This Privacy Policy explains how Vestiry Inc. ("Vestiry", "we", "us", or "our") collects, uses, shares, retains, and protects information when you use Vestiry - Try On, our mobile application, website, virtual wardrobe, virtual try-on tools, credit wallet, subscriptions, and related services (collectively, the "Services").
By using the Services, you acknowledge this Policy. If you do not agree with the practices described here, do not use the Services. This Policy should be read together with our Terms of Service.
1. Who controls your data
Vestiry is the controller or business responsible for information that we collect directly through the Services, subject to the role of our service providers and the laws that apply to you. Google, Firebase, Google Play, Google Mobile Ads, Google Sign-In, and Perfect Corp may independently process information under their own policies.
2. Information we collect
2.1 Account and authentication information
- Firebase user ID, account status, authentication provider, and anonymous-session identifiers.
- If you use Google Sign-In: name, email address, profile image URL, provider identifiers, and authentication information necessary to sign in. We do not receive your Google password.
- If you use email authentication: email address and authentication metadata. Password handling is performed by Firebase Authentication; we do not receive your password in readable form.
2.2 Photos and user-generated content
- Garment, person, closet, outfit, and virtual try-on images that you choose to upload.
- Closet metadata such as garment name, category, gender, style, creation date, and selected defaults.
- Virtual try-on results and other generated or saved content.
Photos may reveal sensitive information, including a person's appearance, body, clothing, location clues, or other personal details. Do not upload images you are not authorized to process. We do not use the Services to create a face-recognition template or to identify a person, but third-party processing may have its own practices.
2.3 Purchases, subscriptions, and wallet data
- Credit balance by source: welcome, daily, rewarded, subscription, and purchased credits.
- Credit ledger entries, operation IDs, amounts, timestamps, feature references, economy version, and status.
- Google Play product IDs, subscription base-plan IDs, order references, purchase tokens used for server verification, subscription state, expiry time, and entitlement status.
- We do not receive or store your complete payment-card number. Google Play handles payment credentials, billing instruments, taxes, and payment processing.
2.4 Device, usage, advertising, and diagnostic information
- Device model, manufacturer, operating system version, app version, language, time zone, screen and runtime information.
- Firebase installation information and app-session identifiers.
- Pseudonymous device anti-abuse records: a one-way hash of the device identifier (never IMEI, serial, or advertising ID in the hash), first/last seen dates, and free-credit counters. Raw identifiers are never stored; the hash uses a server-side secret and cannot be reversed into your device ID.
- Analytics events such as screens, feature use, purchase outcomes, generation outcomes, rewarded-ad events, and approximate session activity. We do not intentionally send image bytes, passwords, or purchase tokens in analytics events.
- Advertising identifiers, ad interaction, and ad delivery information from Google Mobile Ads, subject to your device, consent, and Google settings.
- Technical logs, error codes, performance information, and security events needed to operate and protect the Services.
2.5 Information from permissions and device storage
The App may request access to photos or the device gallery when you choose an image. We use the selected content for the action you request. You can revoke permissions in Android settings. The App may also store local preferences, onboarding state, and theme settings on your device.
3. How we use information
- Authenticate users, maintain sessions, link accounts, and provide account recovery.
- Store and display your closet, outfits, images, and generated results.
- Process virtual try-on requests, compress images, apply configured output processing, and return results.
- Verify Google Play purchases on our server, grant benefits, prevent duplicate crediting, reconcile renewals, and remove benefits after expiry or revocation.
- Operate daily and rewarded-credit rules, monthly non-accumulating credit periods, subscriptions, and feature costs.
- Provide advertising, measure campaign and feature performance, improve reliability, and understand how users interact with the Services.
- Prevent fraud, abuse, unauthorized access, chargebacks, manipulation of credits, and attacks against the Services, including limiting free guest credits per device (up to 3 anonymous accounts per device share one device-level daily/reward limit).
