Only

Critical Information:

• ALL generated try-on images are stored exclusively on your device
• We do NOT use Firebase, AWS, Google Cloud Storage, or any cloud backup
• Images exist only in your device's local app storage
• If you delete the app, all images are permanently deleted
• If you delete your account, all locally stored data is removed
• We cannot recover deleted images - they are gone permanently

4.2 Data Retention Periods

Images:

• Reference clothing images: Processed in real-time, not retained
• Personal photos: Processed in real-time, not retained
• Generated try-on images: Stored locally on device until you delete them
• Server/cloud retention: 0 days (images never touch our servers)

Subscription Data:

• Active subscription: Duration of subscription
• Canceled subscription: 30 days after cancellation
• Payment records: 7 years (required for tax/legal compliance, handled by Apple)

Technical Data:

• Usage logs: 90 days
• Error logs: 60 days
• Crash reports: 90 days
• Analytics data: 12 months (anonymized)

Support Communications:

• Email support requests: 2 years
• In-app support messages: 1 year

4.3 Data Deletion

You can delete your data at any time:

• Delete individual images within the app
• Delete your account through app settings (removes all local data)
• Uninstall the app (removes all local data)
• Contact us at itsoutftapp@gmail.com to request deletion of any remaining technical data

We will respond to deletion requests within 30 days.

5. Security Practices

We take the security of your information seriously and implement the following measures:

Data Transmission:

• All API communications use HTTPS encryption (TLS 1.3)
• Images are encrypted during transmission to Gemini API
• No images are transmitted in plaintext

Local Device Security:

• Images stored using iOS standard secure storage mechanisms
• Data is protected by your device's security (passcode, Face ID, Touch ID)
• App follows iOS security best practices

API Security:

• Secure API key management
• Rate limiting to prevent abuse
• Request authentication and validation

Limitations:

While we implement industry-standard security measures, no system is 100% secure. We cannot guarantee absolute security against unauthorized access, hacking, data loss, or other breaches. You acknowledge and accept this risk when using OUTFT AI.

Your Responsibility:

• Keep your device secure with a strong passcode
• Do not share your device with untrusted individuals
• Update iOS regularly to receive security patches
• Report any suspected security issues to us immediately

6. Your Privacy Rights and Choices

6.1 Access and Control

You have the following rights regarding your data:

• Access: Request a copy of the data we hold about you (limited to subscription and technical data, as images are not stored by us)
• Correction: Update or correct inaccurate data through app settings or by contacting us
• Deletion: Delete your account and all associated data at any time through app settings
• Restriction: Limit how we use your data by disabling analytics in app settings
• Objection: Object to data processing by discontinuing use of the app
• Portability: Request your data in a machine-readable format (where applicable)

6.2 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights:

Right to Know:

• Categories of personal information collected
• Sources of personal information
• Business purpose for collecting personal information
• Categories of third parties with whom we share information

Right to Delete:

• Request deletion of personal information we have collected
• Subject to certain legal exceptions

Right to Opt-Out:

• We do NOT sell your personal information
• No opt-out is necessary as we don't engage in data sales

Right to Non-Discrimination:

• We will not discriminate against you for exercising your privacy rights

Shine the Light:

• Request information about disclosure of personal information to third parties for direct marketing

To exercise these rights, contact us at itsoutftapp@gmail.com.

6.3 European Union/EEA Rights (GDPR)

If you are in the EU/EEA, you have rights under GDPR:

Legal Basis for Processing:

• Contract performance (providing app functionality)
• Consent (analytics, optional features)
• Legitimate interests (app improvement, security)

Your Rights:

• Right of access to your data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with supervisory authority

Data Protection Officer:

For GDPR inquiries, contact us at itsoutftapp@gmail.com with "GDPR Request" in the subject line.

6.4 How to Exercise Your Rights

To exercise any of these rights:

• Email us at itsoutftapp@gmail.com
• Use the in-app support feature
• Include sufficient details to verify your identity
• Specify which right you wish to exercise

We will respond to verified requests within 30 days (45 days if complex).

