Privacy Policy
This policy explains what information the FitAI – Virtual Try-On app (“FitAI”, “the app”) collects, why, who it is shared with, how long it is kept, and the choices and rights you have. It applies to the app on Android (Google Play) and iOS (App Store).
- Your photos are sent to Google’s Gemini AI only to create your try-on image. We do not store your photos on our servers, and they are not used to train AI models.
- You can use FitAI as a guest. Signing in with Google or Apple is optional and only keeps your credits safe across devices.
- We keep your credit balance and purchase status on our servers. Payments are handled by Google Play or Apple — we never see your card details.
- The free version shows ads from Google AdMob. You control ad personalisation and tracking.
- We do not sell your personal information.
- You can delete your account and data at any time in the app or at fitai-app.web.app/delete-account.
1. Who we are
FitAI is published by Rifat Hossain (trading as Uplifeway), an individual developer based in Dhaka, Bangladesh, who is the controller of the personal information described here. Contact: rifat.ipe@gmail.com.
2. Information we collect
Information you provide
- Photos you choose from your camera or gallery: a photo of a person and a photo of an item (clothing, eyewear, necklace or earrings). See section 3.
- Sign-in details (optional). If you sign in with Google or Apple, we receive your email address and an account identifier from that provider. Google also shares your name and profile picture, which are stored with your sign-in record; we do not display or use them for anything else. With Sign in with Apple you can choose to hide your email, in which case we receive an Apple relay address.
- Content reports. If you report an AI-generated image, we receive the reason you choose, the item category, the AI model used, your platform and the app version. The image itself is not sent.
- Access codes you enter to redeem a promotion.
Information created when you use the app
- Account identifier. When you first open the app we create an anonymous account (a random Firebase user ID) so our servers can recognise your device. No name or email is attached unless you sign in.
- Credits and purchases. Your credit balance, a history of credits added and used (for example “try-on, 1 credit”), your Pro subscription status and expiry, and the store purchase token or transaction ID used to verify each purchase. Payment details are handled entirely by Google Play or Apple.
- Service records. Our servers record your account ID, the time of each request and your time zone (so daily free credits reset at your midnight), and keep short-lived counters to prevent abuse. Our hosting provider also records your IP address in server logs.
- App integrity checks. Firebase App Check uses Google Play Integrity (Android) or Apple App Attest (iOS) to confirm requests come from the genuine app.
- Usage analytics. Google Analytics for Firebase collects information such as app opens, screens viewed, in-app purchases, session length, app version, device model, operating system, language, approximate location derived from your IP address, and an app-instance identifier.
- Advertising data (free version only). Google AdMob collects your device’s advertising identifier (where permitted), IP address, device and app information, and ad interactions. See section 6.
- Notification token. The Firebase Cloud Messaging SDK may create a device token. FitAI does not currently send push notifications; if we start, we will ask your permission first.
Information stored only on your device
Photos you save for quick reuse, your try-on results, credit display cache, and app settings are stored on your device and are not uploaded to our servers. They are removed when you delete your account in the app or uninstall it. Images you save to your gallery or share stay where you put them.
We do not collect your precise location, contacts, health data, browsing history, or messages.
3. Your photos and AI processing
- Before your first try-on, the app asks for your agreement to send photos for AI processing.
- When you tap “Try on”, your two photos (or, for a new pose, your previous result) are sent over an encrypted connection to our server, which passes them to Google’s Gemini API to generate the image and returns the result to your device.
- Our servers handle photos in memory only and do not store them.
- Google processes the photos as our service provider under the Gemini API terms for paid services: Google does not use them to train or improve its models and may keep them for a limited period solely to detect abuse.
- We do not use your photos for facial recognition, to identify you, for advertising, or for any purpose other than creating your result.
- Only upload photos of yourself or of people who have agreed. Do not upload photos of children.
- Images you save or share from the app carry a small “AI-generated · FitAI” label.
4. How we use information
| Purpose | Information used | Legal basis (EEA/UK) |
|---|---|---|
| Create try-on images | Photos, account ID | Performing our contract with you; your consent for photo processing |
| Run your account, credits and subscription; verify purchases with Google Play or Apple | Account ID, credits and purchase records, sign-in email | Performing our contract |
| Keep credits on a new device (optional sign-in) | Sign-in email and provider ID | Performing our contract |
| Prevent fraud, abuse and overuse; secure the service | Account ID, service records, IP address, integrity checks | Legitimate interests in keeping FitAI safe and available |
| Review reports about AI-generated content | Content reports, account ID | Legitimate interests; legal obligations |
| Understand and improve the app | Analytics data | Legitimate interests, or your consent where required |
| Show ads in the free version | Advertising data | Your consent where required (personalised ads); legitimate interests (non-personalised ads) |
| Answer support and deletion requests | Your email and what you send us | Performing our contract; legal obligations |
| Accounting, tax and refunds | Purchase records | Legal obligations |
We do not use your information for automated decisions that have legal or similarly significant effects on you.