- Comply with legal obligations, enforce agreements, respond to requests, and protect users, Vestiry, and third parties.
4. Legal bases and consent
Where data-protection law requires a legal basis, we generally rely on performance of a contract to provide requested features, legitimate interests for security and service improvement (including proportionate anti-fraud device checks described in Sections 2.4 and 7), compliance with legal obligations, and consent for optional advertising, analytics, marketing, permissions, or third-party image processing where consent is required. You may withdraw consent for optional processing, but some features may stop working.
5. How information is shared
We share information only as reasonably necessary for the purposes described here:
5.1 Firebase and Google infrastructure
Firebase Authentication, Firestore, Storage, Cloud Functions, Remote Config, Analytics, and Google Mobile Ads process account, content, operational, analytics, and advertising data according to their roles. Google Play processes purchases, subscriptions, receipts, refunds, renewals, and payment data.
5.2 Perfect Corp and AI processing
When you request virtual try-on, the selected person and garment images and associated parameters may be transmitted through our Cloud Functions to Perfect Corp for processing. Our API credential is kept server-side. Perfect Corp may retain or process data under its own business terms and privacy policy; review Perfect Corp's Privacy Policy.
5.3 Service providers and legal disclosures
We may disclose information to hosting, security, analytics, customer-support, professional, and infrastructure providers under appropriate contractual or legal safeguards. We may disclose information when required by law, court order, lawful request, fraud investigation, emergency, merger, acquisition, financing, or protection of rights and safety.
5.4 No sale of image content
We do not sell your uploaded images or generated results. Advertising and analytics providers may process device identifiers, usage events, and advertising information in ways that some US privacy laws classify as "sharing" or targeted advertising. You can manage advertising and consent choices through device and Google settings where available.
6. International transfers
Our providers may process information in countries other than where you live. Where required, we use appropriate contractual, technical, or other safeguards. By using features that require third-party processing, you acknowledge that information may be transferred to the locations used by those providers.
7. Security
- We use access controls and Firebase rules to isolate user data by account.
- Images are stored under user-specific paths and feature uploads are subject to file-type and size controls.
- Google Play purchase tokens are retained in server-only storage and are not readable by the mobile client.
- Purchase verification and credit changes use server-side validation, idempotency, and transactional ledger operations.
- Normal service connections use HTTPS/TLS. No internet transmission or third-party system can be guaranteed to be perfectly secure.
- We may add or expand app/device attestation controls as the product and Play distribution mature. App Check is not represented by this Policy as a universal guarantee against abuse.
- Free-credit abuse prevention uses a salted one-way device hash (server secret, never stored raw) in server-only records. This never blocks purchases, subscriptions, or generating with an existing balance; it only degrades free daily/rewarded/welcome grants on devices over the shared limit.
If you believe an account, purchase, or image has been compromised, contact support promptly and do not send passwords or purchase tokens by email.
8. Retention
- Account and profile data: Retained while your account exists and removed through account deletion, subject to legal, security, and backup limitations.
- Closet images and metadata: Retained until you delete them, your account is deleted, or an applicable retention rule removes them.
- Try-on results: Retained according to your plan's history period and deletion settings. Free users may have no persistent history.
- Wallet and ledger data: Active wallet records are removed during eligible account deletion. We may retain limited records required for fraud prevention, legal compliance, dispute handling, or accounting.
- Google Play records: Google retains purchase and subscription records under Google's policies and legal obligations; deleting a Vestiry account does not delete Google Play records or cancel a Play subscription.
- AI processing: Our Functions are designed not to persistently store the input images for processing, but Perfect Corp's retention is governed by its own terms and policy.
- Device anti-abuse records: Pseudonymous device hashes are kept up to 12 months from last activity; conflict logs up to 90 days. On account deletion, your account link is removed but aggregate counters may be retained briefly for fraud prevention as permitted by law.