7. International Data Transfers

Server Location:

• OUTFT AI operates as a solo developer project based in California, United States
• Gemini API may process images through Google's global infrastructure
• Your data may be transferred to and processed in the United States and other countries

Safeguards:

• We rely on Google's compliance with international data protection frameworks
• Data is encrypted during transmission
• Processing is limited to real-time generation without storage

Your Consent:

By using OUTFT AI, you consent to the transfer of your information to countries outside your jurisdiction, which may have different data protection laws.

8. Children's Privacy

Age Restrictions:

OUTFT AI is NOT intended for use by individuals under the age of 18 (or the applicable minimum age in your jurisdiction):

• EU/EEA: 16 years (or lower if permitted by member state law)
• United States: 13 years (COPPA compliance)
• South Korea: 14 years
• Other jurisdictions: Applicable age of digital consent

Parental Consent:

• Users under 18 require verifiable parental consent
• We do not knowingly collect information from children without consent

If You Are Under the Minimum Age:

• Do not use OUTFT AI
• Do not upload photos of yourself
• Ask a parent or guardian for permission

If We Discover Underage Use:

• We will immediately delete the account
• We will delete all associated data
• We will block the device from creating new accounts

Parents/Guardians:

If you believe your child has used OUTFT AI without permission, contact us immediately at itsoutftapp@gmail.com and we will delete all data within 48 hours.

9. Third-Party Links and Services

OUTFT AI may contain links to third-party websites, services, or content:

We Are Not Responsible For:

• Privacy practices of third-party services
• Content or accuracy of third-party sites
• Data collection by external links

Your Responsibility:

• Review privacy policies of any third-party service you use
• Understand that clicking external links takes you outside our control
• Exercise caution when sharing personal information with third parties

Specific Third Parties:

• Google Gemini API: https://policies.google.com/privacy
• Apple App Store: https://www.apple.com/legal/privacy/

10. Cookies and Tracking Technologies

Cookies:

OUTFT AI does not use cookies as it is a native iOS application without web-based components.

Analytics and Tracking:

We may use the following technologies:

Essential Tracking (No Consent Required):

• Session management
• Subscription verification
• Security and fraud prevention
• Error logging

Optional Tracking (Consent Required):

• Usage analytics
• Performance monitoring
• Feature usage statistics

You can disable optional tracking in app settings under "Privacy Settings."

Advertising:

We do NOT use advertising SDKs or tracking pixels for ad targeting.

11. API Usage and Third-Party Processing

11.1 Google Gemini API

What Gemini Receives:

• Reference clothing images you select
• Personal photos you choose to use
• Processing instructions and prompts we provide
• Device metadata required for API functionality

What Gemini Does:

• Processes images in real-time to generate try-on results
• Returns generated image directly to your device

What Gemini Does NOT Do (per their terms):

• Store your images permanently
• Use your images to train their models (for paid API users)
• Share your images with other parties
• Retain your data beyond processing time

Our API Usage:

• We use Google's commercial API with data protection agreements
• We do not use free/public APIs that may have different data policies
• We follow Google's best practices for privacy-preserving API usage

Disclaimer:

While we trust Google's API commitments, we cannot control their actual data practices. By using OUTFT AI, you acknowledge that your images are temporarily processed by Google's Gemini API and accept the associated risks. We recommend reviewing Google's Privacy Policy at https://policies.google.com/privacy.

12. Data Breach Notification

In the unlikely event of a data breach involving your personal information:

Our Response:

• We will investigate the breach immediately
• We will assess the scope and severity
• We will notify affected users within 72 hours (as required by law)
• We will notify relevant authorities as required

How We Will Notify You:

• Push notification through the app
• Email (if we have your email address)
• In-app banner or alert

What Information We Will Provide:

• Nature of the breach
• Types of data affected
• Potential consequences
• Steps we are taking to address the breach
• Recommendations for protecting yourself

Your Actions:

• Follow any instructions provided in the notification
• Monitor your accounts for suspicious activity
• Consider changing passwords if applicable
• Contact us if you have questions or concerns

Note: Given that we do not store images and have minimal data collection, most potential breaches would involve technical/usage data rather than sensitive personal content.