5. Who we share it with
We do not sell your personal information. We share it only with these service providers, which process it on our behalf, and when required by law:
| Provider | What for | Their policy |
|---|---|---|
| Google — Gemini API | Generating try-on images from your photos | Gemini API terms |
| Google — Firebase (Authentication, Cloud Functions, Firestore, Hosting, App Check, Analytics, Cloud Messaging) and Google Cloud | Accounts, our servers and database, integrity checks, analytics | Firebase privacy |
| Google — AdMob | Ads in the free version | How Google uses data in ads |
| Google Play and Apple App Store | Payments, subscriptions, refunds and purchase verification | Google · Apple |
| Google Sign-In and Sign in with Apple | Optional sign-in | Google · Apple |
We may also disclose information if required by law, to protect the rights and safety of users or others, or as part of a sale or transfer of the app, in which case this policy continues to apply.
6. Ads, tracking and your choices
- The free version shows ads from Google AdMob. Pro subscribers do not see ads.
- EEA, UK and Switzerland: before any ads are requested, the app shows Google’s consent form so you can accept or refuse personalised advertising. You can change your choice by reinstalling the app or through your device’s ad settings.
- iPhone and iPad: the app asks your permission to track you across other companies’ apps and websites (App Tracking Transparency). If you decline, ads are not personalised using your device’s advertising identifier. Change this any time in Settings → Privacy & Security → Tracking.
- Android: you can reset or delete your advertising ID in Settings → Google → Ads (or Settings → Privacy → Ads, depending on your device).
- Your photos and try-on results are never used for advertising.
7. Device permissions
- Camera — to take a photo of yourself or an item. Used only when you tap Camera.
- Photos / gallery — to choose a photo, and to save a result when you tap Save. FitAI only accesses the photos you pick.
- Tracking (iOS) — see section 6.
- Internet and network state — to connect to our servers.
You can withdraw any permission in your device settings; the related feature will stop working but the rest of the app keeps working.
8. How long we keep information
| Information | Kept for |
|---|---|
| Photos sent for AI processing | Not stored by us; held in memory only while the image is generated. Google may keep them briefly for abuse detection only. |
| Account, credit balance and credit history, sign-in details | Until you delete your account |
| Purchase records (product, date, store transaction ID) | Up to 7 years for accounting, tax and refunds; unlinked from you when you delete your account |
| Content reports | 90 days, then deleted automatically |
| Server logs (including IP address) | Up to 30 days |
| Analytics data | Up to 14 months |
| Advertising data | As set out in Google’s advertising policies |
| Data on your device | Until you delete it, delete your account, or uninstall the app |
9. Deleting your account
- In the app: Menu → Settings → Account → Delete Account. This immediately deletes your account, credit balance and history, subscription link and the data on your device.
- On the web: follow the steps at fitai-app.web.app/delete-account or email rifat.ipe@gmail.com. We complete email requests within 30 days.
- Deleting your account does not cancel a subscription. Cancel it in Google Play → Subscriptions or on iPhone in Settings → your name → Subscriptions.
- If you signed in with Apple, you can also stop using Sign in with Apple for FitAI in Settings → your name → Sign-In & Security → Sign in with Apple.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information; to object to or restrict certain processing; and to withdraw consent at any time (this does not affect processing already carried out). To use any of these rights, email rifat.ipe@gmail.com and include the Account ID shown at the bottom of Settings. We respond within 30 days (or sooner if your local law requires).
EEA and UK: you can also complain to your local data protection authority.
California and other US states: we do not sell personal information. Using the advertising identifier to show personalised ads may count as “sharing” for cross-context behavioural advertising; you can opt out through the consent and tracking settings in section 6. We will not discriminate against you for exercising your rights.
11. International transfers
Our servers and database are operated by Google in the United States, and our service providers may process information in other countries. Where required, these transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses offered by Google.
12. Security
All data is encrypted in transit (HTTPS/TLS). Your credit and account records can be read only by your own account and changed only by our servers; access to our systems is restricted to the developer. No method of storage or transmission is completely secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.
13. Children
FitAI is not intended for children under 13, or under 16 in the EEA and UK, and we do not knowingly collect their information. Please do not upload photos of children. If you believe a child has used FitAI or a child’s photo was uploaded, contact us and we will delete the related data.
14. Changes to this policy
We may update this policy as the app changes. We will change the date at the top of this page and, where the law requires, notify you before significant changes take effect.
15. Contact us
Rifat Hossain (Uplifeway), Dhaka, Bangladesh
Email: rifat.ipe@gmail.com