- Backups and logs: Deleted data may remain in protected backups or security logs for the period reasonably required for recovery, fraud prevention, or law, after which it is deleted or de-identified.
9. Your choices and rights
- Access, correct, or delete content through the App where the feature is available.
- Request access, correction, deletion, restriction, portability, or information about processing by contacting support.
- Withdraw optional consent, reset advertising identifiers, limit ad personalization, or disable permissions through device and account settings.
- Object to certain processing or request human review where required by applicable law.
- We may verify identity and account ownership before fulfilling a request. We do not use sensitive images to verify identity unless required for security and permitted by law.
10. United States privacy notice
This section applies to US residents and supplements the rest of this Policy. Rights and definitions vary by state.
10.1 Categories collected and disclosed
During the preceding 12 months, we may have collected or disclosed these categories: identifiers and account information; commercial information such as purchase and subscription history; internet or app activity; device and advertising identifiers; photos and other user-generated content; inferences needed to provide requested features; and sensitive information that you voluntarily include in images or account content. We disclose these categories to Firebase/Google, Google Play, Google Mobile Ads, Perfect Corp, hosting/security providers, and legal authorities only for the purposes described above.
10.2 California and similar state rights
- Right to know or access the categories and specific personal information we hold, subject to legal exceptions.
- Right to correct inaccurate personal information.
- Right to delete personal information, subject to exceptions for security, legal, accounting, and transaction records.
- Right to opt out of sale or sharing for cross-context behavioral advertising where that concept applies. We do not sell image content for money; advertising identifiers and ad events may be processed by Google Mobile Ads for advertising functions.
- Right to limit certain uses of sensitive personal information where required by law.
- Right to non-discrimination for exercising privacy rights.
- Right to appeal a denied request where required by state law.
To submit a US privacy request, email with the subject "US Privacy Request" and identify the right you are exercising. You may use an authorized agent where permitted; we may require proof of authorization and identity. We will not retaliate for a good-faith request.
10.3 California notice at collection
We collect the categories above for account operation, image processing, security, analytics, advertising, purchase fulfillment, and legal compliance. We retain them only as long as reasonably necessary for those purposes and the periods described in Section 8. We do not knowingly sell the personal information of children under 16.
11. European and other international rights
If you are in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with comparable law, you may have rights to access, correct, delete, restrict, object, port data, withdraw consent, and complain to a supervisory authority. You may contact us first so we can investigate your request. Some rights are subject to lawful exceptions and identity verification.
12. Children
The Services are not directed to children under 13. If we learn that we collected personal information from a child under the applicable age without required consent, we will take reasonable steps to delete it. Parents or guardians may contact us through the address below.
13. Account deletion
You can request deletion in the App or by contacting support. Before deletion, active Google Play subscriptions must be canceled in Google Play; deleting a Vestiry account does not cancel recurring Play charges. When eligible deletion begins, server-owned subscription records, private purchase-token records, ad tracking, rate-limit data, account data, wallet data, and user images are removed from active systems. If a required storage deletion fails, the process may stop so that data is not falsely represented as deleted; contact support to retry.
Deletion does not erase information controlled by Google Play or Perfect Corp, legally required records, de-identified aggregates, or protected backups during their normal retention period.
14. Cookies and website technologies
Our public website may use essential hosting, security, and configuration technologies. The mobile App may use SDK identifiers and local storage as described above. Browser controls can limit cookies and similar technologies, but some website features may not work correctly.
15. Changes to this Policy
We may update this Policy when our Services, providers, or legal obligations change. We will update the effective date and provide additional notice for material changes where required. Continued use after an updated Policy becomes effective means you acknowledge the updated practices.
16. Contact
For privacy, security, deletion, accessibility, or data-protection questions:
Email:
Website:
This Policy is intended to communicate our practices clearly and is not legal advice. Review it with qualified counsel for the jurisdictions where Vestiry operates and where the Services are offered.