13. Changes to This Privacy Policy

Right to Modify:

We reserve the right to modify this Privacy Policy at any time to reflect changes in:

• Legal requirements
• Business practices
• App features
• Industry standards

How We Notify You:

For material changes:

• Push notification through the app
• Prominent in-app notice
• Email notification (if we have your email)
• Update to "Last Updated" date at the top

For minor changes:

• Update to "Last Updated" date
• Posted notice in app

Your Continued Use:

• Continued use of OUTFT AI after changes constitutes acceptance
• If you do not agree with changes, stop using the app and delete your account
• Material changes will not apply retroactively without your consent

Reviewing Changes:

• Check this Policy periodically for updates
• Previous versions are available upon request
• We maintain a changelog of significant modifications

14. Disclaimer and Limitation of Liability

AI-Generated Content:

• OUTFT AI uses AI to generate images, which may not be perfect
• Results may vary in quality and accuracy
• Generated images are for entertainment and visualization purposes
• We do not guarantee the quality, accuracy, or suitability of generated images

Content Moderation:

• We implement measures to prevent inappropriate content generation
• However, AI is imperfect and may occasionally produce unexpected results
• You are responsible for reviewing generated content before saving or sharing
• Do not use OUTFT AI to create inappropriate, offensive, or illegal content

Service Availability:

• We strive for 99%+ uptime but cannot guarantee uninterrupted service
• API limitations or outages may affect functionality
• We may temporarily suspend service for maintenance or security reasons

No Warranties:

OUTFT AI is provided "AS IS" without warranties of any kind, express or implied, including but not limited to:

• Merchantability
• Fitness for a particular purpose
• Non-infringement
• Accuracy or reliability of results

Limitation of Liability:

To the maximum extent permitted by law, we shall not be liable for:

• Indirect, incidental, consequential, or punitive damages
• Loss of data, revenue, profits, or opportunities
• Unauthorized access to or alteration of your data
• Third-party actions or services
• Any amount exceeding what you paid for the app in the past 12 months

Your Assumption of Risk:

By using OUTFT AI, you acknowledge and accept the inherent risks of:

• Transmitting images over the internet
• Storing data locally on your device
• Using AI-generated content
• Relying on third-party APIs

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

Support Email: itsoutftapp@gmail.com

Mailing Address:

223 Cantor
Irvine, CA 92620
United States

Response Time:

We aim to respond to all inquiries within 5 business days.

For Specific Requests:

• GDPR requests: Include "GDPR Request" in subject line
• CCPA requests: Include "CCPA Request" in subject line
• Data deletion: Include "Delete My Data" in subject line
• Security concerns: Include "Security Issue" in subject line with URGENT priority

Bug Reports and Feature Requests:

Use the in-app feedback feature or email us directly.

16. Legal Jurisdiction

Governing Law:

This Privacy Policy is governed by the laws of California, United States, without regard to conflict of law principles.

Dispute Resolution:

Any disputes arising from this Policy will be resolved through:

1. Good faith negotiation between parties
2. Mediation if negotiation fails
3. Binding arbitration in California if mediation fails
4. Courts of California as a last resort

Severability:

If any provision of this Policy is found to be unenforceable, the remaining provisions will continue in full force and effect.

Entire Agreement:

This Privacy Policy, together with our Terms of Service, constitutes the entire agreement regarding your privacy rights.

17. Special Notes for Portfolio Use

Developer Portfolio:

OUTFT AI is developed by a solo developer and may be featured in portfolio materials, including:

• Screenshots of the app interface (without user data)
• Descriptions of app functionality and features
• Technical implementation details
• Performance metrics (anonymized)

What We Will NOT Include:

• Any user images or personal photos
• User data or personal information
• Identifiable information about users
• Private or confidential user content

Your Generated Content:

Any images you generate are yours. We do not claim ownership or use them for portfolio purposes without your explicit consent.

18. Terms of Service Integration

This Privacy Policy should be read in conjunction with our Terms of Service, which govern your use of OUTFT AI. In case of conflict between this Policy and the Terms of Service, the Terms of Service shall prevail.

Acknowledgment and Acceptance

By downloading, installing, accessing, or using OUTFT AI, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

If you do not agree with any part of this Policy, you must not use OUTFT AI.